last executing test programs: 3.491301956s ago: executing program 0 (id=5838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x60}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010) socketpair(0x1, 0x80000, 0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}}, 0xd3536ee24c600b7d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42803, 0x0) write$tun(r4, &(0x7f0000000380)={@val={0x0, 0xc269227620b9dbba}, @val={0x3, 0x3, 0x4eb5, 0x3, 0x27a2, 0x80}, @llc={@llc={0xfe, 0x7e, "ed", "7ebe73086d2c4d0520226a88bbf97bcbeca642a4012147b483c10082001378dd7a4a57333d1adc20ae91c56f563f2bc4198421c6bfd2cdcb12d5c9b4b25e90afb663af148008bc4e6a8f650c467f7bdcb166c13e239cb1e36182a155a2961888366f78e457a5071305834852fe0207f868d03e472b0ba14fcc3c620c5b8bca940e03"}}}, 0x93) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x402c0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) recvmmsg(r3, &(0x7f0000006040)=[{{&(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/25, 0x19}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)=""/179, 0xb3}, {&(0x7f0000000980)=""/136, 0x88}, {&(0x7f0000000a40)}], 0x6, &(0x7f0000000b00)=""/103, 0x67}, 0x4}, {{&(0x7f0000000b80)=@ax25={{0x3, @null}, [@default, @remote, @null, @default, @netrom, @remote, @bcast, @rose]}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/17, 0x11}, {&(0x7f0000000c40)=""/13, 0xd}, {&(0x7f0000000c80)=""/16, 0x10}, {&(0x7f0000000cc0)=""/61, 0x3d}, {&(0x7f0000000d00)=""/105, 0x69}], 0x5}, 0x80000001}, {{&(0x7f0000000e00)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/160, 0xa0}, {&(0x7f0000003040)=""/205, 0xcd}], 0x5, &(0x7f00000031c0)=""/33, 0x21}, 0x6}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003200)=""/180, 0xb4}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/97, 0x61}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/190, 0xbe}, {&(0x7f0000005400)=""/210, 0xd2}, {&(0x7f0000005500)=""/14, 0xe}], 0x7}, 0xb74b}, {{&(0x7f00000055c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005640)=""/133, 0x85}, {&(0x7f0000005700)=""/84, 0x54}, {&(0x7f0000005780)=""/136, 0x88}, {&(0x7f0000005840)=""/19, 0x13}, {&(0x7f0000005880)=""/75, 0x4b}, {&(0x7f0000005900)=""/59, 0x3b}, {&(0x7f0000005940)=""/112, 0x70}], 0x7, &(0x7f0000005a40)=""/73, 0x49}, 0x6}, {{&(0x7f0000005ac0)=@nfc_llcp, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005b40)=""/224, 0xe0}, {&(0x7f0000005c40)=""/193, 0xc1}, {&(0x7f0000005d40)=""/43, 0x2b}, {&(0x7f0000005d80)=""/203, 0xcb}, {&(0x7f0000005e80)=""/116, 0x74}], 0x5, &(0x7f0000005f80)=""/138, 0x8a}, 0x4}], 0x6, 0x2, 0x0) getpeername$qrtr(r2, &(0x7f00000061c0), &(0x7f0000006200)=0xc) sendmsg$rds(r3, &(0x7f0000006800)={&(0x7f0000006240)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000006340)=[{&(0x7f0000006280)=""/184, 0xb8}], 0x1, &(0x7f0000006640)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000006380)=""/102, 0x66}, &(0x7f0000006400), 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xffff}, &(0x7f0000006440)=0x1, &(0x7f0000006480)=0x2, 0xffffffff, 0x0, 0x357, 0xca, 0x21, 0xfffffffffffffff8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x5}, &(0x7f00000064c0), &(0x7f0000006500)=0x9, 0x8, 0x9, 0xa9, 0x4, 0x8, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x6}, &(0x7f0000006540)=0x5, &(0x7f0000006580)=0x719, 0x7fffffffffffffff, 0x6af, 0x1, 0x3, 0xb, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x3}, &(0x7f00000065c0)=0x200, &(0x7f0000006600)=0x5, 0xf5c2, 0x0, 0x1, 0x7, 0x2a, 0xe311}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xbad}], 0x1a8, 0x800}, 0x2000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000006900)={&(0x7f0000006840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006880)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000006980)=0x0) sendmsg$nl_generic(r2, &(0x7f0000006b00)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006ac0)={&(0x7f00000069c0)={0xe0, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, {0x10}, [@typed={0x4, 0xdc}, @nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x54}, @nested={0x4, 0x73}]}, @typed={0x8, 0x120, 0x0, 0x0, @pid=r7}, @nested={0xb3, 0x84, 0x0, 0x1, [@generic="fdf5500670591357c2be178b60264b4040291a2d323b27543013af2fcb6e5c5623979467bf5b6ee2fa54fc1d4342b31a1c4bd5c08e2a9f6d06c35c40a46f09f213e80de2dbb98943eb4a855b89c21e839b92a700f371b3bc21ad85e00ebb5b195610b7cfac0a353afff0b7aff53ac381a9d5480567ce4dae72df8134021fd886ec329f8bc7dc89f5a101507f2df403", @nested={0x4, 0xd6}, @typed={0x7, 0x24, 0x0, 0x0, @str='rr\x00'}, @nested={0x4, 0x60}, @nested={0x4, 0xde}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40810}, 0x4044800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000006c40)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006bc0)={0x14, r9, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801c}, 0x80) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000006d40)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006d00)={&(0x7f0000006cc0)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x26900000, 0x4e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) write$tun(r4, &(0x7f0000006d80)={@val={0x0, 0x884c}, @val={0x2, 0x4, 0x4, 0x9, 0x141d, 0x6}, @ipv4=@udp={{0x16, 0x4, 0x3, 0x1d, 0xf4, 0x66, 0x0, 0x80, 0x11, 0x0, @empty, @private=0xa010101, {[@timestamp_addr={0x44, 0x44, 0xe5, 0x1, 0xf, [{@remote, 0x6}, {@multicast2, 0x3}, {@private=0xa010102}, {@local, 0x4}, {@local, 0x3}, {@empty, 0x7}, {@multicast1, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}]}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f9cec5d79e697942045bb548e051f3f8d7cf1f3f9f2c99037cc26c0581239a32", "c2eb2b7b2d12d4f035171c4dcceeb73d27411fe7d3c3d5c4897960e547c23d6267cba02eb20a328571aceb1801dc651f", "ac36bc22b11283872ecd7ec11cc0c5f06c33b485f6f8238bb5c0bf7a", {"365fcd09fdd4fe298ddbd2437c1642a2", "4ede677fc59def331d2af14c1faefe5a"}}}}}, 0x102) getsockname$packet(r3, &(0x7f0000006ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006f00)=0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000007040)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007000)={&(0x7f0000006f80)={0x70, 0x1405, 0x0, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000070c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000007100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000007240)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007200)={&(0x7f0000007180)={0x4c, 0x0, 0x204, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x800) 3.248818875s ago: executing program 2 (id=5840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000070850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.13997651s ago: executing program 0 (id=5842): r0 = socket(0x2c, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) 3.035171941s ago: executing program 2 (id=5845): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000400)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000580)=']', 0x1}], 0x1}, 0x4000840) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) getsockopt(r3, 0x3, 0x7f, &(0x7f0000000000)=""/54, &(0x7f0000000080)=0x36) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000400)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000580)=']', 0x1}], 0x1}, 0x4000840) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) getsockopt(r3, 0x3, 0x7f, &(0x7f0000000000)=""/54, &(0x7f0000000080)=0x36) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) (async) 3.001501807s ago: executing program 0 (id=5846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280", 0x11) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl(r1, 0x8b27, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 2.717151092s ago: executing program 2 (id=5850): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r1, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0x5a, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x23, 0x5, 0x3a) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x240008d0) 2.089244721s ago: executing program 2 (id=5857): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10c3, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10c3, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x8000) 2.06133598s ago: executing program 1 (id=5858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r3, 0x0, 0x0, 0x22, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) close(r0) 1.996665157s ago: executing program 4 (id=5859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000001cbe1ee702c6dee016829771988c1339b224526032c9a2bf5503a5fc41d7b75cef37e64bd724b55e27a306bdb11319007cc8442bc4245ac5da735e4a005ef1b1f29d5d48e8fe97122053e609db0db2a71d0cba6e6d9367e332ab8d2f5aee0068912b1a4b854d3ccd75d1b34c5793499b0f571367beb4bfab74fadaf7901d3f6aa732a92ed21c403bafa0166829eaa30db2c916d92169dec2dda55b8232f418f179d0665dce4429e7c53faa5289b40d77ae0dfd6c3019a6af8963a4d74c3aead1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) r5 = socket(0x0, 0x2, 0x64) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x6, 0x82, 0x1f, @loopback, @private2, 0x8000, 0x8000, 0x7fff, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x0, 0x589cc32d, 0x60, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x4, 0x8}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r16 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r16, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r17}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20}, 0x840) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r1, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff86, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r16, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}, 0x1, 0x0, 0x0, 0x4084880}, 0x80) 1.676639144s ago: executing program 0 (id=5861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) ioctl$TUNSETIFF(r1, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1.264810117s ago: executing program 4 (id=5862): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x34, r3, 0x90d, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x1ffe000, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x101d, 0xc867, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040008}, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c081}, 0x804) 1.197382245s ago: executing program 2 (id=5864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x30c9bc72b864387a}}, 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x2000c883) 1.114303745s ago: executing program 4 (id=5865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r4}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x7, 0x101}) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000000e00)={0x460, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x54fe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1867}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0x1}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x81, @remote, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff29a}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @mcast1, 0xcc}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8e5f, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2c16}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000008) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x74, r11, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x369}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb4d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x200000d0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 1.075440526s ago: executing program 3 (id=5866): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00', 0x4}) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xea6f}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008014) 1.017214698s ago: executing program 2 (id=5867): r0 = socket$inet(0x2, 0xa, 0x200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket(0x22, 0xa, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xe0000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20000000) ioctl$sock_netdev_private(r11, 0x89f0, &(0x7f00000003c0)="f13150400291c2ff828842cc60fabaa054fb51577fd5bd2a51c06b2c3c732d0bbd65067100df54214441d781ce7dafc4dc5250d70102565e7a14a1e13d354b48e6cd8731e9229d44c566bf8ce367286d680fbbcd7c203487be873bdaf5db3557b910128f433db3f556d9266da4710a8b0b111099a041bac72c5d7689ef59f262ba0132") ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000480)={r3, &(0x7f0000000140)='-oO,\'\x00', 0x2, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x7]}, {0x4, 0x101, 0xbb5, 0x3}}, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x2}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) 980.619528ms ago: executing program 1 (id=5868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000480850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 916.483997ms ago: executing program 4 (id=5869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05f9ffffff0000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000006240002800c00014000000000000000030800044000000011c5"], 0xf8}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) recvmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12021) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x28044042) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028cd7000fddbdf251c000000080003000300000008000400001000000800010080"], 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xe}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc059}, 0x4c080) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1c0, r12, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) 861.315939ms ago: executing program 3 (id=5870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000000a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060101000200000008000300ac1414aa0800060008000000f9f5de9bb29d6cf05a26c8b8165c8a7fd765b1aee4cadf9ab4"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000000a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060101000200000008000300ac1414aa0800060008000000f9f5de9bb29d6cf05a26c8b8165c8a7fd765b1aee4cadf9ab4"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) 839.558865ms ago: executing program 1 (id=5871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0xc, 0x18, 0x9}, {0xee, 0x4, 0x72, 0xd}, {0x1, 0xb, 0xc, 0x9}]}, 0x10) 676.881835ms ago: executing program 1 (id=5872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) listen(0xffffffffffffffff, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000ff0101000000000000000000e0000002000000000000000000fd5b3ed610c914b2809c69ff6453613000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r4}, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x7}, &(0x7f0000000100)=0x8) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xaca) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffed7, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x0, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc4) 576.588099ms ago: executing program 4 (id=5873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(&(0x7f0000000040), 0x100, 0x6d9) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x1, 0x3, 0x57, 0x8, 0xc6c, 0x4725}, @mpls={[], @generic="a8ea43aa2de60e7acab93d107dbd41dd93de4d13321504b2ec7511cb9b7dd8a6ac44a24ada1138a519ec57039535703af19118663ff90ee6036650aa7f8e19407a"}}, 0x4f) 576.133722ms ago: executing program 3 (id=5874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) 485.546945ms ago: executing program 0 (id=5876): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140b, 0x61d, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x44) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) close(r5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0x42}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) 485.085284ms ago: executing program 1 (id=5877): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xc38, @mcast2, 0x8}, 0x20) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x1, 0x1, 0x8, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x64, 0x0, 0x64, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@empty, @local, @private2, 0x160a3d34, 0x0, 0x865b, 0x100, 0x0, 0x0, r6}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)=ANY=[@ANYBLOB="1400000010000100000000000000000003010001000000000b0a010400000000000000000a0000090900010073797a3100000000140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80000) 369.729576ms ago: executing program 3 (id=5878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x0, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x0, 0x3, 0x1, 0x0, 0x18}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24}}}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 204.457138ms ago: executing program 1 (id=5879): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0xfef2}, 0x8000}], 0x1, 0x2052000, 0x0) (async, rerun: 64) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000380)={@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @loopback}, 0x4, 0x3, 0x3}}, {&(0x7f0000000180)=""/184, 0xb8}, &(0x7f0000000240), 0x21}, 0xa0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) unshare(0x78000a00) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r8, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 204.155144ms ago: executing program 3 (id=5880): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x26}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x26}}, 0x0) (async) 203.535199ms ago: executing program 4 (id=5881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000ff85850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 67.30939ms ago: executing program 0 (id=5882): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000004c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x6, 0x2, 0x40, 0x6, "6281e8e6c78ae7aad2ea3d35a13777ea5aad0831dcc75ca00a86b46512215bbfed54b29c9d47bfada9a5b7c59817ef62249f3ee370b5adf63a2478099629c51c238151121e0811f317b774728b510b84e1697ecb38e61bdaa9043b8459609a84ea2964ad822a04184ff65316a57b415d76fabaaeeb2fcd9bedf0150eade6b742"}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) getsockname(r0, &(0x7f00000005c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000640)=0x80) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="bdfa3ffc22bad1ad993813515ee8293cf848d73004c46fefa7d6c401d69c0bfae5aab47245cd0ee855a37e2a18da27787e4bc15aa7cc619a6b0df556834c562d8ac9cb74550a7938e3bb475ff46eafaa3f151a77c4d50d466b136a8e128f6d897a21efa4063864100671c44f315184edc83557181190851066e48500a8b667d98546325de1acb41fb8c09c7e41f3b25cc68f7d6dc3dc9bf9e25ea4", 0x9b}], 0x1, &(0x7f0000000200)=[{0x30, 0x10d, 0x3, "bb7c881d4cd9f3d26261162628f032964164d79356119ebb89b22f"}, {0x80, 0xff, 0x4, "95446134a56d153ad05a2765e9f1904c68bd2e68764c8699eb1a19b07adfc73520d20320a80758f5f11631f2d3aa37176c2c086059106f38f70285109d3d74cb01bd37ed62530ad4a774d3a17f3532ecfe8015bf3ff76fc9e25812d1672335abdc7185640a217f4767"}, {0xb8, 0x88, 0x659c, "2c9790edf250a4a0c5c64adfa00c74cda8341b5f266d2d3d787b8ac184e136d1c72ca7be19a7261d49fe48852d2a95f23a6950694569ad6c6972753611be015e6655e9c3a7bf961d008c514554312b30bad17c339654a545d413f6b03bb9ed0140bd4be77213a8bcc8780065bd0ed13afaa2428b1f56dc566a6e43fa623318337e2314e952286210561cb6b18019f38ca165c2da2599498dc4a51f549e2a0e4f76d663806a50895e"}, {0x38, 0x101, 0x80, "ae5a9d80ba36ce7bb1357719541d23ae49c868dcb6f712ea18b154a8c098b65a51fef88e5a"}, {0x48, 0x3a, 0x164, "d0bac422aaa7bc8b5a2c9c5ac21072444ec0977bab8fdfc3e4b7ee0a9185b6636d7efd5c4c291994df58f4ce06083ecc92743c83"}, {0x68, 0x3a, 0xde78, "7970c461f289a5a6c06f036cbfef4431172ea9fcf872f8a3db8f0dce945d43d5e5e8bd3691b88b62f9d163df192a0ced4b8a561dbaaa3ba5689d8dc4938ac354ef13281127ff8efb47acd0b57684a315464299f009c347"}], 0x250}, 0x800) 0s ago: executing program 3 (id=5883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000100000022bf000010010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000021000000000000000000000000e6dc3cef817e3400781482ce5b5e1565f0ac17c95cefbcb5264420584671217740a055167da8"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000001c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) kernel console output (not intermixed with test programs): NLM_F_CREATE should be specified when creating new route [ 493.322720][T19922] netlink: 'syz.0.3553': attribute type 10 has an invalid length. [ 493.346473][T19922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.369368][T19922] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 493.397836][T19929] netlink: 'syz.1.3554': attribute type 1 has an invalid length. [ 493.443549][T19929] netlink: 'syz.1.3554': attribute type 2 has an invalid length. [ 493.599932][T19223] veth0_vlan: entered promiscuous mode [ 493.663732][T19223] veth1_vlan: entered promiscuous mode [ 493.785924][T19223] veth0_macvtap: entered promiscuous mode [ 493.831729][T19223] veth1_macvtap: entered promiscuous mode [ 493.891187][T19223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.948431][T19223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.956433][T19941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3558'. [ 493.959345][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3558'. [ 493.993547][ T30] audit: type=1804 audit(1778237842.149:8): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3557" name="/newroot/91/cgroup.controllers" dev="tmpfs" ino=485 res=1 errno=0 [ 494.025572][ T30] audit: type=1800 audit(1778237842.149:9): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3557" name="cgroup.controllers" dev="tmpfs" ino=485 res=0 errno=0 [ 494.061367][ T6532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.084465][ T6532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.123359][ T6532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.142561][ T6532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.240651][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3560'. [ 494.559795][ T815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.596571][ T815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.638920][T19968] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.740049][ T6532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.784720][ T6532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.290876][T20007] netlink: 'syz.2.3570': attribute type 15 has an invalid length. [ 495.367785][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3573'. [ 496.804915][T20034] tipc: Started in network mode [ 496.812226][T20034] tipc: Node identity 4, cluster identity 4711 [ 496.850763][T20034] tipc: Node number set to 4 [ 496.990532][T20041] syz_tun: entered allmulticast mode [ 497.000061][T20034] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3575'. [ 497.021795][T20048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 497.398913][T20067] __nla_validate_parse: 1 callbacks suppressed [ 497.398938][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 497.511099][T20067] bond1: option xmit_hash_policy: invalid value (64) [ 497.532819][T20067] bond1 (unregistering): Released all slaves [ 497.666078][T20073] syzkaller1: entered promiscuous mode [ 497.672925][T20073] syzkaller1: entered allmulticast mode [ 497.863536][T20081] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 497.911802][T20090] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 497.937178][T20090] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 497.972964][T20088] syzkaller0: entered promiscuous mode [ 497.978714][T20088] syzkaller0: entered allmulticast mode [ 498.039651][T20090] veth0_to_bridge: entered promiscuous mode [ 498.058475][T20089] veth0_to_bridge: left promiscuous mode [ 498.129208][T20100] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3593'. [ 498.201635][T20103] netlink: 'syz.2.3594': attribute type 12 has an invalid length. [ 498.457344][T20118] netlink: 'syz.0.3597': attribute type 4 has an invalid length. [ 498.493951][T20118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3597'. [ 498.860998][T20139] xt_l2tp: invalid flags combination: 8 [ 498.880282][T20141] netlink: 'syz.3.3602': attribute type 49 has an invalid length. [ 499.057209][T20153] netlink: 'syz.1.3606': attribute type 21 has an invalid length. [ 499.108276][T20120] xt_hl: Unknown TTL match mode: 255 [ 499.134528][T20146] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 499.179622][T20146] bond1 (unregistering): Released all slaves [ 499.223972][T20153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3606'. [ 499.233788][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 499.497273][T20174] netlink: 'syz.3.3610': attribute type 2 has an invalid length. [ 499.506860][T20174] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 499.770613][T20194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3614'. [ 499.992866][T20207] netlink: 'syz.4.3619': attribute type 1 has an invalid length. [ 500.075501][T20207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.161631][T20209] bond1: (slave geneve2): making interface the new active one [ 500.196278][T20209] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 500.465358][T20229] netlink: 'syz.0.3624': attribute type 1 has an invalid length. [ 500.586693][T20230] bond2 (unregistering): Released all slaves [ 501.142421][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 501.247560][T20263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3634'. [ 501.354841][T20275] macvlan0: entered promiscuous mode [ 501.397685][T20275] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3636'. [ 501.617305][T20290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3642'. [ 501.640941][T20293] netem: change failed [ 501.681043][T20295] netlink: 'syz.0.3644': attribute type 4 has an invalid length. [ 504.114812][T20263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.786878][T20341] bond2: (slave bond_slave_1): Device is not our slave [ 504.802047][T20341] bond2: option active_slave: invalid value (bond_slave_1) [ 504.809866][T20356] __nla_validate_parse: 1 callbacks suppressed [ 504.809886][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3660'. [ 504.831696][T20341] bond2 (unregistering): Released all slaves [ 504.858737][T20356] netlink: 'syz.2.3660': attribute type 10 has an invalid length. [ 504.912134][T20356] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.928785][T20361] netlink: 'syz.1.3662': attribute type 1 has an invalid length. [ 504.971457][T20356] bond0: (slave team0): Enslaving as an active interface with an up link [ 505.109555][T20361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.245883][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 505.284505][T20378] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 505.305670][T20381] openvswitch: netlink: IP tunnel dst address not specified [ 505.347268][T20378] bond4: entered promiscuous mode [ 505.354044][T20378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.354404][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 505.370893][T20374] Bluetooth: MGMT ver 1.23 [ 505.400261][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 505.479546][T20378] bond4: (slave bridge2): making interface the new active one [ 505.488640][T20378] bridge2: entered promiscuous mode [ 505.500533][T20378] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 505.522095][T20389] netlink: 65031 bytes leftover after parsing attributes in process `syz.3.3669'. [ 505.628819][T20393] bond0: (slave gre0): refused to change device type [ 505.794495][T20403] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 505.808352][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 505.837053][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3673'. [ 505.881744][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 505.929578][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3673'. [ 505.997642][T20412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3676'. [ 506.242733][T20417] syzkaller0: entered promiscuous mode [ 506.259489][T20417] syzkaller0: entered allmulticast mode [ 506.616090][T20432] syz_tun: entered allmulticast mode [ 506.664911][T20430] syz_tun: left allmulticast mode [ 506.944123][T14532] IPVS: starting estimator thread 0... [ 507.062265][T20444] IPVS: using max 24 ests per chain, 57600 per kthread [ 507.588393][T20467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.656222][T20467] netlink: 'syz.1.3689': attribute type 39 has an invalid length. [ 507.684679][T20477] Bluetooth: MGMT ver 1.23 [ 507.727429][T20471] macvlan4: entered promiscuous mode [ 507.764331][T20471] macvlan4: entered allmulticast mode [ 507.848430][T20467] hsr_slave_0: left promiscuous mode [ 507.885169][T20467] hsr_slave_1: left promiscuous mode [ 508.466081][T20520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.571741][T20523] netlink: 'syz.2.3702': attribute type 58 has an invalid length. [ 508.741205][T20535] netlink: 'syz.4.3704': attribute type 1 has an invalid length. [ 508.876498][T20535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.638882][T20574] bond2: option min_links: invalid value (18446744073709551614) [ 509.660527][T20574] bond2: option min_links: allowed values 0 - 2147483647 [ 509.674995][T20574] bond2 (unregistering): Released all slaves [ 509.814257][T20584] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 509.879714][T20597] __nla_validate_parse: 8 callbacks suppressed [ 509.879738][T20597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3718'. [ 510.065879][T20600] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 510.522085][ T5636] Bluetooth: hci3: command 0x0405 tx timeout [ 510.884105][T20652] netlink: 'syz.2.3735': attribute type 1 has an invalid length. [ 510.941252][T20652] bond2: entered promiscuous mode [ 510.949895][T20652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.138402][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 511.525805][T20666] bridge4: entered promiscuous mode [ 511.545188][T20666] bridge4: entered allmulticast mode [ 511.564509][T20677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3744'. [ 511.839958][T20695] netlink: 'syz.3.3747': attribute type 1 has an invalid length. [ 512.149688][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 512.175722][T20695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.255532][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3752'. [ 512.266221][T20718] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3753'. [ 512.289328][T20720] netlink: 'syz.2.3752': attribute type 7 has an invalid length. [ 512.299939][T20720] netlink: 'syz.2.3752': attribute type 8 has an invalid length. [ 512.321169][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 512.331531][T20697] bond1: (slave veth3): Enslaving as an active interface with a down link [ 512.367227][T20708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 512.374929][T20708] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 512.594247][T20731] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 512.622767][T20731] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 512.734785][T20735] x_tables: duplicate underflow at hook 1 [ 512.971055][T20749] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3762'. [ 513.040389][T20749] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 513.128418][T20749] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 513.162505][T20749] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 513.222323][T20767] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 513.242636][T20749] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 513.266268][T20749] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 513.566654][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 513.841100][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3777'. [ 515.501627][T20844] can: request_module (can-proto-0) failed. [ 516.902315][T20798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.103417][T20850] netlink: 4684 bytes leftover after parsing attributes in process `syz.4.3793'. [ 517.160270][T20852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3792'. [ 517.203678][T20852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3792'. [ 517.513531][T20873] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 517.729058][T20886] validate_nla: 53 callbacks suppressed [ 517.729081][T20886] netlink: 'syz.4.3802': attribute type 13 has an invalid length. [ 518.088535][T20898] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3806'. [ 518.561107][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 518.613428][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 518.657305][T20925] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3816'. [ 518.671433][T20922] tipc: Enabled bearer , priority 0 [ 518.798878][T20922] syzkaller0: entered promiscuous mode [ 518.812437][T20922] syzkaller0: entered allmulticast mode [ 518.906036][T20922] tipc: Resetting bearer [ 518.934652][T20919] tipc: Resetting bearer [ 518.963334][T20919] tipc: Disabling bearer [ 519.555263][T20966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.593218][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.818505][T20988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3832'. [ 519.964411][T14531] IPVS: starting estimator thread 0... [ 519.988840][T20994] IPVS: sh: FWM 3 0x00000003 - no destination available [ 520.073321][T20995] IPVS: using max 28 ests per chain, 67200 per kthread [ 520.314926][T21016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3840'. [ 520.451299][T21023] bond0: entered allmulticast mode [ 520.459304][T21023] bond_slave_0: entered allmulticast mode [ 520.468582][T21023] bond_slave_1: entered allmulticast mode [ 520.476061][T21023] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 520.695415][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3844'. [ 520.893711][T21039] tipc: Enabling of bearer rejected, failed to enable media [ 522.004671][T21088] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 522.469870][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3858'. [ 522.523938][T21112] syzkaller0: entered promiscuous mode [ 522.550702][T21112] syzkaller0: entered allmulticast mode [ 522.982689][T21133] dvmrp8: entered allmulticast mode [ 523.010967][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 523.020782][T21137] netlink: 'syz.4.3864': attribute type 32 has an invalid length. [ 523.041112][T21137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 523.052422][T21135] macvlan2: entered allmulticast mode [ 523.057912][T21135] dummy0: entered allmulticast mode [ 523.063837][T21135] dummy0: entered promiscuous mode [ 523.156638][T21137] bond3: option coupled_control: invalid value (192) [ 523.167238][T21137] bond3 (unregistering): Released all slaves [ 523.510325][T21158] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3870'. [ 523.525134][T21158] netlink: 'syz.3.3870': attribute type 2 has an invalid length. [ 523.533990][T21158] netlink: 'syz.3.3870': attribute type 1 has an invalid length. [ 523.716220][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 523.729933][T21168] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 523.760084][T21169] netlink: 'syz.1.3873': attribute type 29 has an invalid length. [ 523.803399][T21169] netlink: 'syz.1.3873': attribute type 29 has an invalid length. [ 523.886141][T21169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3873'. [ 523.927432][T21177] netlink: 'syz.1.3873': attribute type 32 has an invalid length. [ 523.963047][T21177] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3873'. [ 524.114617][T21189] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 524.142481][T21189] netlink: 'syz.2.3877': attribute type 4 has an invalid length. [ 524.180836][T21189] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3877'. [ 524.209472][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 524.270736][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 524.367635][T21194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.389798][T21193] bond2: option mode: unable to set because the bond device is up [ 527.204610][T21343] netlink: 'syz.1.3925': attribute type 32 has an invalid length. [ 527.301959][T21340] netlink: 'syz.0.3924': attribute type 29 has an invalid length. [ 527.418885][T21348] xt_hashlimit: size too large, truncated to 1048576 [ 527.766876][T21378] __nla_validate_parse: 16 callbacks suppressed [ 527.766902][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3931'. [ 528.041474][T21382] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3932'. [ 528.146178][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 528.161667][T21395] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3936'. [ 528.180751][T21396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3934'. [ 528.208683][T21396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3934'. [ 528.383603][T21405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3938'. [ 528.407762][T21405] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 528.417799][T21410] validate_nla: 5 callbacks suppressed [ 528.417820][T21410] netlink: 'syz.0.3937': attribute type 3 has an invalid length. [ 528.442346][T21410] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3937'. [ 528.641639][T21423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3943'. [ 528.827661][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 529.007520][T21446] tipc: Enabling of bearer rejected, failed to enable media [ 529.346095][T21459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 529.357569][T21459] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 529.373035][T21459] gretap1: entered promiscuous mode [ 529.380543][T21459] gretap1: entered allmulticast mode [ 529.417598][T21462] pim6reg: entered allmulticast mode [ 529.635805][T21475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.643180][T21475] IPv6: NLM_F_CREATE should be set when creating new route [ 529.751775][T21482] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.298605][T21502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.442038][T21402] Bluetooth: hci3: command 0x0405 tx timeout [ 530.727186][T21515] xt_hashlimit: size too large, truncated to 1048576 [ 531.507910][T21552] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 531.529245][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.538032][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.752824][T21552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.791070][T21560] bond3: (slave geneve2): making interface the new active one [ 531.803600][T21560] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 531.997506][T21568] syzkaller0: entered promiscuous mode [ 532.026615][T21568] syzkaller0: entered allmulticast mode [ 532.107936][T21581] xt_hl: Unknown TTL match mode: 255 [ 532.599298][T21602] openvswitch: netlink: Flow key attr not present in new flow. [ 532.657570][T21606] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 532.693198][T21605] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.697017][T21655] __nla_validate_parse: 10 callbacks suppressed [ 533.697044][T21655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4000'. [ 535.750199][T21614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.766705][T21634] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 535.785214][T21634] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3998'. [ 535.803241][T21634] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3998'. [ 535.891069][T21669] macvlan0: entered promiscuous mode [ 535.978406][T21671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4002'. [ 536.024735][T21673] xt_hashlimit: size too large, truncated to 1048576 [ 536.091494][T21674] bridge_slave_0 (unregistering): left allmulticast mode [ 536.100773][T21682] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 536.134736][T21674] bridge_slave_0 (unregistering): left promiscuous mode [ 536.182400][T21674] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.335085][T21697] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 536.475716][T21706] netlink: 'syz.3.4012': attribute type 1 has an invalid length. [ 536.489419][T21697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.510983][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 536.568718][T21699] bond3: (slave veth3): Enslaving as an active interface with a down link [ 536.601619][T21703] bond3: (slave veth0_to_bond): making interface the new active one [ 536.624090][T21703] veth0_to_bond: entered promiscuous mode [ 536.630978][T21703] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 536.711347][T21706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.815973][T21697] bond3: (slave veth5): Enslaving as an active interface with a down link [ 537.036433][T21725] tipc: Enabled bearer , priority 0 [ 537.091295][T21731] dvmrp0: entered allmulticast mode [ 537.256121][T21742] tipc: Resetting bearer [ 537.272304][T21723] tipc: Disabling bearer [ 537.654922][T21767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 537.875062][T21774] bond3: option miimon: invalid value (18446744073709551585) [ 537.883687][T21774] bond3: option miimon: allowed values 0 - 2147483647 [ 537.896936][T21774] bond3 (unregistering): Released all slaves [ 537.921157][T21776] veth0_to_bond: entered allmulticast mode [ 537.940007][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4035'. [ 537.962737][T21780] syzkaller0: entered promiscuous mode [ 537.982097][T21780] syzkaller0: entered allmulticast mode [ 538.036752][T21780] netlink: 'syz.2.4033': attribute type 10 has an invalid length. [ 538.070154][T21780] veth1_macvtap: left promiscuous mode [ 538.105191][T21780] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 538.139331][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 538.149076][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4038'. [ 538.157981][T21787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4036'. [ 538.193518][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 538.618792][T21815] block nbd0: NBD_DISCONNECT [ 538.643646][T21815] block nbd0: Send disconnect failed -32 [ 538.663355][T21823] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16 [ 538.706496][T21815] block nbd0: shutting down sockets [ 538.725347][T21819] bridge5: port 1(veth7) entered blocking state [ 538.734684][T21819] bridge5: port 1(veth7) entered disabled state [ 538.744090][T21819] veth7: entered allmulticast mode [ 538.757119][T21819] veth7: entered promiscuous mode [ 538.795452][T21813] bond3: (slave veth0_to_bond): Releasing active interface [ 538.812774][T21813] veth0_to_bond: left promiscuous mode [ 538.834236][T21813] bridge5: port 2(veth0_to_bond) entered blocking state [ 538.851228][T21813] bridge5: port 2(veth0_to_bond) entered disabled state [ 538.886013][T21813] veth0_to_bond: entered allmulticast mode [ 538.912313][T21813] veth0_to_bond: entered promiscuous mode [ 539.356651][T21855] __nla_validate_parse: 1 callbacks suppressed [ 539.356674][T21855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4054'. [ 539.462178][T21864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4054'. [ 540.096894][ T6519] bond9 (unregistering): (slave geneve2): Releasing active interface [ 540.428245][ T6519] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.439009][ T6519] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.453562][ T6519] .` (unregistering): Released all slaves [ 540.465408][ T6519] bond1 (unregistering): Released all slaves [ 540.480635][ T6519] bond2 (unregistering): Released all slaves [ 540.496370][ T6519] bond3 (unregistering): Released all slaves [ 540.511626][ T6519] bond4 (unregistering): Released all slaves [ 540.539723][ T6519] bond5 (unregistering): Released all slaves [ 540.559414][ T6519] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 540.570580][ T6519] bond6 (unregistering): (slave bond7): Releasing active interface [ 540.580598][ T6519] bond6 (unregistering): Released all slaves [ 540.601046][ T6519] bond7 (unregistering): Released all slaves [ 540.617979][ T6519] bond8 (unregistering): Released all slaves [ 540.646095][ T6519] bond0 (unregistering): Released all slaves [ 540.660756][ T6519] bond9 (unregistering): Released all slaves [ 540.678224][ T6519] bond10 (unregistering): Released all slaves [ 540.695786][ T6519] bond11 (unregistering): Released all slaves [ 540.713933][ T6519] bond12 (unregistering): Released all slaves [ 540.729737][ T6519] bond13 (unregistering): Released all slaves [ 540.749233][ T6519] bond14 (unregistering): Released all slaves [ 540.768018][ T6519] bond15 (unregistering): Released all slaves [ 540.788320][ T6519] bond16 (unregistering): Released all slaves [ 540.806334][T21839] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 540.938999][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 541.026407][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 541.140744][ T6519] tipc: Disabling bearer [ 541.177537][ T6519] tipc: Left network mode [ 541.281358][T21904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4060'. [ 541.600891][T21915] netlink: 'syz.3.4062': attribute type 1 has an invalid length. [ 541.690172][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 542.120502][T21933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.502470][T21941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4068'. [ 543.387059][T21990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4079'. [ 543.398740][T21991] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4080'. [ 543.424416][T21990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4079'. [ 544.218668][ T6519] hsr_slave_0: left promiscuous mode [ 544.261276][ T6519] hsr_slave_1: left promiscuous mode [ 544.290123][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.341137][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.365306][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.401429][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.511578][ T6519] veth0_macvtap: left promiscuous mode [ 544.530305][ T6519] veth1_vlan: left promiscuous mode [ 544.536467][ T6519] veth0_vlan: left promiscuous mode [ 545.653665][T22068] tipc: Enabling of bearer rejected, failed to enable media [ 545.739920][T22073] __nla_validate_parse: 4 callbacks suppressed [ 545.739945][T22073] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4095'. [ 546.244032][ T6519] IPVS: stop unused estimator thread 0... [ 546.793142][T22114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.887754][T22122] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 547.136627][T22132] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4110'. [ 547.172297][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4110'. [ 547.355118][T22134] bridge_slave_0: left allmulticast mode [ 547.392254][T22134] bridge_slave_0: left promiscuous mode [ 547.427417][T22134] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.533632][T22134] bridge_slave_1: left allmulticast mode [ 547.572817][T22134] bridge_slave_1: left promiscuous mode [ 547.580664][T22134] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.637238][T22134] bond0: (slave bond_slave_0): Releasing backup interface [ 547.729506][T22134] bond0: (slave bond_slave_1): Releasing backup interface [ 547.860197][T22134] team0: Port device team_slave_0 removed [ 547.918537][T22134] team0: Port device team_slave_1 removed [ 547.946556][T22134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.979604][T22134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.028322][T22134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.060364][T22134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.090916][T22134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.343833][T22174] netlink: 'syz.0.4119': attribute type 10 has an invalid length. [ 548.433856][T22174] team0 (unregistering): Port device team_slave_0 removed [ 548.492467][T22174] team0 (unregistering): Port device team_slave_1 removed [ 548.571205][T22178] syzkaller0: entered promiscuous mode [ 548.625212][T22178] syzkaller0: entered allmulticast mode [ 549.124934][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 549.149729][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4125'. [ 549.204779][T22228] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 549.215565][T22228] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 549.495518][T22247] syzkaller0: entered promiscuous mode [ 549.501578][T22247] syzkaller0: entered allmulticast mode [ 549.962202][T21402] Bluetooth: hci1: command 0x0406 tx timeout [ 551.661464][T22215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.340058][T22308] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 552.365476][T22308] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4142'. [ 552.375330][T22308] openvswitch: netlink: Flow key attr not present in new flow. [ 552.385747][T22293] syzkaller1: entered promiscuous mode [ 552.394146][T22293] syzkaller1: entered allmulticast mode [ 552.418028][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'. [ 552.868578][T22324] x_tables: duplicate entry at hook 2 [ 552.966189][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'. [ 552.976572][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 553.024325][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.042507][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.052308][ T5768] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.202913][ T5768] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.250321][T22340] syzkaller0: entered promiscuous mode [ 553.259002][T22340] syzkaller0: entered allmulticast mode [ 553.442282][ T7831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 554.138392][T22388] netlink: 'syz.4.4166': attribute type 28 has an invalid length. [ 554.157471][T22388] netlink: 'syz.4.4166': attribute type 3 has an invalid length. [ 554.177000][T22388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4166'. [ 556.764156][T22376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.774493][T22396] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4169'. [ 556.922134][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 556.992780][T22439] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4177'. [ 557.103843][T22448] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4180'. [ 557.419828][T22465] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 557.579787][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 557.597868][T22474] macvlan2: entered allmulticast mode [ 557.604864][T22474] dummy0: entered allmulticast mode [ 557.610263][T22474] dummy0: entered promiscuous mode [ 557.722267][T22450] nbd0: detected capacity change from 0 to 63 [ 557.794617][ T5630] block nbd0: Receive control failed (result -104) [ 557.797696][T21402] block nbd0: Receive control failed (result -32) [ 557.997306][T22488] bond0: option ad_select: unable to set because the bond device is up [ 558.256135][T22495] x_tables: duplicate underflow at hook 2 [ 558.515287][T22512] netlink: 'syz.4.4198': attribute type 1 has an invalid length. [ 558.546899][T22514] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.563365][T22512] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4198'. [ 558.579014][T22514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4199'. [ 558.627902][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 559.441383][T22538] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4208'. [ 559.528334][T22543] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4209'. [ 559.582379][T22549] tipc: Started in network mode [ 559.597628][T22549] tipc: Node identity 9ede97ebe0de, cluster identity 4711 [ 559.615039][T22549] tipc: Enabled bearer , priority 11 [ 559.755487][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4215'. [ 559.784581][T22562] veth1_macvtap: left promiscuous mode [ 559.947525][T22572] netlink: 'syz.1.4217': attribute type 3 has an invalid length. [ 559.990015][T22572] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 560.000824][T22572] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4217'. [ 560.017216][T22578] netlink: 'syz.3.4220': attribute type 4 has an invalid length. [ 560.020538][T22572] NCSI netlink: No device for ifindex 813332851 [ 560.052701][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 560.065951][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 560.074473][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 560.083322][ T1693] block nbd0: Dead connection, failed to find a fallback [ 560.096585][T22583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4219'. [ 560.096822][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 560.116123][ T1693] block nbd0: shutting down sockets [ 560.126468][ T1693] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.140243][ T1693] Buffer I/O error on dev nbd0, logical block 0, async page read [ 560.151316][ T1693] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.161285][ T1693] Buffer I/O error on dev nbd0, logical block 1, async page read [ 560.169429][ T1693] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.178900][ T1693] Buffer I/O error on dev nbd0, logical block 3, async page read [ 560.187241][ T1693] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.197237][ T1693] Buffer I/O error on dev nbd0, logical block 2, async page read [ 560.206576][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 560.215234][T21477] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.227484][T21477] Buffer I/O error on dev nbd0, logical block 0, async page read [ 560.236375][T21477] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.247640][T21477] Buffer I/O error on dev nbd0, logical block 1, async page read [ 560.255970][T21477] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.265398][T21477] Buffer I/O error on dev nbd0, logical block 2, async page read [ 560.274357][T21477] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.284087][T21477] Buffer I/O error on dev nbd0, logical block 3, async page read [ 560.292470][T22587] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 560.308042][T21477] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.320221][T21477] Buffer I/O error on dev nbd0, logical block 0, async page read [ 560.329182][T21477] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.339498][T21477] Buffer I/O error on dev nbd0, logical block 1, async page read [ 560.351227][T21477] ldm_validate_partition_table(): Disk read failed. [ 560.376843][T21477] Dev nbd0: unable to read RDB block 0 [ 560.421476][T21477] nbd0: unable to read partition table [ 560.460133][T21477] ldm_validate_partition_table(): Disk read failed. [ 560.512193][T21477] Dev nbd0: unable to read RDB block 0 [ 560.534827][T21477] nbd0: unable to read partition table [ 560.590184][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 560.622628][ T5768] tipc: Node number set to 2113968107 [ 560.725642][T22593] netlink: 'syz.1.4223': attribute type 4 has an invalid length. [ 561.059011][T22623] sch_fq: defrate 0 ignored. [ 561.116425][T22628] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.130352][T22630] netlink: 'syz.0.4233': attribute type 21 has an invalid length. [ 561.169295][T22628] IPv6: Can't replace route, no match found [ 561.435351][T22642] netlink: 'syz.3.4234': attribute type 1 has an invalid length. [ 561.570704][T22642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.116496][T22678] netlink: 'syz.0.4245': attribute type 2 has an invalid length. [ 562.154242][T22681] netlink: 'syz.0.4245': attribute type 2 has an invalid length. [ 562.268058][T22688] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 564.522190][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.882206][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.234138][T22709] __nla_validate_parse: 9 callbacks suppressed [ 587.234160][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 587.254379][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 587.282567][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 587.292574][T22718] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 587.449637][T22718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.512439][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4258'. [ 587.542481][T22727] bond4: (slave geneve3): making interface the new active one [ 587.574779][T22727] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 587.666269][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4258'. [ 587.695999][T22739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.807346][T22735] syzkaller1: entered promiscuous mode [ 587.820728][T22750] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4261'. [ 587.836538][T22735] syzkaller1: entered allmulticast mode [ 587.937263][T22761] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 587.962442][T22761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4263'. [ 587.988249][T22761] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4263'. [ 588.716105][T22783] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 588.947765][T22811] Cannot find set identified by id 0 to match [ 589.294050][T22826] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 589.299044][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 589.318134][T22826] bond6 (unregistering): Released all slaves [ 589.379128][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 589.392078][T22838] netlink: 'syz.4.4277': attribute type 1 has an invalid length. [ 589.727310][T22850] syzkaller0: entered promiscuous mode [ 589.763463][T22850] syzkaller0: entered allmulticast mode [ 590.159410][T22872] syzkaller0: entered promiscuous mode [ 590.180294][T22872] syzkaller0: entered allmulticast mode [ 590.409256][T22895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.455892][T22895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.517223][T22899] ip6gretap0: entered promiscuous mode [ 590.595919][T22901] bond5: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 590.607500][T22901] bond5 (unregistering): Released all slaves [ 591.236022][T22940] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 591.267536][T22941] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 591.434169][T22949] netlink: 'syz.0.4308': attribute type 1 has an invalid length. [ 591.939626][T22968] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 592.525476][T23000] syzkaller0: entered promiscuous mode [ 592.554522][T23000] syzkaller0: entered allmulticast mode [ 592.610164][T22989] Bluetooth: MGMT ver 1.23 [ 592.732976][T23015] __nla_validate_parse: 19 callbacks suppressed [ 592.733000][T23015] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4326'. [ 592.944685][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 593.037181][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4328'. [ 593.233210][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4330'. [ 593.303596][T23045] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4332'. [ 593.324048][T23046] openvswitch: netlink: Missing valid actions attribute. [ 593.330450][T23045] netlink: 'syz.3.4332': attribute type 1 has an invalid length. [ 593.331564][T23046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.353071][T23044] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 593.369415][T23044] syzkaller1: Linktype set failed because interface is up [ 593.382198][T14532] syzkaller1: tun_net_xmit 90 [ 593.805866][T23071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 593.894892][T23071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 593.982172][T23075] syzkaller0: entered promiscuous mode [ 593.994137][T23075] syzkaller0: entered allmulticast mode [ 594.036593][T23075] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4341'. [ 594.258191][T23085] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4339'. [ 594.289920][T23083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4345'. [ 594.418064][T23094] tipc: Enabled bearer , priority 11 [ 594.479953][T23095] bridge0: port 3(gretap0) entered blocking state [ 594.515639][T23095] bridge0: port 3(gretap0) entered disabled state [ 594.556213][T23095] gretap0: entered allmulticast mode [ 594.585393][T23098] openvswitch: netlink: Invalid VLAN frame [ 594.593261][T23095] gretap0: entered promiscuous mode [ 594.618494][T23095] bridge0: port 3(gretap0) entered blocking state [ 594.627686][T23095] bridge0: port 3(gretap0) entered forwarding state [ 594.630710][T23098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.664330][T23102] netlink: 'syz.2.4351': attribute type 28 has an invalid length. [ 594.677100][T23102] netlink: 'syz.2.4351': attribute type 3 has an invalid length. [ 594.703214][T23098] dvmrp0: entered allmulticast mode [ 595.267229][T23122] netlink: 'syz.2.4357': attribute type 1 has an invalid length. [ 595.954689][T23159] lo: entered promiscuous mode [ 595.959913][T23159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.999134][T23165] blkio.reset_stats is deprecated [ 596.193424][T23176] netlink: 'syz.1.4376': attribute type 1 has an invalid length. [ 596.217959][T23174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.381388][T23185] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 596.393569][T23185] bond5 (unregistering): Released all slaves [ 596.506906][T23192] Cannot find set identified by id 0 to match [ 597.028352][T23217] gtp1: entered promiscuous mode [ 597.034846][T23217] gtp1: entered allmulticast mode [ 597.138385][T23217] gre1: entered promiscuous mode [ 597.156662][T23217] gre1: entered allmulticast mode [ 597.165839][T23226] netlink: 'syz.2.4393': attribute type 4 has an invalid length. [ 597.326687][T23226] .`: renamed from bond0 (while UP) [ 598.170398][T23282] __nla_validate_parse: 12 callbacks suppressed [ 598.170422][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 598.248540][T23239] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 598.262656][ T6543] bond0: (slave bond_slave_0): interface is now down [ 598.328064][ T6543] bond0: (slave bond_slave_1): interface is now down [ 598.470023][T23290] netlink: 'syz.2.4412': attribute type 39 has an invalid length. [ 598.523922][ T76] bond0: (slave bond_slave_0): interface is now down [ 598.539709][ T76] bond0: (slave bond_slave_1): interface is now down [ 598.702961][ T76] bond0: (slave bond_slave_0): interface is now down [ 598.712186][ T76] bond0: (slave bond_slave_1): interface is now down [ 598.748378][ T76] bond0: now running without any active interface! [ 599.482718][ T5630] Bluetooth: hci3: command 0x0405 tx timeout [ 599.543260][T23303] openvswitch: netlink: IPv4 tunnel dst address is zero [ 600.975906][T23271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.215033][T23320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4423'. [ 601.315880][T23326] netlink: 'syz.1.4421': attribute type 58 has an invalid length. [ 601.336191][T23326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4421'. [ 601.454859][T23322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.476797][T23332] netlink: 'syz.4.4425': attribute type 1 has an invalid length. [ 601.499645][T23332] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4425'. [ 601.527165][T23335] netlink: 'syz.3.4426': attribute type 15 has an invalid length. [ 601.636024][T23345] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 601.741442][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4430'. [ 601.760658][T23350] netlink: 'syz.3.4430': attribute type 49 has an invalid length. [ 601.868628][T23356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4433'. [ 602.152235][T23371] netlink: 'syz.0.4437': attribute type 39 has an invalid length. [ 602.179909][T23372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 602.230636][T23374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4438'. [ 602.247648][T23374] xt_cluster: node mask cannot exceed total number of nodes [ 602.467320][T23387] netlink: 'syz.0.4442': attribute type 7 has an invalid length. [ 602.503576][T23387] netlink: 'syz.0.4442': attribute type 7 has an invalid length. [ 602.503704][ T76] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.515028][T23386] syzkaller0: entered promiscuous mode [ 602.532530][T23389] netlink: 'syz.0.4442': attribute type 7 has an invalid length. [ 602.542685][T23386] syzkaller0: entered allmulticast mode [ 602.553697][ T76] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.567742][T23389] netlink: 'syz.0.4442': attribute type 7 has an invalid length. [ 602.643316][ T76] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.655945][ T76] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.746951][T23394] nbd1: detected capacity change from 0 to 127 [ 602.761386][ T5630] block nbd1: Receive control failed (result -32) [ 602.796352][T22986] block nbd1: Dead connection, failed to find a fallback [ 602.826571][T22986] block nbd1: shutting down sockets [ 602.836857][T22986] blk_print_req_error: 138 callbacks suppressed [ 602.836876][T22986] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.870783][T22986] buffer_io_error: 138 callbacks suppressed [ 602.870804][T22986] Buffer I/O error on dev nbd1, logical block 0, async page read [ 602.903627][T22986] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.937031][T22986] Buffer I/O error on dev nbd1, logical block 1, async page read [ 602.950059][T22986] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.968392][T23401] ip6gre0: entered promiscuous mode [ 602.980832][T22986] Buffer I/O error on dev nbd1, logical block 2, async page read [ 603.006194][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 603.027196][T22986] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.085795][T22986] Buffer I/O error on dev nbd1, logical block 3, async page read [ 603.127628][T22986] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.169775][T22986] Buffer I/O error on dev nbd1, logical block 0, async page read [ 603.207651][T22986] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.241633][T22986] Buffer I/O error on dev nbd1, logical block 1, async page read [ 603.274831][T22986] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.311157][T22986] Buffer I/O error on dev nbd1, logical block 2, async page read [ 603.352853][T22986] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.384498][T22986] Buffer I/O error on dev nbd1, logical block 3, async page read [ 603.399451][T22986] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.416282][T22986] Buffer I/O error on dev nbd1, logical block 0, async page read [ 603.439634][T22986] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.468653][T22986] Buffer I/O error on dev nbd1, logical block 1, async page read [ 603.492169][T23432] IPv6: NLM_F_REPLACE set, but no existing node found! [ 603.520145][T22986] ldm_validate_partition_table(): Disk read failed. [ 603.551231][T23432] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4454'. [ 603.574238][T22986] Dev nbd1: unable to read RDB block 0 [ 603.603519][T22986] nbd1: unable to read partition table [ 603.622987][T23432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4454'. [ 603.636814][T22986] ldm_validate_partition_table(): Disk read failed. [ 603.680114][T22986] Dev nbd1: unable to read RDB block 0 [ 603.711293][T22986] nbd1: unable to read partition table [ 603.736216][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4455'. [ 603.818043][T23449] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 603.825703][T23449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.138231][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4460'. [ 604.197085][T23465] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 604.447104][T23471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 604.829994][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4469'. [ 607.251138][T23486] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 607.767201][T23517] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4478'. [ 607.866852][T23530] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 607.878610][T23517] hsr_slave_1 (unregistering): left promiscuous mode [ 608.147345][T23542] netlink: 'syz.0.4482': attribute type 1 has an invalid length. [ 608.305928][T23542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.391103][T23544] bond5: (slave geneve0): making interface the new active one [ 608.416365][T23544] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 608.465085][ T6537] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 608.501154][ T6537] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 608.535431][ T6537] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 608.545639][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4489'. [ 608.575405][ T6537] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 608.598975][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4487'. [ 608.780448][T23553] team_slave_1: entered promiscuous mode [ 608.828788][T23553] team0: Port device team_slave_1 removed [ 608.866398][T23579] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.920955][T23576] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4491'. [ 609.083619][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4494'. [ 609.125475][T23601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4496'. [ 609.204247][T23597] syzkaller0: entered promiscuous mode [ 609.210208][T23597] syzkaller0: entered allmulticast mode [ 609.239780][T23607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4498'. [ 609.415705][T23617] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 610.612051][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 612.636234][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4502'. [ 612.729593][T23626] syzkaller0: entered promiscuous mode [ 613.007937][T23643] syzkaller0: entered promiscuous mode [ 613.034283][T23643] syzkaller0: entered allmulticast mode [ 613.197113][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'. [ 613.230663][T23643] xt_policy: too many policy elements [ 613.387438][T23665] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 613.423384][T23666] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 613.496591][T23670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.544095][T23665] bond6: entered promiscuous mode [ 613.554190][T23665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.735270][T23687] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4518'. [ 613.788674][T23691] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 613.855377][T23691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4521'. [ 613.857245][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 613.885721][T23691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4521'. [ 613.942857][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 613.957171][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 613.967236][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 613.977082][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 613.987664][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 614.010384][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 614.272148][T23711] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 615.090213][T23744] erspan0: entered promiscuous mode [ 615.873956][T23770] bond4: entered promiscuous mode [ 615.879466][T23770] bond4: entered allmulticast mode [ 615.892763][T23770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 615.987556][T23788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.357984][T23853] netlink: 'syz.0.4562': attribute type 1 has an invalid length. [ 617.653721][T23864] syzkaller0: entered promiscuous mode [ 617.677630][T23864] syzkaller0: entered allmulticast mode [ 617.797954][T23873] nbd: nbd1 already in use [ 617.983809][T23882] gre2: entered promiscuous mode [ 617.998041][T23882] gre2: entered allmulticast mode [ 618.046894][T23890] netlink: 'syz.1.4574': attribute type 4 has an invalid length. [ 618.376923][T23907] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 618.406931][T23911] netlink: 'syz.4.4581': attribute type 4 has an invalid length. [ 618.755362][T23915] __nla_validate_parse: 76 callbacks suppressed [ 618.755386][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4581'. [ 618.757141][ T76] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.777524][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 618.840596][ T76] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.872149][ T76] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.890838][ T76] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.942174][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4585'. [ 618.961349][T23933] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4588'. [ 618.990847][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4585'. [ 619.138137][T23944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 619.225115][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 619.267251][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 619.301098][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 619.381045][T23957] netlink: 'syz.4.4596': attribute type 13 has an invalid length. [ 619.476680][T23963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4597'. [ 619.576661][T23972] netlink: 'syz.2.4600': attribute type 1 has an invalid length. [ 619.658831][T23966] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 619.669944][T23966] syzkaller0: entered promiscuous mode [ 619.684156][T23966] syzkaller0: entered allmulticast mode [ 619.769900][T23957] tipc: Enabled bearer , priority 0 [ 619.818653][T23955] tipc: Resetting bearer [ 619.959412][T23955] tipc: Disabling bearer [ 620.009439][T23991] bridge5: entered promiscuous mode [ 620.015025][T23991] bridge5: entered allmulticast mode [ 620.113796][T24001] netlink: 'syz.4.4606': attribute type 1 has an invalid length. [ 620.186970][T23994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 620.519377][T24007] lo: Caught tx_queue_len zero misconfig [ 620.988418][T24037] netlink: 'syz.3.4616': attribute type 2 has an invalid length. [ 620.997428][T24037] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 621.174023][T24046] x_tables: unsorted underflow at hook 1 [ 621.293650][T24056] netlink: 'syz.1.4619': attribute type 1 has an invalid length. [ 621.874825][T24076] syzkaller0: entered promiscuous mode [ 621.914787][T24076] syzkaller0: entered allmulticast mode [ 622.154334][T24104] syzkaller0: entered promiscuous mode [ 622.192435][T24104] syzkaller0: entered allmulticast mode [ 622.207017][T24112] netlink: 'syz.0.4636': attribute type 4 has an invalid length. [ 622.226547][ T6520] bond0: (slave bond_slave_0): interface is now down [ 622.277011][ T6520] bond0: (slave bond_slave_1): interface is now down [ 622.480259][T24124] netlink: 'syz.0.4638': attribute type 32 has an invalid length. [ 622.482295][ T6520] bond0: (slave bond_slave_0): interface is now down [ 622.514247][ T6520] bond0: (slave bond_slave_1): interface is now down [ 622.665515][T24124] bond6: option coupled_control: invalid value (192) [ 622.682646][ T6532] bond0: (slave bond_slave_0): interface is now down [ 622.693044][ T6532] bond0: (slave bond_slave_1): interface is now down [ 622.711384][T24124] bond6 (unregistering): Released all slaves [ 622.872993][ T815] bond0: (slave bond_slave_0): interface is now down [ 622.889274][ T815] bond0: (slave bond_slave_1): interface is now down [ 622.906174][ T815] bond0: now running without any active interface! [ 623.074385][T24139] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 623.109185][T24139] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 623.157699][T24139] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 623.233856][T24150] netlink: 'syz.0.4646': attribute type 3 has an invalid length. [ 623.592192][T24166] syzkaller0: entered promiscuous mode [ 623.611420][T24166] syzkaller0: entered allmulticast mode [ 623.843233][T24178] __nla_validate_parse: 50 callbacks suppressed [ 623.843258][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4655'. [ 623.999666][T24178] bond5: option xmit_hash_policy: invalid value (64) [ 624.025370][T24178] bond5 (unregistering): Released all slaves [ 624.059562][T24188] validate_nla: 1 callbacks suppressed [ 624.059583][T24188] netlink: 'syz.2.4658': attribute type 1 has an invalid length. [ 624.104569][T24188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.124234][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4658'. [ 624.179012][T24192] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 624.204016][T24192] bond5: entered allmulticast mode [ 624.285941][T24188] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 624.308348][T24196] ip6tnl0: Caught tx_queue_len zero misconfig [ 624.379045][T24199] netlink: 'syz.4.4662': attribute type 3 has an invalid length. [ 624.386416][T24201] netlink: 'syz.3.4663': attribute type 32 has an invalid length. [ 624.433400][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4663'. [ 624.489348][T24201] bond5: option coupled_control: invalid value (255) [ 624.497860][T24201] bond5 (unregistering): Released all slaves [ 624.529535][T24207] syzkaller0: entered promiscuous mode [ 624.535546][T24207] syzkaller0: entered allmulticast mode [ 624.590280][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4666'. [ 624.600909][T24211] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 624.620877][T24211] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 624.819985][T24224] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4670'. [ 624.902299][T24226] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 624.923301][T24224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4670'. [ 624.965442][T24226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.009960][T24230] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 625.064413][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 625.142350][T24238] netlink: 'syz.0.4675': attribute type 1 has an invalid length. [ 625.158617][T24236] vlan4: entered promiscuous mode [ 625.164334][T24236] geneve1: entered promiscuous mode [ 625.170108][T24236] vlan4: entered allmulticast mode [ 625.176439][T24236] geneve1: entered allmulticast mode [ 625.218360][T24240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4675'. [ 625.239733][T24239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4675'. [ 625.259310][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4675'. [ 625.300616][T24238] bond7: entered promiscuous mode [ 625.312486][T24238] bond7: entered allmulticast mode [ 625.338658][T24238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 625.413544][T24250] netlink: 'syz.2.4677': attribute type 4 has an invalid length. [ 625.673982][T24255] tipc: Enabled bearer , priority 0 [ 625.771067][T24255] syzkaller0: entered promiscuous mode [ 625.777438][T24255] syzkaller0: entered allmulticast mode [ 625.784798][ T6520] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 625.785181][T24255] tipc: Resetting bearer [ 626.006123][ T6537] tipc: Resetting bearer [ 626.015897][T24252] tipc: Resetting bearer [ 629.041726][T24252] tipc: Disabling bearer [ 629.265354][T24297] netlink: 'syz.3.4691': attribute type 1 has an invalid length. [ 629.275838][T24297] __nla_validate_parse: 2 callbacks suppressed [ 629.275860][T24297] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4691'. [ 629.836414][T24297] tipc: Enabling of bearer rejected, failed to enable media [ 629.865801][T24317] syzkaller0: entered promiscuous mode [ 629.888641][T24317] syzkaller0: entered allmulticast mode [ 630.056818][T24324] sctp: [Deprecated]: syz.3.4698 (pid 24324) Use of int in max_burst socket option. [ 630.056818][T24324] Use struct sctp_assoc_value instead [ 630.273475][T24332] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 630.518063][T24346] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4706'. [ 630.682197][T24362] netlink: 'syz.2.4709': attribute type 1 has an invalid length. [ 630.872185][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4713'. [ 630.876818][T24373] vlan0: entered promiscuous mode [ 630.889247][T24373] hsr0: entered promiscuous mode [ 630.908059][T24375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4714'. [ 630.914718][T24373] vlan0: entered allmulticast mode [ 630.928483][T24373] hsr0: entered allmulticast mode [ 630.934496][T24373] hsr_slave_0: entered allmulticast mode [ 630.940383][T24373] hsr_slave_1: entered allmulticast mode [ 631.042658][T24372] team0: Port device team_slave_0 removed [ 631.328549][T24393] syzkaller0: entered promiscuous mode [ 631.340477][T24393] syzkaller0: entered allmulticast mode [ 631.543515][T24409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4722'. [ 631.614407][T24412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4722'. [ 631.994767][T24432] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 634.463064][T24404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.327919][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 635.486738][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 635.816979][T24476] netlink: 'syz.2.4734': attribute type 10 has an invalid length. [ 635.833392][T24476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4734'. [ 635.869783][T24476] openvswitch: netlink: Flow key attr not present in new flow. [ 635.901724][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4733'. [ 635.932920][T24474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.957187][T24474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.975811][T24484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.985760][T24490] netlink: 'syz.3.4737': attribute type 1 has an invalid length. [ 635.999402][T24477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.151228][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4737'. [ 636.152426][T24502] netlink: 'syz.2.4738': attribute type 4 has an invalid length. [ 636.190332][T24507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4740'. [ 636.223769][T24507] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 636.231849][T24494] netlink: 'syz.4.4739': attribute type 3 has an invalid length. [ 636.301709][T24498] bond5: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 636.464249][T24518] pimreg3: entered allmulticast mode [ 636.548333][T24520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4744'. [ 637.097028][T24520] vlan2: entered allmulticast mode [ 637.144022][T24520] gretap0: entered allmulticast mode [ 637.302329][T24526] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 637.322145][T24530] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 637.516560][T24544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4751'. [ 637.678635][T24551] tipc: Can't bind to reserved service type 2 [ 637.758760][T24554] netlink: 'syz.3.4754': attribute type 8 has an invalid length. [ 637.876523][T24561] nbd: illegal input index 2958377 [ 638.362311][T24590] Bluetooth: MGMT ver 1.23 [ 638.394207][T24590] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 638.437174][T24586] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 638.700393][T24607] Cannot find set identified by id 65534 to match [ 638.711581][T24607] Cannot find set identified by id 65534 to match [ 638.720043][T24607] Cannot find set identified by id 65534 to match [ 638.727906][T24607] Cannot find set identified by id 65534 to match [ 638.736730][T24607] Cannot find set identified by id 65534 to match [ 638.758212][T24613] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 638.774365][T24607] Cannot find set identified by id 65534 to match [ 638.788071][T24607] Cannot find set identified by id 65534 to match [ 638.797082][T24607] Cannot find set identified by id 65534 to match [ 638.805338][T24607] Cannot find set identified by id 65534 to match [ 638.813617][T24607] Cannot find set identified by id 65534 to match [ 638.847909][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4770'. [ 638.964587][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4775'. [ 639.315911][T24640] veth0_macvtap: Caught tx_queue_len zero misconfig [ 639.619535][T24655] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 639.776671][T24655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.036341][T24682] geneve4: entered promiscuous mode [ 640.059237][T24682] geneve4: entered allmulticast mode [ 640.089631][ T76] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 640.109108][T24693] netlink: 'syz.4.4799': attribute type 1 has an invalid length. [ 640.149398][ T6520] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 640.190220][ T6520] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 640.226791][ T6520] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 640.436758][T24700] __nla_validate_parse: 5 callbacks suppressed [ 640.436782][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4802'. [ 640.701729][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 640.742671][T24713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4806'. [ 640.905795][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 641.392350][T24735] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4810'. [ 641.431743][T24739] veth0_to_bridge: entered promiscuous mode [ 641.489407][T24737] veth0_to_bridge: left promiscuous mode [ 641.790991][T24752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4816'. [ 641.817379][T24752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4816'. [ 641.885370][T24755] : entered promiscuous mode [ 642.008908][T24764] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4819'. [ 642.046913][T24767] xt_cluster: node mask cannot exceed total number of nodes [ 642.175802][T24776] netlink: 'syz.2.4822': attribute type 5 has an invalid length. [ 642.598232][T24804] IPVS: set_ctl: invalid protocol: 12 172.30.0.5:0 [ 642.741046][T24808] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 643.304238][T24839] syzkaller0: entered promiscuous mode [ 643.310373][T24839] syzkaller0: entered allmulticast mode [ 643.319129][T24840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4838'. [ 643.319652][T24847] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4839'. [ 643.509887][T24854] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 643.918832][T24877] netlink: 'syz.4.4844': attribute type 4 has an invalid length. [ 643.970721][T24857] syzkaller0: entered promiscuous mode [ 643.993103][T24857] syzkaller0: entered allmulticast mode [ 644.061429][T24877] .`: renamed from bond0 (while UP) [ 644.385180][T24895] netlink: 'syz.1.4852': attribute type 1 has an invalid length. [ 644.653729][T24914] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 644.674482][T24914] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 644.714835][T24914] netlink: 'syz.1.4858': attribute type 8 has an invalid length. [ 645.084033][T24936] ksmbd: Unknown IPC event: 3, ignore. [ 645.176081][T24936] bridge2: entered promiscuous mode [ 645.207488][T24936] bridge2: entered allmulticast mode [ 645.233095][T24947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.539810][T24959] netlink: 'syz.1.4866': attribute type 4 has an invalid length. [ 645.605538][T24965] __nla_validate_parse: 15 callbacks suppressed [ 645.605561][T24965] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4869'. [ 645.644162][T24965] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4869'. [ 645.769538][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4870'. [ 646.140690][T24987] netlink: 'syz.0.4875': attribute type 13 has an invalid length. [ 646.244202][T24995] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 646.274499][ T7831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 646.292444][T24992] IPv6: sit1: Disabled Multicast RS [ 646.303646][T24992] sit1: entered allmulticast mode [ 646.562926][ T30] audit: type=1107 audit(1778237994.719:10): pid=25005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 646.603856][T25008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4881'. [ 646.718872][T25007] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 647.003492][ T7831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.069657][T25034] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4887'. [ 647.190689][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4888'. [ 647.324973][T25042] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 647.365446][T25042] bond6 (unregistering): Released all slaves [ 647.500212][T25059] xt_HMARK: proto mask must be zero with L3 mode [ 647.560594][T25059] xt_HMARK: proto mask must be zero with L3 mode [ 647.590560][T25064] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 647.601036][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 647.679964][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4897'. [ 648.194215][T25089] IPv6: addrconf: prefix option has invalid lifetime [ 648.208370][T25091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.215809][T25091] IPv6: NLM_F_CREATE should be set when creating new route [ 648.250929][T25094] syzkaller1: entered promiscuous mode [ 648.257469][T25094] syzkaller1: entered allmulticast mode [ 648.267723][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4906'. [ 648.285247][T25091] syzkaller0: Caught tx_queue_len zero misconfig [ 648.390123][T25106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4906'. [ 648.463261][T25097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 648.505692][T25100] ipvlan2: entered allmulticast mode [ 648.519101][T25100] bond6: entered allmulticast mode [ 649.074138][T25153] netlink: 'syz.4.4921': attribute type 49 has an invalid length. [ 649.204349][T25153] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 649.213548][T25153] ip6gretap0: entered promiscuous mode [ 649.219727][T25153] ip6gretap0: entered allmulticast mode [ 649.434325][T25167] ip6tnl0: Caught tx_queue_len zero misconfig [ 649.455826][T25172] netlink: 'syz.3.4930': attribute type 1 has an invalid length. [ 649.474478][T25168] netlink: 'syz.0.4926': attribute type 7 has an invalid length. [ 649.506117][T25168] netlink: 'syz.0.4926': attribute type 8 has an invalid length. [ 649.833261][T25193] netlink: 'syz.4.4932': attribute type 1 has an invalid length. [ 651.648481][T25255] syzkaller0: entered promiscuous mode [ 651.670987][T25255] syzkaller0: entered allmulticast mode [ 652.068546][T25288] netlink: 'syz.2.4950': attribute type 7 has an invalid length. [ 652.086070][T25294] __nla_validate_parse: 11 callbacks suppressed [ 652.086096][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4949'. [ 652.129623][T25293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4951'. [ 652.345701][T25293] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4951'. [ 652.592639][T25317] FAULT_INJECTION: forcing a failure. [ 652.592639][T25317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.598577][T25316] netlink: 'syz.1.4957': attribute type 15 has an invalid length. [ 652.630491][T25317] CPU: 0 UID: 0 PID: 25317 Comm: syz.0.4956 Not tainted syzkaller #0 PREEMPT(full) [ 652.630524][T25317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.630538][T25317] Call Trace: [ 652.630546][T25317] [ 652.630556][T25317] dump_stack_lvl+0xe8/0x150 [ 652.630589][T25317] should_fail_ex+0x412/0x560 [ 652.630624][T25317] _copy_from_user+0x2d/0xb0 [ 652.630656][T25317] ___sys_sendmsg+0x1c6/0x360 [ 652.630686][T25317] ? __lock_acquire+0x6b5/0x2cf0 [ 652.630714][T25317] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.630783][T25317] ? __fget_files+0x2a/0x420 [ 652.630808][T25317] ? __fget_files+0x3a0/0x420 [ 652.630845][T25317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 652.630878][T25317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.630918][T25317] ? __pfx_ksys_write+0x10/0x10 [ 652.630958][T25317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.630987][T25317] do_syscall_64+0x15f/0xf80 [ 652.631016][T25317] ? trace_irq_disable+0x3b/0x140 [ 652.631048][T25317] ? clear_bhb_loop+0x40/0x90 [ 652.631075][T25317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.631097][T25317] RIP: 0033:0x7fe747f9cdd9 [ 652.631128][T25317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.631147][T25317] RSP: 002b:00007fe748f20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.631170][T25317] RAX: ffffffffffffffda RBX: 00007fe748216090 RCX: 00007fe747f9cdd9 [ 652.631186][T25317] RDX: 000000002004c800 RSI: 0000200000000340 RDI: 0000000000000005 [ 652.631199][T25317] RBP: 00007fe748f20090 R08: 0000000000000000 R09: 0000000000000000 [ 652.631213][T25317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.631226][T25317] R13: 00007fe748216128 R14: 00007fe748216090 R15: 00007ffe33f49e38 [ 652.631261][T25317] [ 652.633411][T25316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4957'. [ 652.977914][T25330] netlink: 'syz.1.4961': attribute type 1 has an invalid length. [ 653.022551][T25326] netlink: 'syz.3.4959': attribute type 4 has an invalid length. [ 653.037394][T25326] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4959'. [ 653.057161][T25335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4960'. [ 653.078263][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4960'. [ 653.109036][T25335] bridge_slave_1: left promiscuous mode [ 653.135918][T25335] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.159561][T25335] bridge_slave_0: left allmulticast mode [ 653.168820][T25335] bridge_slave_0: left promiscuous mode [ 653.184058][T25335] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.251648][T25344] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4964'. [ 653.407496][T25349] syzkaller0: entered promiscuous mode [ 653.414910][T25349] syzkaller0: entered allmulticast mode [ 653.421057][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4966'. [ 653.456894][T25349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4966'. [ 657.021251][T25387] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 657.312752][T25404] veth0: entered promiscuous mode [ 657.596379][T25417] __nla_validate_parse: 2 callbacks suppressed [ 657.596406][T25417] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4984'. [ 657.661527][T25420] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4984'. [ 657.988122][T25395] veth0: left promiscuous mode [ 658.237569][T25428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4986'. [ 658.814310][T25447] IPVS: set_ctl: invalid protocol: 0 172.20.20.9:25 [ 658.824950][T25445] syzkaller0: entered promiscuous mode [ 658.850689][T25445] syzkaller0: entered allmulticast mode [ 659.494755][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4996'. [ 659.851501][T25475] netlink: 'syz.1.4999': attribute type 13 has an invalid length. [ 659.991154][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.090220][T25480] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 660.119391][T25480] syzkaller0: entered promiscuous mode [ 660.134565][T25480] syzkaller0: entered allmulticast mode [ 660.168679][T25475] tipc: Enabled bearer , priority 0 [ 660.213593][T25474] tipc: Resetting bearer [ 660.267392][T25474] tipc: Disabling bearer [ 660.385684][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5003'. [ 661.064866][T25522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.086151][T25525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.120293][T25522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5011'. [ 661.220069][T25519] syzkaller0: entered promiscuous mode [ 661.246690][T25519] syzkaller0: entered allmulticast mode [ 661.268426][T25528] tipc: Enabled bearer , priority 0 [ 661.507149][T25533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5014'. [ 661.836133][T25518] tipc: Resetting bearer [ 661.876737][T25542] openvswitch: netlink: Unknown key attributes 2 [ 661.917779][T25518] tipc: Disabling bearer [ 662.845648][T25598] veth0: entered promiscuous mode [ 662.884486][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5029'. [ 663.572073][T25623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 664.117284][T25645] netlink: 'syz.1.5038': attribute type 4 has an invalid length. [ 664.129367][T25645] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5038'. [ 664.273433][T25654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5040'. [ 664.300174][T25654] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.318357][T25654] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.325682][T25654] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 664.336933][T25654] bond9: (slave vti0): Error -95 calling set_mac_address [ 664.458757][T25657] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 664.471087][T25657] bond10 (unregistering): Released all slaves [ 665.261312][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'. [ 665.342203][T25570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.008937][T25708] wg2: Caught tx_queue_len zero misconfig [ 666.106521][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5059'. [ 666.138116][T25718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5059'. [ 666.202380][T25718] geneve2: entered promiscuous mode [ 666.220436][T25718] geneve2: entered allmulticast mode [ 666.641958][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.647043][T25740] netlink: 'syz.4.5070': attribute type 1 has an invalid length. [ 666.663412][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.671539][T25740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'. [ 666.736126][T25746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5071'. [ 666.754117][T25740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.204948][T25770] netlink: 'syz.4.5078': attribute type 1 has an invalid length. [ 667.262389][T25776] batadv_slave_0: Caught tx_queue_len zero misconfig [ 667.445350][T25785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5081'. [ 667.590692][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5083'. [ 667.640126][T25794] netlink: 'syz.3.5082': attribute type 11 has an invalid length. [ 667.753053][T25794] netlink: 'syz.3.5082': attribute type 11 has an invalid length. [ 667.817645][T25803] ipt_rpfilter: unknown options [ 667.934639][T25808] netlink: 'syz.1.5087': attribute type 29 has an invalid length. [ 667.965681][T25808] __nla_validate_parse: 4 callbacks suppressed [ 667.965705][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 667.994215][T25808] netlink: 'syz.1.5087': attribute type 29 has an invalid length. [ 668.021648][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 668.283474][T25818] netlink: 'syz.1.5091': attribute type 1 has an invalid length. [ 668.328138][T25820] sctp: [Deprecated]: syz.2.5092 (pid 25820) Use of int in maxseg socket option. [ 668.328138][T25820] Use struct sctp_assoc_value instead [ 668.541631][T25834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5096'. [ 668.565988][T25835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5096'. [ 668.596590][T25834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'. [ 668.627358][T25835] veth1_macvtap: entered allmulticast mode [ 668.705492][T25834] veth1_macvtap: left allmulticast mode [ 668.799134][T25854] lo: Caught tx_queue_len zero misconfig [ 668.864263][T25860] x_tables: duplicate underflow at hook 1 [ 668.902931][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5102'. [ 669.187117][T25869] syzkaller0: entered promiscuous mode [ 669.197349][T25869] syzkaller0: entered allmulticast mode [ 669.456287][T25885] netlink: 'syz.3.5112': attribute type 1 has an invalid length. [ 669.542350][T25889] openvswitch: netlink: Unknown key attributes 2 [ 669.672859][T25898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5115'. [ 669.769119][T25898] bond10: entered allmulticast mode [ 669.877522][T25898] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5115'. [ 669.888584][T25913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5118'. [ 670.014310][T25902] veth5: entered allmulticast mode [ 670.037581][T25902] bond10: (slave veth5): Enslaving as an active interface with an up link [ 670.051037][T25909] bond10 (unregistering): (slave veth5): Releasing backup interface [ 670.084060][T25909] bond10 (unregistering): Released all slaves [ 670.084754][T25927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.163765][T25913] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 670.267732][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'. [ 670.299641][T25929] syzkaller0: entered promiscuous mode [ 670.306187][T25929] syzkaller0: entered allmulticast mode [ 670.399790][T25934] ip6tnl0: Caught tx_queue_len zero misconfig [ 670.407417][T25938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.466915][T25938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.606278][T25940] vcan0: entered promiscuous mode [ 670.628677][T25940] vcan0: entered allmulticast mode [ 670.750705][T25953] vlan2: entered allmulticast mode [ 670.762511][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 670.775346][T25953] bond0: entered allmulticast mode [ 671.351105][T25980] netlink: 'syz.0.5136': attribute type 1 has an invalid length. [ 671.390391][T25980] 8021q: adding VLAN 0 to HW filter on device bond8 [ 671.409101][T25980] ipvlan0: entered allmulticast mode [ 671.414682][T25980] bond8: entered allmulticast mode [ 671.436209][T25980] bond8: (slave bridge0): making interface the new active one [ 671.444449][T25980] bridge0: entered allmulticast mode [ 671.457252][T25980] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 671.469089][T25986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.519656][T25990] netlink: 'syz.3.5140': attribute type 4 has an invalid length. [ 671.561301][T25990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 671.612893][T25988] syzkaller0: entered promiscuous mode [ 671.640558][T25988] syzkaller0: entered allmulticast mode [ 672.049914][T26017] netlink: 'syz.4.5150': attribute type 1 has an invalid length. [ 672.073817][T26018] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 672.126934][T26017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.219265][T26026] bond0: (slave geneve3): making interface the new active one [ 672.234237][T26026] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 672.316408][T26031] gtp0: entered promiscuous mode [ 672.349041][T26031] gtp0: entered allmulticast mode [ 672.603812][T26049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 672.639737][T26049] : entered promiscuous mode [ 672.669314][T26052] tipc: New replicast peer: 255.255.255.255 [ 672.680752][T26052] tipc: Enabled bearer , priority 10 [ 673.069927][T26071] erspan0: entered promiscuous mode [ 673.088425][T26076] veth1_macvtap: left promiscuous mode [ 673.318517][T26081] x_tables: unsorted entry at hook 2 [ 673.319993][T26086] sit1: entered promiscuous mode [ 673.351204][T26086] __nla_validate_parse: 11 callbacks suppressed [ 673.351231][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5168'. [ 673.374756][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5169'. [ 673.408033][T26084] syzkaller0: entered promiscuous mode [ 673.420275][T26084] syzkaller0: entered allmulticast mode [ 673.463590][T26088] sit1: left promiscuous mode [ 673.527089][T26093] netlink: 'syz.2.5173': attribute type 1 has an invalid length. [ 673.588920][T26098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5173'. [ 673.708544][T26093] bond7: entered promiscuous mode [ 673.715492][T26093] 8021q: adding VLAN 0 to HW filter on device bond7 [ 673.724980][T26098] bond7: entered allmulticast mode [ 673.798131][T26108] bond7: (slave bridge7): making interface the new active one [ 673.809287][T26108] bridge7: entered promiscuous mode [ 673.818943][T26108] bridge7: entered allmulticast mode [ 673.830198][T26108] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 674.313032][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5183'. [ 674.378485][T26136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5185'. [ 674.405543][T26137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'. [ 674.462713][T26141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5183'. [ 674.497425][T26141] ip6gre0: Caught tx_queue_len zero misconfig [ 674.547506][T26147] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5187'. [ 674.589267][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 674.652314][T26149] syzkaller0: entered promiscuous mode [ 674.678018][T26149] syzkaller0: entered allmulticast mode [ 674.877093][T26165] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 674.895374][T26165] netlink: 'syz.3.5192': attribute type 3 has an invalid length. [ 674.923705][T26165] netlink: 'syz.3.5192': attribute type 7 has an invalid length. [ 674.937180][T26165] netlink: 'syz.3.5192': attribute type 8 has an invalid length. [ 674.964301][T26165] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5192'. [ 674.977011][T26165] NCSI netlink: No device for ifindex 131092 [ 675.023755][T26165] syzkaller0: entered promiscuous mode [ 675.037840][T26165] syzkaller0: entered allmulticast mode [ 675.047185][T26173] netlink: 'syz.4.5195': attribute type 21 has an invalid length. [ 675.187298][T26176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.520863][T26194] netlink: 'syz.2.5203': attribute type 1 has an invalid length. [ 675.638647][T26194] 8021q: adding VLAN 0 to HW filter on device bond8 [ 675.678933][T26201] bond8: (slave gretap4): making interface the new active one [ 675.694376][T26201] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 675.719512][T26205] syzkaller0: entered promiscuous mode [ 675.742227][T26205] syzkaller0: entered allmulticast mode [ 676.167868][T26223] veth1_to_bridge: entered allmulticast mode [ 676.296927][T26231] netlink: 'syz.4.5214': attribute type 2 has an invalid length. [ 676.613807][T26254] netlink: 'syz.0.5220': attribute type 10 has an invalid length. [ 676.633378][T26252] syzkaller0: entered promiscuous mode [ 676.647686][T26252] syzkaller0: entered allmulticast mode [ 676.853980][T26262] syzkaller0: entered promiscuous mode [ 676.868672][T26262] syzkaller0: entered allmulticast mode [ 677.266046][T26288] netlink: 'syz.1.5233': attribute type 21 has an invalid length. [ 677.318097][T26288] netlink: 'syz.1.5233': attribute type 1 has an invalid length. [ 677.340208][T26292] syzkaller0: entered promiscuous mode [ 677.356173][T26292] syzkaller0: entered allmulticast mode [ 678.440339][T26337] __nla_validate_parse: 27 callbacks suppressed [ 678.440363][T26337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5249'. [ 678.642693][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5250'. [ 678.674461][T26342] syzkaller0: entered promiscuous mode [ 678.696725][T26342] syzkaller0: entered allmulticast mode [ 678.799723][T26348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5252'. [ 679.806110][T26385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 679.847238][T26385] syzkaller0: entered promiscuous mode [ 679.868629][T26385] syzkaller0: entered allmulticast mode [ 680.715127][T26416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.746299][T26417] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5271'. [ 680.749402][T26416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.783669][T26417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5271'. [ 680.953384][T26423] Cannot find add_set index 65532 as target [ 681.029369][T26423] netlink: 'syz.0.5272': attribute type 1 has an invalid length. [ 681.438210][T26444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5275'. [ 681.973986][T26469] netlink: 'syz.2.5280': attribute type 21 has an invalid length. [ 681.987656][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5283'. [ 682.009883][T26469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5280'. [ 682.212062][T26481] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 682.403796][T26490] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5287'. [ 682.425365][T26481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 682.640927][T26488] bond10: entered promiscuous mode [ 682.652091][T26488] bond10: entered allmulticast mode [ 682.665803][T26488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 682.830070][T26505] netlink: 'syz.0.5292': attribute type 1 has an invalid length. [ 682.887795][T26505] 8021q: adding VLAN 0 to HW filter on device bond10 [ 682.987530][T26512] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 683.247170][T26521] netlink: 'syz.2.5296': attribute type 15 has an invalid length. [ 683.298397][T26525] x_tables: duplicate underflow at hook 1 [ 683.508716][T26539] gtp0: entered promiscuous mode [ 683.524644][T26539] gtp0: entered allmulticast mode [ 684.053857][T26567] __nla_validate_parse: 2 callbacks suppressed [ 684.053882][T26567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5312'. [ 684.268519][T26576] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5316'. [ 684.314094][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 684.338595][T26576] netlink: 'syz.1.5316': attribute type 3 has an invalid length. [ 684.434806][T26576] syzkaller1: entered promiscuous mode [ 684.440351][T26576] syzkaller1: entered allmulticast mode [ 684.772862][T26600] bond9: (slave bond_slave_1): Device is not bonding slave [ 684.780690][T26600] bond9: option active_slave: invalid value (bond_slave_1) [ 684.790260][T26600] bond9 (unregistering): Released all slaves [ 684.966342][T26614] netlink: 'syz.0.5328': attribute type 7 has an invalid length. [ 685.081095][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5330'. [ 685.094857][T26619] netlink: 'syz.4.5330': attribute type 4 has an invalid length. [ 685.207740][T26627] xt_hashlimit: size too large, truncated to 1048576 [ 685.547842][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5339'. [ 685.732294][T26650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5339'. [ 685.826204][T26654] ip6_vti0: entered allmulticast mode [ 685.925229][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5341'. [ 686.097767][T26669] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 686.199248][T26651] ip6_vti0: left allmulticast mode [ 686.331158][T26680] gretap0: left allmulticast mode [ 686.356917][T26680] gretap0: left promiscuous mode [ 686.368038][T26680] bridge0: port 3(gretap0) entered disabled state [ 686.391383][T26680] bridge_slave_0: left allmulticast mode [ 686.397654][T26680] bridge_slave_0: left promiscuous mode [ 686.404250][T26680] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.424283][T26680] bridge_slave_1: left allmulticast mode [ 686.434966][T26680] bridge_slave_1: left promiscuous mode [ 686.440982][T26680] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.458554][T26680] veth0_to_bond: left allmulticast mode [ 686.465243][T26680] veth0_to_bond: left promiscuous mode [ 686.471192][T26680] bridge5: port 2(veth0_to_bond) entered disabled state [ 686.488292][T26680] .`: (slave bond_slave_0): Releasing backup interface [ 686.508891][T26680] .`: (slave bond_slave_1): Releasing backup interface [ 686.536284][T26680] team0: Port device team_slave_1 removed [ 686.557488][T26680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.574771][T26680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.612358][T26680] bond1: (slave geneve2): Releasing active interface [ 686.668537][T26680] bond3: (slave veth3): Releasing active interface [ 686.675958][T26680] bond3: (slave veth3): the permanent HWaddr of slave - fa:43:24:73:c7:3f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 686.706020][T26680] bond3: (slave veth5): Releasing active interface [ 686.736155][T26680] veth7: left allmulticast mode [ 686.741159][T26680] veth7: left promiscuous mode [ 686.746934][T26680] bridge5: port 1(veth7) entered disabled state [ 686.758946][T26680] bond0: (slave geneve3): Releasing active interface [ 686.943012][T26697] syzkaller0: entered promiscuous mode [ 686.949101][T26697] syzkaller0: entered allmulticast mode [ 687.030589][T26712] netlink: 'syz.4.5349': attribute type 10 has an invalid length. [ 690.617701][T26712] .`: (slave bridge0): Enslaving as an active interface with a down link [ 690.790576][T26725] sctp: [Deprecated]: syz.2.5352 (pid 26725) Use of int in maxseg socket option. [ 690.790576][T26725] Use struct sctp_assoc_value instead [ 690.820272][T26726] xt_l2tp: missing protocol rule (udp|l2tpip) [ 690.835254][T26730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5352'. [ 690.859101][T26725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5352'. [ 690.896685][T26730] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 690.926502][T26725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 690.948466][T26736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5357'. [ 691.241581][T26752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5360'. [ 691.275039][T26744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 691.300540][T26762] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5363'. [ 691.391081][T26766] H: renamed from dummy0 (while UP) [ 691.590943][T26775] vlan6: entered allmulticast mode [ 691.605610][T26775] bond0: entered allmulticast mode [ 691.631306][T26775] bond_slave_0: entered allmulticast mode [ 691.658089][T26775] bond_slave_1: entered allmulticast mode [ 691.698593][T26775] netlink: 'syz.1.5366': attribute type 1 has an invalid length. [ 691.858152][T26775] 8021q: adding VLAN 0 to HW filter on device bond11 [ 691.898241][T26799] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 691.920518][T26796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5371'. [ 692.219864][T26820] netlink: 'syz.3.5374': attribute type 4 has an invalid length. [ 692.281917][T26807] bond6: entered promiscuous mode [ 692.315998][T26807] bond6: entered allmulticast mode [ 692.419724][T26831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.449837][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5378'. [ 692.477627][T26831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.631377][T26845] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.638710][T26845] bridge0: port 2(bridge_slave_1) entered listening state [ 692.793437][T26853] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5382'. [ 692.819091][T26856] netlink: 'syz.3.5384': attribute type 3 has an invalid length. [ 692.832385][T26856] netlink: 'syz.3.5384': attribute type 3 has an invalid length. [ 693.126487][T26869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.401720][T26877] netlink: 'syz.3.5388': attribute type 9 has an invalid length. [ 693.427315][T26884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5391'. [ 693.441169][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5390'. [ 693.483310][T26881] bridge_slave_1: left allmulticast mode [ 693.496282][T26881] bridge_slave_1: left promiscuous mode [ 693.510911][T26881] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.558162][T26881] bridge_slave_0: left allmulticast mode [ 693.576631][T26881] bridge_slave_0: left promiscuous mode [ 693.594747][T26881] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.318615][T26905] veth0: entered promiscuous mode [ 694.438076][T26894] veth0: left promiscuous mode [ 694.668112][T26923] netlink: 'syz.4.5401': attribute type 1 has an invalid length. [ 694.782945][T26928] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 694.869003][T26935] netlink: 'syz.3.5404': attribute type 1 has an invalid length. [ 695.576656][T26986] netlink: 'syz.2.5418': attribute type 12 has an invalid length. [ 696.053358][T26986] bond9: option primary_reselect: invalid value (255) [ 696.082106][T26986] bond9 (unregistering): Released all slaves [ 696.441602][T27026] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 696.615508][T27034] netlink: 'syz.0.5425': attribute type 7 has an invalid length. [ 696.648169][T27034] netlink: 'syz.0.5425': attribute type 7 has an invalid length. [ 696.786868][T27041] __nla_validate_parse: 9 callbacks suppressed [ 696.786892][T27041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5428'. [ 696.828532][T27041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5428'. [ 696.869968][T27043] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5429'. [ 697.139227][T27060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5433'. [ 697.189868][T27065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5433'. [ 697.226749][T27069] netlink: 'syz.2.5436': attribute type 11 has an invalid length. [ 697.675592][T27084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 697.705636][T27084] vlan0: entered allmulticast mode [ 698.010628][T27107] lo: Caught tx_queue_len zero misconfig [ 698.108981][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5451'. [ 698.149592][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5451'. [ 698.260766][T27112] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5451'. [ 698.439702][T27131] netlink: 'syz.4.5457': attribute type 3 has an invalid length. [ 699.314141][T27180] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5469'. [ 699.558515][T27188] netlink: 'syz.1.5473': attribute type 4 has an invalid length. [ 699.610112][T27192] bond11: option resend_igmp: invalid value (32767) [ 699.617993][T27192] bond11: option resend_igmp: allowed values 0 - 255 [ 699.635772][T27192] bond11 (unregistering): Released all slaves [ 699.666169][T27196] netlink: 'syz.2.5476': attribute type 3 has an invalid length. [ 699.982395][T27216] xt_nfacct: accounting object `syz1' does not exist [ 700.020683][ T5630] block nbd2: Receive control failed (result -107) [ 700.467429][T27248] netlink: 'syz.1.5491': attribute type 4 has an invalid length. [ 700.477807][T27246] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 700.482190][T27247] netlink: 'syz.1.5491': attribute type 4 has an invalid length. [ 700.592098][ T30] audit: type=1804 audit(1778238048.759:11): pid=27251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5494" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2567 res=1 errno=0 [ 700.617016][T27250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.637589][ T30] audit: type=1800 audit(1778238048.759:12): pid=27251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5494" name="cgroup.controllers" dev="tmpfs" ino=2567 res=0 errno=0 [ 700.810373][T27255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.064117][T27278] set match dimension is over the limit! [ 701.085849][T27278] xt_time: unknown flags 0xf4 [ 702.077101][T27312] __nla_validate_parse: 11 callbacks suppressed [ 702.077140][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 702.420261][T27323] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5516'. [ 702.420578][T27322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5515'. [ 702.459937][T27329] netlink: 412 bytes leftover after parsing attributes in process `syz.4.5518'. [ 702.605807][T27329] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 702.614968][T27333] netem: incorrect ge model size [ 702.777946][T27342] syzkaller0: entered promiscuous mode [ 702.795213][T27342] syzkaller0: entered allmulticast mode [ 702.997968][T27347] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 703.046513][T27347] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5523'. [ 703.064305][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'. [ 703.990783][T27392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5536'. [ 704.228708][T27402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5539'. [ 704.248223][T27402] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5539'. [ 704.270622][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5539'. [ 704.570427][T27410] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 704.592613][T27415] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 705.031036][T27444] netlink: 'syz.1.5551': attribute type 1 has an invalid length. [ 705.192513][T27448] vlan1: entered promiscuous mode [ 705.207502][T27448] bridge0: entered promiscuous mode [ 705.559138][T27475] netlink: 'syz.3.5557': attribute type 1 has an invalid length. [ 705.720195][T27490] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 705.862961][T27494] netlink: 'syz.0.5560': attribute type 1 has an invalid length. [ 705.889418][T27494] netlink: 'syz.0.5560': attribute type 2 has an invalid length. [ 705.909364][T27475] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 706.072605][T27498] erspan0: entered promiscuous mode [ 706.149113][T27504] lo: entered promiscuous mode [ 706.182659][T27504] netlink: 'syz.2.5565': attribute type 2 has an invalid length. [ 706.217719][T27504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.328251][T27516] netlink: 'syz.0.5567': attribute type 4 has an invalid length. [ 706.353488][T27518] syzkaller1: entered promiscuous mode [ 706.375353][T27518] syzkaller1: entered allmulticast mode [ 706.896320][T27534] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 706.917434][T27534] openvswitch: netlink: IP tunnel dst address not specified [ 707.201743][T27550] netlink: 'syz.3.5574': attribute type 1 has an invalid length. [ 707.220243][T27550] __nla_validate_parse: 7 callbacks suppressed [ 707.220266][T27550] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5574'. [ 707.282681][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5577'. [ 707.313621][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5574'. [ 707.823855][ T6525] bond8: (slave bridge0): link status definitely down, disabling slave [ 707.860146][ T6525] bridge0: left allmulticast mode [ 707.875759][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5586'. [ 707.921595][ T6525] bond8: now running without any active interface! [ 707.927901][T27591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5587'. [ 707.980840][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 708.111606][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5589'. [ 708.129393][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5589'. [ 708.169846][T27609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5589'. [ 708.188838][T27609] IPVS: Unknown mcast interface: vcan0 [ 708.237853][T27602] netlink: 'syz.3.5589': attribute type 54 has an invalid length. [ 708.270258][T27602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5589'. [ 708.418799][T27618] netlink: 'syz.2.5593': attribute type 17 has an invalid length. [ 708.706356][T27641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 708.788998][T27641] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 708.819172][T27641] gretap2: entered promiscuous mode [ 708.834276][T27641] gretap2: entered allmulticast mode [ 708.856124][T27650] veth0: entered promiscuous mode [ 708.883646][T27650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.891164][T27650] IPv6: NLM_F_CREATE should be set when creating new route [ 708.898489][T27650] IPv6: NLM_F_CREATE should be set when creating new route [ 710.137697][T27707] validate_nla: 2 callbacks suppressed [ 710.137720][T27707] netlink: 'syz.3.5618': attribute type 3 has an invalid length. [ 710.759443][T27728] syzkaller0: entered promiscuous mode [ 710.766537][T27728] syzkaller0: entered allmulticast mode [ 710.995856][T27746] netlink: 'syz.1.5630': attribute type 1 has an invalid length. [ 711.226429][T27755] netlink: 'syz.2.5633': attribute type 1 has an invalid length. [ 711.831948][T27767] netlink: 'syz.2.5637': attribute type 1 has an invalid length. [ 712.139326][T27781] netlink: 'syz.0.5641': attribute type 1 has an invalid length. [ 712.152974][T27774] 8021q: adding VLAN 0 to HW filter on device bond13 [ 712.205689][T27774] bond13 (unregistering): Released all slaves [ 712.291391][T27791] __nla_validate_parse: 12 callbacks suppressed [ 712.291416][T27791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5642'. [ 712.353697][T27781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 712.417661][T27786] vlan2: entered promiscuous mode [ 712.430854][T27786] bond11: entered promiscuous mode [ 712.447472][T27786] vlan2: entered allmulticast mode [ 712.460259][T27786] bond11: entered allmulticast mode [ 712.771619][T27802] syzkaller0: entered promiscuous mode [ 712.794979][T27802] syzkaller0: entered allmulticast mode [ 712.884049][T27813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.436733][T27840] netlink: 'syz.1.5653': attribute type 1 has an invalid length. [ 713.507195][T27840] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 713.584276][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5654'. [ 713.864933][T27861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.910917][T27861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5658'. [ 714.100712][T27880] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5661'. [ 715.044840][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5668'. [ 715.297109][T27926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5672'. [ 715.430459][T27933] IPVS: Scheduler module ip_vs_sip not found [ 715.840731][T27960] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5680'. [ 715.864917][T27958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5678'. [ 716.074846][T27971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5683'. [ 716.174378][T27975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.641074][T27948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.118448][T28009] xt_l2tp: invalid flags combination: 0 [ 719.156367][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5695'. [ 719.167102][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 719.176344][T28013] netlink: 'syz.4.5695': attribute type 12 has an invalid length. [ 719.184592][T28013] netlink: 'syz.4.5695': attribute type 11 has an invalid length. [ 719.457188][T28031] netlink: 'syz.4.5699': attribute type 1 has an invalid length. [ 719.573315][T28038] xt_hashlimit: max too large, truncated to 1048576 [ 719.590520][T28031] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.803987][T28031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5699'. [ 720.048690][T28031] syzkaller0: entered promiscuous mode [ 720.084894][T28031] syzkaller0: entered allmulticast mode [ 720.258294][T28068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5707'. [ 720.472336][T28089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5711'. [ 720.568270][T28091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5713'. [ 720.739162][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5716'. [ 720.759702][T28105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5716'. [ 721.451150][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 721.706081][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 721.762504][T28165] netlink: 'syz.0.5729': attribute type 10 has an invalid length. [ 721.809594][T28165] openvswitch: netlink: Flow key attr not present in new flow. [ 722.041159][T28187] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 722.189272][T28202] netlink: 'syz.1.5740': attribute type 10 has an invalid length. [ 722.232559][T28202] team0: Device veth1_virt_wifi failed to register rx_handler [ 722.251166][T28203] syzkaller1: entered promiscuous mode [ 722.303401][T28203] syzkaller1: entered allmulticast mode [ 722.724216][T28223] netlink: 'syz.4.5745': attribute type 1 has an invalid length. [ 722.893266][T28235] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 723.115503][T28248] syzkaller0: entered promiscuous mode [ 723.132052][T28248] syzkaller0: entered allmulticast mode [ 723.246713][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 724.285093][T28314] vlan3: entered promiscuous mode [ 724.302597][T28314] bridge0: entered promiscuous mode [ 724.448125][T28324] ±ÿ: renamed from lo (while UP) [ 724.555917][T28332] netlink: 'syz.3.5778': attribute type 12 has an invalid length. [ 724.596454][T28319] netem: change failed [ 724.696769][T28344] batadv0: entered promiscuous mode [ 724.702891][T28344] macsec2: entered promiscuous mode [ 724.710131][T28344] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 724.904052][T28344] batadv0: left promiscuous mode [ 725.002635][T26103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.079450][T28352] __nla_validate_parse: 42 callbacks suppressed [ 725.079474][T28352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5783'. [ 725.164035][T14535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.352588][T28365] bond0: Caught tx_queue_len zero misconfig [ 725.422937][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5787'. [ 725.436199][T28365] syzkaller0: entered promiscuous mode [ 725.449031][T28365] syzkaller0: entered allmulticast mode [ 725.721141][T28383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5791'. [ 725.884187][T28397] netlink: 'syz.4.5795': attribute type 4 has an invalid length. [ 725.884846][T28398] netlink: 'syz.4.5795': attribute type 4 has an invalid length. [ 725.912075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.069771][T28407] tipc: Enabled bearer , priority 10 [ 726.185794][T28419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5799'. [ 726.270633][T28422] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.5800'. [ 726.411065][T28421] netlink: 'syz.4.5800': attribute type 4 has an invalid length. [ 726.722461][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'. [ 726.980744][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5809'. [ 727.013739][T28448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5809'. [ 727.141326][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5813'. [ 727.220400][T28462] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 727.253279][T28462] netlink: 'syz.1.5813': attribute type 2 has an invalid length. [ 728.031286][T28512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.049479][T28511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.076707][T28514] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5827'. [ 728.082959][T28511] netlink: 'syz.4.5826': attribute type 4 has an invalid length. [ 728.087115][T28512] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 728.883837][T28553] veth0: entered promiscuous mode [ 730.045469][ T1113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.074870][ T1113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.084061][T26103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.137091][T28604] __nla_validate_parse: 5 callbacks suppressed [ 730.137116][T28604] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5845'. [ 730.314041][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5849'. [ 730.339677][T28599] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 730.360156][T28615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5849'. [ 730.369074][T28618] netlink: 'syz.2.5850': attribute type 1 has an invalid length. [ 730.843479][ T5361] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.922370][ T5361] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.969811][T28642] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5856'. [ 730.990244][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 731.020775][T28644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5857'. [ 731.039965][T28646] sit0: Caught tx_queue_len zero misconfig [ 731.367325][T28643] bridge0: port 1(vlan3) entered blocking state [ 731.391189][T28643] bridge0: port 1(vlan3) entered disabled state [ 731.424028][T28643] vlan3: entered allmulticast mode [ 731.455199][T28643] bridge0: entered allmulticast mode [ 731.497039][T28643] vlan3: left allmulticast mode [ 731.525990][T28643] bridge0: left allmulticast mode [ 731.631505][T28647] bridge0: port 1(vlan3) entered blocking state [ 731.639237][T28647] bridge0: port 1(vlan3) entered disabled state [ 731.646152][T28647] vlan3: entered allmulticast mode [ 731.652332][T28647] bridge0: entered allmulticast mode [ 731.659584][T28647] vlan3: left allmulticast mode [ 731.666230][T28647] bridge0: left allmulticast mode [ 731.685922][T28650] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 731.836193][T28677] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 731.854783][T28680] IPVS: set_ctl: invalid protocol: 130 0.0.0.0:20001 [ 731.858079][T28677] tipc: Enabled bearer , priority 4 [ 732.188608][T28696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5869'. [ 732.271286][T28703] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5870'. [ 732.285211][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5867'. [ 732.309343][T28697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5870'. [ 732.961524][T21402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 732.990045][T21402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 733.002513][T21402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 733.022101][T21402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 733.034210][T21402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 733.065532][ T5630] [ 733.067939][ T5630] ====================================================== [ 733.074980][ T5630] WARNING: possible circular locking dependency detected [ 733.082189][ T5630] syzkaller #0 Not tainted [ 733.086608][ T5630] ------------------------------------------------------ [ 733.093643][ T5630] kworker/u9:2/5630 is trying to acquire lock: [ 733.099805][ T5630] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 733.110278][ T5630] [ 733.110278][ T5630] but task is already holding lock: [ 733.117651][ T5630] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 733.127098][ T5630] [ 733.127098][ T5630] which lock already depends on the new lock. [ 733.127098][ T5630] [ 733.137612][ T5630] [ 733.137612][ T5630] the existing dependency chain (in reverse order) is: [ 733.146721][ T5630] [ 733.146721][ T5630] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 733.154818][ T5630] down_write+0x96/0x200 [ 733.159593][ T5630] kernfs_add_one+0x41/0x5c0 [ 733.164717][ T5630] kernfs_create_dir_ns+0xde/0x130 [ 733.170373][ T5630] internal_create_group+0x425/0x1180 [ 733.176276][ T5630] cpuhp_invoke_callback+0x445/0x860 [ 733.182184][ T5630] cpuhp_issue_call+0x430/0x7a0 [ 733.187565][ T5630] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 733.194163][ T5630] __cpuhp_setup_state+0x3f/0x60 [ 733.199894][ T5630] do_one_initcall+0x250/0x870 [ 733.205188][ T5630] do_initcall_level+0x104/0x190 [ 733.210660][ T5630] do_initcalls+0x59/0xa0 [ 733.215529][ T5630] kernel_init_freeable+0x2a6/0x3e0 [ 733.221298][ T5630] kernel_init+0x1d/0x1d0 [ 733.226170][ T5630] ret_from_fork+0x514/0xb70 [ 733.231377][ T5630] ret_from_fork_asm+0x1a/0x30 [ 733.236676][ T5630] [ 733.236676][ T5630] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 733.244617][ T5630] [ 733.244617][ T5630] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 733.252555][ T5630] cpus_read_lock+0x42/0x160 [ 733.257775][ T5630] static_key_slow_inc+0x12/0x30 [ 733.263424][ T5630] setup_udp_tunnel_sock+0x2fd/0x510 [ 733.269251][ T5630] l2tp_tunnel_register+0xde2/0x1490 [ 733.275066][ T5630] pppol2tp_connect+0x8b7/0x17c0 [ 733.280542][ T5630] __sys_connect+0x312/0x450 [ 733.285664][ T5630] __x64_sys_connect+0x7a/0x90 [ 733.291059][ T5630] do_syscall_64+0x15f/0xf80 [ 733.296221][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.302643][ T5630] [ 733.302643][ T5630] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 733.310581][ T5630] lock_sock_nested+0x41/0x100 [ 733.316098][ T5630] inet_shutdown+0x6a/0x390 [ 733.321257][ T5630] nbd_mark_nsock_dead+0x2e9/0x560 [ 733.327060][ T5630] recv_work+0x1c2e/0x1d40 [ 733.332177][ T5630] process_scheduled_works+0xb5d/0x1860 [ 733.338691][ T5630] worker_thread+0xa53/0xfc0 [ 733.343930][ T5630] kthread+0x388/0x470 [ 733.348656][ T5630] ret_from_fork+0x514/0xb70 [ 733.353900][ T5630] ret_from_fork_asm+0x1a/0x30 [ 733.359427][ T5630] [ 733.359427][ T5630] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 733.367233][ T5630] __mutex_lock+0x1a3/0x1550 [ 733.372394][ T5630] nbd_queue_rq+0x37b/0x1100 [ 733.377530][ T5630] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 733.383634][ T5630] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 733.390629][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 733.397266][ T5630] blk_mq_run_hw_queue+0x348/0x4f0 [ 733.403026][ T5630] blk_mq_dispatch_list+0xd16/0xe10 [ 733.408819][ T5630] blk_mq_flush_plug_list+0x48d/0x570 [ 733.414853][ T5630] __blk_flush_plug+0x3ed/0x4d0 [ 733.420481][ T5630] __submit_bio+0x28d/0x580 [ 733.425618][ T5630] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 733.431834][ T5630] block_read_full_folio+0x599/0x830 [ 733.438081][ T5630] filemap_read_folio+0x137/0x3b0 [ 733.443796][ T5630] do_read_cache_folio+0x358/0x590 [ 733.449476][ T5630] read_part_sector+0xb6/0x2b0 [ 733.454828][ T5630] adfspart_check_ICS+0xb1/0x960 [ 733.460367][ T5630] bdev_disk_changed+0x817/0x1770 [ 733.466015][ T5630] blkdev_get_whole+0x380/0x510 [ 733.471547][ T5630] bdev_open+0x31e/0xd30 [ 733.476355][ T5630] blkdev_open+0x470/0x610 [ 733.481415][ T5630] do_dentry_open+0x785/0x14e0 [ 733.486813][ T5630] vfs_open+0x3b/0x340 [ 733.491646][ T5630] path_openat+0x2e08/0x3860 [ 733.496973][ T5630] do_file_open+0x23e/0x4a0 [ 733.502073][ T5630] do_sys_openat2+0x113/0x200 [ 733.507325][ T5630] __x64_sys_openat+0x138/0x170 [ 733.512773][ T5630] do_syscall_64+0x15f/0xf80 [ 733.518118][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.524701][ T5630] [ 733.524701][ T5630] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 733.531965][ T5630] __mutex_lock+0x1a3/0x1550 [ 733.537238][ T5630] nbd_queue_rq+0xc6/0x1100 [ 733.542431][ T5630] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 733.548549][ T5630] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 733.555434][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 733.562076][ T5630] blk_mq_run_hw_queue+0x348/0x4f0 [ 733.567756][ T5630] blk_mq_dispatch_list+0xd16/0xe10 [ 733.573526][ T5630] blk_mq_flush_plug_list+0x48d/0x570 [ 733.579472][ T5630] __blk_flush_plug+0x3ed/0x4d0 [ 733.584899][ T5630] __submit_bio+0x28d/0x580 [ 733.589953][ T5630] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 733.596688][ T5630] block_read_full_folio+0x599/0x830 [ 733.602881][ T5630] filemap_read_folio+0x137/0x3b0 [ 733.608565][ T5630] do_read_cache_folio+0x358/0x590 [ 733.614269][ T5630] read_part_sector+0xb6/0x2b0 [ 733.619603][ T5630] adfspart_check_ICS+0xb1/0x960 [ 733.625115][ T5630] bdev_disk_changed+0x817/0x1770 [ 733.630723][ T5630] blkdev_get_whole+0x380/0x510 [ 733.636142][ T5630] bdev_open+0x31e/0xd30 [ 733.640948][ T5630] blkdev_open+0x470/0x610 [ 733.645998][ T5630] do_dentry_open+0x785/0x14e0 [ 733.651327][ T5630] vfs_open+0x3b/0x340 [ 733.655965][ T5630] path_openat+0x2e08/0x3860 [ 733.661115][ T5630] do_file_open+0x23e/0x4a0 [ 733.666185][ T5630] do_sys_openat2+0x113/0x200 [ 733.671500][ T5630] __x64_sys_openat+0x138/0x170 [ 733.676907][ T5630] do_syscall_64+0x15f/0xf80 [ 733.682076][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.688604][ T5630] [ 733.688604][ T5630] -> #4 (set->srcu){.+.+}-{0:0}: [ 733.695772][ T5630] __synchronize_srcu+0xca/0x300 [ 733.701387][ T5630] elevator_switch+0x1e8/0x7a0 [ 733.706826][ T5630] elevator_change+0x2cc/0x450 [ 733.712172][ T5630] elevator_set_default+0x36c/0x430 [ 733.717949][ T5630] blk_register_queue+0x3e9/0x4e0 [ 733.723638][ T5630] __add_disk+0x677/0xd50 [ 733.728559][ T5630] add_disk_fwnode+0xfb/0x480 [ 733.733795][ T5630] nbd_dev_add+0x72c/0xb50 [ 733.738848][ T5630] nbd_init+0x168/0x1f0 [ 733.743563][ T5630] do_one_initcall+0x250/0x870 [ 733.748875][ T5630] do_initcall_level+0x104/0x190 [ 733.754370][ T5630] do_initcalls+0x59/0xa0 [ 733.759246][ T5630] kernel_init_freeable+0x2a6/0x3e0 [ 733.765078][ T5630] kernel_init+0x1d/0x1d0 [ 733.769977][ T5630] ret_from_fork+0x514/0xb70 [ 733.775122][ T5630] ret_from_fork_asm+0x1a/0x30 [ 733.780539][ T5630] [ 733.780539][ T5630] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 733.788557][ T5630] __mutex_lock+0x1a3/0x1550 [ 733.793740][ T5630] elevator_change+0x1b3/0x450 [ 733.799168][ T5630] elevator_set_none+0xb5/0x140 [ 733.804781][ T5630] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 733.811144][ T5630] nbd_start_device+0x17f/0xb10 [ 733.816742][ T5630] nbd_genl_connect+0x165b/0x1cf0 [ 733.822319][ T5630] genl_family_rcv_msg_doit+0x22a/0x330 [ 733.828509][ T5630] genl_rcv_msg+0x61c/0x7a0 [ 733.833744][ T5630] netlink_rcv_skb+0x232/0x4b0 [ 733.839088][ T5630] genl_rcv+0x28/0x40 [ 733.843736][ T5630] netlink_unicast+0x75c/0x8e0 [ 733.849208][ T5630] netlink_sendmsg+0x813/0xb40 [ 733.854568][ T5630] ____sys_sendmsg+0x972/0x9f0 [ 733.859909][ T5630] ___sys_sendmsg+0x2a5/0x360 [ 733.865157][ T5630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.870663][ T5630] do_syscall_64+0x15f/0xf80 [ 733.875892][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.882361][ T5630] [ 733.882361][ T5630] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 733.891031][ T5630] blk_alloc_queue+0x546/0x680 [ 733.896396][ T5630] __blk_mq_alloc_disk+0x197/0x390 [ 733.902249][ T5630] nbd_dev_add+0x499/0xb50 [ 733.907421][ T5630] nbd_init+0x168/0x1f0 [ 733.912136][ T5630] do_one_initcall+0x250/0x870 [ 733.917456][ T5630] do_initcall_level+0x104/0x190 [ 733.922965][ T5630] do_initcalls+0x59/0xa0 [ 733.927934][ T5630] kernel_init_freeable+0x2a6/0x3e0 [ 733.933709][ T5630] kernel_init+0x1d/0x1d0 [ 733.938602][ T5630] ret_from_fork+0x514/0xb70 [ 733.943776][ T5630] ret_from_fork_asm+0x1a/0x30 [ 733.949135][ T5630] [ 733.949135][ T5630] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 733.956421][ T5630] fs_reclaim_acquire+0x71/0x100 [ 733.962023][ T5630] kmem_cache_alloc_noprof+0x40/0x650 [ 733.968004][ T5630] __kernfs_iattrs+0xdf/0x320 [ 733.973384][ T5630] kernfs_iop_setattr+0xea/0x3f0 [ 733.978881][ T5630] notify_change+0xc1a/0xf40 [ 733.984088][ T5630] do_truncate+0x1c2/0x250 [ 733.989131][ T5630] path_openat+0x2f89/0x3860 [ 733.994568][ T5630] do_file_open+0x23e/0x4a0 [ 733.999648][ T5630] do_sys_openat2+0x113/0x200 [ 734.004875][ T5630] __x64_sys_openat+0x138/0x170 [ 734.010263][ T5630] do_syscall_64+0x15f/0xf80 [ 734.015492][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.022068][ T5630] [ 734.022068][ T5630] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 734.030726][ T5630] __lock_acquire+0x15a5/0x2cf0 [ 734.036241][ T5630] lock_acquire+0x106/0x350 [ 734.041577][ T5630] down_write+0x96/0x200 [ 734.046474][ T5630] kernfs_link_sibling+0x4ed/0x5c0 [ 734.052409][ T5630] kernfs_add_one+0x1ca/0x5c0 [ 734.057640][ T5630] kernfs_create_dir_ns+0xde/0x130 [ 734.063293][ T5630] sysfs_create_dir_ns+0x12f/0x2a0 [ 734.069121][ T5630] kobject_add_internal+0x62b/0xd00 [ 734.074849][ T5630] kobject_add+0x163/0x240 [ 734.079805][ T5630] device_add+0x408/0xbb0 [ 734.084665][ T5630] hci_conn_add_sysfs+0xd5/0x210 [ 734.090137][ T5630] hci_conn_complete_evt+0x84e/0x1290 [ 734.096044][ T5630] hci_event_packet+0x6ab/0xef0 [ 734.101526][ T5630] hci_rx_work+0x3ee/0x1040 [ 734.106654][ T5630] process_scheduled_works+0xb5d/0x1860 [ 734.112729][ T5630] worker_thread+0xa53/0xfc0 [ 734.117884][ T5630] kthread+0x388/0x470 [ 734.122575][ T5630] ret_from_fork+0x514/0xb70 [ 734.127696][ T5630] ret_from_fork_asm+0x1a/0x30 [ 734.133079][ T5630] [ 734.133079][ T5630] other info that might help us debug this: [ 734.133079][ T5630] [ 734.143319][ T5630] Chain exists of: [ 734.143319][ T5630] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 734.143319][ T5630] [ 734.157925][ T5630] Possible unsafe locking scenario: [ 734.157925][ T5630] [ 734.165381][ T5630] CPU0 CPU1 [ 734.170927][ T5630] ---- ---- [ 734.176294][ T5630] lock(&root->kernfs_rwsem); [ 734.181086][ T5630] lock(cpuhp_state_mutex); [ 734.188399][ T5630] lock(&root->kernfs_rwsem); [ 734.195703][ T5630] lock(&root->kernfs_iattr_rwsem); [ 734.201095][ T5630] [ 734.201095][ T5630] *** DEADLOCK *** [ 734.201095][ T5630] [ 734.209335][ T5630] 4 locks held by kworker/u9:2/5630: [ 734.214798][ T5630] #0: ffff888055551940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 734.225878][ T5630] #1: ffffc9000419fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 734.238092][ T5630] #2: ffff8880347840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xcd/0x1290 [ 734.248415][ T5630] #3: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 734.258485][ T5630] [ 734.258485][ T5630] stack backtrace: [ 734.264503][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 734.264531][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 734.264544][ T5630] Workqueue: hci4 hci_rx_work [ 734.264577][ T5630] Call Trace: [ 734.264587][ T5630] [ 734.264596][ T5630] dump_stack_lvl+0xe8/0x150 [ 734.264618][ T5630] print_circular_bug+0x2e1/0x300 [ 734.264644][ T5630] check_noncircular+0x12e/0x150 [ 734.264668][ T5630] __lock_acquire+0x15a5/0x2cf0 [ 734.264690][ T5630] ? __lock_acquire+0x6b5/0x2cf0 [ 734.264712][ T5630] ? kernfs_link_sibling+0x4ed/0x5c0 [ 734.264735][ T5630] lock_acquire+0x106/0x350 [ 734.264752][ T5630] ? kernfs_link_sibling+0x4ed/0x5c0 [ 734.264780][ T5630] down_write+0x96/0x200 [ 734.264796][ T5630] ? kernfs_link_sibling+0x4ed/0x5c0 [ 734.264818][ T5630] ? __pfx_down_write+0x10/0x10 [ 734.264834][ T5630] ? kernfs_root+0x1c/0x230 [ 734.264854][ T5630] ? kernfs_root+0x1c/0x230 [ 734.264875][ T5630] ? kernfs_root+0x1ea/0x230 [ 734.264896][ T5630] kernfs_link_sibling+0x4ed/0x5c0 [ 734.264923][ T5630] kernfs_add_one+0x1ca/0x5c0 [ 734.264946][ T5630] kernfs_create_dir_ns+0xde/0x130 [ 734.264972][ T5630] sysfs_create_dir_ns+0x12f/0x2a0 [ 734.264994][ T5630] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 734.265015][ T5630] ? do_raw_spin_unlock+0xf5/0x210 [ 734.265040][ T5630] kobject_add_internal+0x62b/0xd00 [ 734.265060][ T5630] kobject_add+0x163/0x240 [ 734.265096][ T5630] ? __pfx_kobject_add+0x10/0x10 [ 734.265122][ T5630] ? _raw_spin_unlock+0x28/0x50 [ 734.265152][ T5630] ? get_device_parent+0x366/0x3a0 [ 734.265173][ T5630] device_add+0x408/0xbb0 [ 734.265192][ T5630] hci_conn_add_sysfs+0xd5/0x210 [ 734.265218][ T5630] hci_conn_complete_evt+0x84e/0x1290 [ 734.265248][ T5630] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 734.265277][ T5630] hci_event_packet+0x6ab/0xef0 [ 734.265304][ T5630] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 734.265329][ T5630] ? __pfx_hci_event_packet+0x10/0x10 [ 734.265355][ T5630] ? kcov_remote_start+0x49a/0x7a0 [ 734.265381][ T5630] ? hci_send_to_monitor+0xe2/0x590 [ 734.265404][ T5630] hci_rx_work+0x3ee/0x1040 [ 734.265430][ T5630] ? process_scheduled_works+0xa70/0x1860 [ 734.265449][ T5630] process_scheduled_works+0xb5d/0x1860 [ 734.265477][ T5630] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.265497][ T5630] ? assign_work+0x3d5/0x5e0 [ 734.265515][ T5630] worker_thread+0xa53/0xfc0 [ 734.265542][ T5630] kthread+0x388/0x470 [ 734.265564][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 734.265581][ T5630] ? __pfx_kthread+0x10/0x10 [ 734.265602][ T5630] ret_from_fork+0x514/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 734.265622][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 734.265639][ T5630] ? __switch_to+0xc79/0x1410 [ 734.265664][ T5630] ? __pfx_kthread+0x10/0x10 [ 734.265685][ T5630] ret_from_fork_asm+0x1a/0x30 [ 734.265711][ T5630] [ 734.544519][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 735.158807][T18414] syz_tun (unregistering): left allmulticast mode [ 735.359249][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.370299][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.456609][T28746] bond6: (slave syz_tun): Removing an active aggregator [ 735.464590][T28746] bond6: (slave syz_tun): Releasing backup interface [ 735.530655][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.541489][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.639073][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.649904][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.698874][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.709447][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.780642][ T6525] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.794274][ T6525] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.810050][ T6525] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.823519][ T6525] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.842078][ T12] tipc: Resetting bearer [ 735.919948][ T12] tipc: Disabling bearer [ 735.987264][ T12] .` (unregistering): (slave bridge0): Releasing backup interface [ 736.373831][ T12] .` (unregistering): Released all slaves [ 736.381693][ T12] bond1 (unregistering): Released all slaves [ 736.391083][ T12] bond2 (unregistering): Released all slaves [ 736.401048][ T12] bond3 (unregistering): Released all slaves [ 736.410983][ T12] bond4 (unregistering): Released all slaves [ 736.424086][ T12] bond5 (unregistering): Released all slaves [ 736.434494][ T12] bond0 (unregistering): Released all slaves [ 736.444030][ T12] bond6 (unregistering): Released all slaves [ 736.455441][ T12] bond7 (unregistering): Released all slaves [ 736.559560][ T12] : left promiscuous mode [ 736.617583][ T12] tipc: Disabling bearer [ 736.643969][ T12] tipc: Left network mode [ 736.667636][ T12] IPVS: stopping master sync thread 22587 ... [ 736.825926][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 736.971036][ T12] veth0_macvtap: left promiscuous mode [ 736.976931][ T12] veth1_vlan: left promiscuous mode [ 736.982661][ T12] veth0_vlan: left promiscuous mode [ 737.070318][ T12] pim6reg (unregistering): left allmulticast mode [ 737.284904][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 737.528770][ T12] IPVS: stop unused estimator thread 0... [ 737.622542][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.635860][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.646687][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.663606][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 737.723263][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.734378][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.746581][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.794062][ T12] bond0: (slave netdevsim1): Releasing backup interface [ 737.802095][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 737.812104][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.822634][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.834252][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.907815][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.918601][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.934605][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.970604][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 738.011663][ T146] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.046424][ T146] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.065809][ T146] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.086321][ T6525] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.101122][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.166665][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.221503][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.257955][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.309267][ T6534] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.325209][ T6525] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.345919][ T6525] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.364395][ T6525] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.384167][ T12] dvmrp0: left allmulticast mode [ 738.397238][ T12] tipc: Resetting bearer [ 738.604627][ T12] tipc: Disabling bearer [ 738.681606][ T12] bond5 (unregistering): (slave geneve0): Releasing active interface [ 738.796432][ T12] bond8 (unregistering): (slave bridge0): Releasing active interface [ 738.996194][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.005897][ T12] bond_slave_0: left allmulticast mode [ 739.015161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.024792][ T12] bond_slave_1: left allmulticast mode [ 739.031298][ T12] bond0 (unregistering): Released all slaves [ 739.047124][ T12] bond1 (unregistering): Released all slaves [ 739.059457][ T12] bond2 (unregistering): Released all slaves [ 739.072797][ T12] bond3 (unregistering): Released all slaves [ 739.084704][ T12] bond4 (unregistering): Released all slaves [ 739.100800][ T12] bond5 (unregistering): Released all slaves [ 739.119939][ T12] bond6 (unregistering): Released all slaves [ 739.138372][ T12] bond7 (unregistering): Released all slaves [ 739.157557][ T12] bond8 (unregistering): Released all slaves [ 739.174659][ T12] bond9 (unregistering): Released all slaves [ 739.186844][ T12] bond10 (unregistering): Released all slaves [ 739.204735][ T12] bond11 (unregistering): Released all slaves [ 739.224066][ T12] bond5 (unregistering): (slave ip6gretap0): Releasing backup interface [ 739.614521][ T12] bond0 (unregistering): Released all slaves [ 739.623249][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 739.632556][ T12] bond1 (unregistering): Released all slaves [ 739.641848][ T12] bond2 (unregistering): Released all slaves [ 739.650956][ T12] bond3 (unregistering): Released all slaves [ 739.663254][ T12] bond4 (unregistering): Released all slaves [ 739.673132][ T12] bond5 (unregistering): Released all slaves [ 739.682266][ T12] bond6 (unregistering): Released all slaves [ 739.691320][ T12] bond7 (unregistering): Released all slaves [ 739.700746][ T12] bond8 (unregistering): Released all slaves [ 739.837913][ T12] : left promiscuous mode [ 739.926159][ T12] : left promiscuous mode [ 740.003848][ T12] tipc: Disabling bearer [ 740.012163][ T12] tipc: Left network mode [ 740.717112][ T12] hsr_slave_0: left promiscuous mode [ 740.723390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.730829][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.742948][ T12] hsr_slave_0: left promiscuous mode [ 740.748878][ T12] hsr_slave_1: left promiscuous mode [ 740.759934][ T12] H: left allmulticast mode [ 740.765892][ T12] veth0_macvtap: left promiscuous mode [ 741.155538][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 741.563841][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 741.577230][ T12] IPVS: stop unused estimator thread 0... [ 741.811009][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 742.038276][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 742.260533][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 742.489412][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 742.710921][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 742.941722][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12