last executing test programs: 3.486379957s ago: executing program 2 (id=3746): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) 3.29739531s ago: executing program 2 (id=3749): r0 = socket$netlink(0x10, 0x3, 0x9) (async) unshare(0x22020600) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) (async, rerun: 32) r4 = getpid() (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251400000008001d00", @ANYRES32, @ANYBLOB="0c0006000100000001000000080001000200000008001c00", @ANYRES32=r4, @ANYBLOB="9accba0fb4f8157f2e076a25defdf4d0ce021b3308ff845ec25fbd189f271ae960b233bc873da9daebdec644439af6cbacd20b3a8f27b14d81e28c5f06fdc47f576d14c071e21e186ca8b828beb3b7742327da7aa5dfdd466fa4cfdcb137647aeed9eb2204988c95ba2a7b93bd9e0365f651f2f1faba9e09997d0f87147429b0bc1b2cf5d99143f01de2eb77e142e441ebb9a963ebbd94012229457249cd91467a4b32730ec852076d0ba6e8c6624e86e38440676439fd190ce3e1e1c4f7af8e2301fe42f79509a0df7ae6"], 0x38}}, 0x4000850) (async) r7 = syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/time\x00') (async, rerun: 64) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x700, 0x8000, 0x8, 0x9, {{0x1c, 0x4, 0x3, 0x3, 0x70, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, {[@end, @noop, @cipso={0x86, 0x58, 0x3, [{0x1, 0x4, "c05d"}, {0x7, 0xe, "f702919d48df9f50fe35d483"}, {0x7, 0xb, "71b2cca8cf86a45709"}, {0x6, 0x5, "13b76f"}, {0x1, 0x2}, {0x0, 0xd, "b6f6d14bfdff19a6da220f"}, {0x1, 0xb, "10707ef8ad412e3c7e"}, {0x7, 0xd, "43ee9ab4e61208ccaefd59"}, {0x6, 0x9, "fed55c10c623d4"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x94, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0x1c, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000007000000000000007b00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000007000000185a00000a0000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4ffffff850000000600000034333000040000008520000003000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000f3dbfd345d6edb58fcc15fdaf275985fc50135f1741e6c25d15dca820bac345edfd545591b988f5f14bee9feab3b0757dc163672d9857c585976b1787d605b2bc267632fb35338dfc4adb9227b8c80b4ddf178eb86158b7857464b2122ac"], &(0x7f0000000b40)='GPL\x00', 0x4, 0x57, &(0x7f0000000b80)=""/87, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x0, 0x4, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000c80)=[{0x1, 0x3, 0x3}, {0x3, 0x3, 0x8, 0xc}, {0x0, 0x5, 0xd, 0xc}, {0x1, 0x2, 0x9}, {0x4, 0x2, 0xd, 0x8}], 0x10, 0xbc5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@alu={0x7, 0x0, 0x4, 0x1, 0x7, 0x2, 0x4}, @generic={0x9, 0x4, 0xb, 0x8, 0x6f}, @tail_call, @call={0x85, 0x0, 0x0, 0x7f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0xb, 0x13, &(0x7f00000004c0)=""/19, 0x41100, 0x58, '\x00', r9, @flow_dissector=0x11, r8, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x8, 0x5}, 0x10, r10, r11, 0x5, 0x0, &(0x7f0000000dc0)=[{0x0, 0x1, 0x10, 0x1}, {0x0, 0x3, 0xd, 0x7}, {0x1, 0x5, 0xd, 0x7}, {0x5, 0x5, 0x10, 0xb}, {0x4, 0x2, 0xc, 0xa}], 0x10, 0x7}, 0x94) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) accept4$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1000) (async, rerun: 32) r15 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r15, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x7ffb, 0x203}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) (async) r17 = getuid() setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@multicast2, 0x4e22, 0xff80, 0x4e24, 0x9, 0x2, 0x0, 0x0, 0x3a, r16, r17}, {0x8, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x3, 0x81}, {0x1000, 0x1, 0x1821, 0x7}, 0x1000, 0x6e6bba, 0x0, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3502, 0x2, 0x1, 0x1a, 0x6, 0x833, 0x6e1a6ab5}}, 0xe8) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r7, @ANYBLOB="65d619dbd62f842b988ad2042e9d44d88960a603"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 2.327445598s ago: executing program 3 (id=3757): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x6b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000e18140100000000000300007ce4000000000000000800030200000000"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b80)={@multicast2, @broadcast, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'gretap0\x00', 0x0, 0x1, 0x700, 0x7fb1394a, 0x6, {{0xd, 0x4, 0x3, 0x1b, 0x34, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x42, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r8, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="c000000000140000ef4da59a0f000800"], 0x28}, 0x1, 0x0, 0x0, 0x60000145}, 0x40804) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x10, 0x1, 0xb1c, 0xbfca, {{0x38, 0x4, 0x0, 0x3, 0xe0, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xb4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1f, 0xb0, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @multicast1, @multicast1, @loopback, @multicast1]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x1, 0x8, "41d9050dc9c6"}]}, @rr={0x7, 0x1f, 0xca, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x9b, 0x3, 0x7, [{@remote, 0x1f6}]}, @timestamp_addr={0x44, 0xc, 0x3f, 0x1, 0x0, [{@multicast2, 0x3}]}, @noop, @generic={0x89, 0x3, "c0"}, @cipso={0x86, 0x49, 0x2, [{0x0, 0x11, "edfb3b99aa15d311d10a188b9739d9"}, {0x2, 0xa, "6186c944773a76db"}, {0x1, 0x5, "c90c21"}, {0x1, 0x2}, {0x1, 0x10, "67fd2894086c720135f3847a788e"}, {0x0, 0xa, "b915bdb0dff28605"}, {0x1, 0x5, "14504d"}, {0x0, 0x2}]}, @timestamp={0x44, 0x10, 0x76, 0x0, 0x0, [0x4, 0x0, 0x4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5b0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x32ad}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1171, 0x38, 0x50, 0x4}]}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe1}}, {0x8, 0x6, r14}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000004}, 0x41) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x2010}, 0x18) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000b00"/20, @ANYRES32=r0, @ANYBLOB="00000000020000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000100)=""/201, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x3ff, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000440)=[r3, r15, 0x1, r16, 0xffffffffffffffff, 0x1, r17], &(0x7f0000000480)=[{0x2, 0x2, 0x3, 0xc}], 0x10, 0x80}, 0x94) 2.084013301s ago: executing program 2 (id=3761): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async, rerun: 64) sendto(r2, 0x0, 0xfffffffffffffe0f, 0x800, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 2.052809806s ago: executing program 3 (id=3762): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x8, 0x100, @vifc_lcl_addr=@broadcast, @broadcast}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 1.893625282s ago: executing program 3 (id=3763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x240008d5, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffd, @loopback, 0xffffffff}, 0x1c) 1.892905865s ago: executing program 0 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c000280080004400000e9"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x12c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x99, 0x8, "6ce1937ea644b8d9f1e5de9cb39cfac14ba818afa450c2354052ef94dbbafa1f41814065c434ea78f984e87ab66ff0f00e49093dd9f849b72ec6c9170528edb3494ae72d31cd2f16ec64056b3f5188a661adcf3592f7e6ab6cf73c56b4a89bde18988b48eebeb8eeef3135995c033bbdfb28698a23f16c33c99b5156de7457ae2548ce3338f09f2258bc32946937cd9e29deb4bf1f"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "28904b62a40336b46c253a1d1ae9"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x3d, 0x8, "bd1a55a6e16a3368749da84e77250da7dcbbce2fab78dca95783103ce905b083211ea89ce490c91204dac9b6dd0ddde4ef4af69eb918101c68"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000000)={0x10001, 0x5, 0x80000001, 0x9, 0x4}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) 1.892112032s ago: executing program 2 (id=3765): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0xe1, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfff3}, {0x0, 0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001500)=@newae={0x40, 0x1e, 0x400, 0x70bd27, 0x25dfdbfe, {{@in=@loopback, 0x4d2, 0xcf85ec230b1bac61, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7, 0x3502}}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) 1.832432115s ago: executing program 4 (id=3766): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, 0x17, 0x9, 0x70bd2d, 0x0, {0x2}, [@nested={0x1c, 0xca, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x56, 0xf9, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r0}, @nested={0x4, 0x9a}]}]}, @typed={0x8, 0x8f, 0x0, 0x0, @uid=0xee00}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x84) 1.812768836s ago: executing program 3 (id=3767): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e2a, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7, 0x41ac}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf254b0000000c002c80080000000800000008007700b2ffffff0400ff000400ec00040087004000ff00"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x15) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400081a, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) write(r2, &(0x7f0000000280)="ed", 0x1) sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0x7ceb, 0x0, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.737983636s ago: executing program 0 (id=3768): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x800, @loopback, 0x54d}}}, 0x3a) (async) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.737497533s ago: executing program 4 (id=3769): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, 0x0, 0x0, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01b804000ccc0300200012800b0001006772657461000000000002800000000000"], 0x40}}, 0x0) 1.604883751s ago: executing program 2 (id=3770): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r9}, 0x38) 1.604062428s ago: executing program 4 (id=3771): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0xdd9, 0x6, 0x80200}, 0x10) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 1.595257804s ago: executing program 0 (id=3772): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0xc0) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000240)={@broadcast, @rand_addr=0x64010101}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f99cdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24048080) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESDEC=r2], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x4, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x26, 0x2, 0x2) r10 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r10, 0xff, 0x22, 0x0, &(0x7f00000002c0)) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x14040805) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) close(0x4) 1.273771729s ago: executing program 1 (id=3773): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r0, 0x8b20, &(0x7f0000000040)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x28000000) 1.272742898s ago: executing program 2 (id=3774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x0, 0x40}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x11, 0xa, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x16, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}, 0xfdef) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 1.200041778s ago: executing program 0 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='virt_wifi0\x00', 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000ffb9d35bedd30142db080663295c97801000010000000000400000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c000480280001800e000100696d6d65646961746500000014000280080002800400010008000141000000140900020073797a320000000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.079025029s ago: executing program 0 (id=3776): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x200000000000033c}}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @link_local}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.0138501s ago: executing program 1 (id=3777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x240008d5, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffd, @loopback, 0xffffffff}, 0x1c) 1.012997644s ago: executing program 4 (id=3778): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x3, 0x4, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 908.885177ms ago: executing program 3 (id=3779): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0xfffffffffffffed5, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x8, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x44894) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 861.562811ms ago: executing program 1 (id=3780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 769.584294ms ago: executing program 4 (id=3781): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x274241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 768.130789ms ago: executing program 1 (id=3782): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x40c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="ea45c55fab973f21914c24b318d1a46864520a5c56f587dde729e1aaa246cbc408afd2ce74a8e918ef5bac8f4880a2889b", 0x31}, {&(0x7f00000003c0)="a49ea6a80621113f78894252db6b855137f2d9b0bb72925350c208d02d702d06e92137fa37af3aaaccaa51ee056c026be9c07775f7972485c42ca6d6782f614f90a46610322f5a99fdd93f0e70d6073bc87d6e3a2d879d0fd95ac823e7e9aae5053300c6781643d65546d27605a0a37a08d759144d7dd47c4acbc163a076c4e067a737935cf9fba040e89b7d731547a8", 0x90}, {&(0x7f0000000480)="40dc6ecc9f0447c807cfe6ba1bd8052aef7481d59316490712ed2d3eb1a323ebacc79fe6a6aede9c3ebafd20bdaa0f4c4d8c3f73036632135feed52293421eb293b2cca851c5b1def4dc9976e091c315805b2d094af700400506d1b6c185267c37f3df084536d1857c08c3", 0x6b}, {&(0x7f0000000500)="03478538befcab0db91ff0d8ec8b6ee326e5736106bf071f9ed59028764f012e45729d715b0793bdde1c8a8f1b172f26bfcfdd63c83593d215b32d3f48eb9ee323b9a4d3e14f3ed0fc5958ee91060e23b7ff154e281b5d60fa394b4134e3b3b3fca8116ace3834e183827ed17d8f3b7d5bce7c457685c286", 0x78}, {&(0x7f0000001340)="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", 0x1000}], 0x5, &(0x7f0000000640)=[{0x78, 0x10f, 0x8, "2ff5864e6fffb97085c7142e42d3dd3928f3e4e0d3366531e669e3b1f2386b03cadcd418522ec2a0f20630d8ce8401c07be0161e3efbde07f6ab6ee2fa2578242de622e4c725422b344c9509a3b5d1d1d7cf34ecbe049cebdf9d5ed8e5fc572ae5c16ff52c1b"}, {0x48, 0x10a, 0x3, "5c3d78a81f2c2bda5fba3b01e3f50fdbdd1ba7dcf8af309154226361403df6442ccb77e0a822a5ba72ef9bf104ba1fbb695da0fcc0edd0a7"}, {0xc0, 0x1, 0x2, "b9ac54f6ab9c77cc56399937bd3689f6a306ea44614c8b9df47a9b7b571b073c1eb95382839e1a15471163e29382b47323ae319306f5139b2eed1a7243fbcf0e0e6b308afa6afe864a755d8c5ac56eaede2510878ce2101943c0379755fdd785cb3109926575b6a876dbcde806de3898b01178ff7e25b4e5a363e2025bf9fd562bb7e6a98b4ba88a3bea78667dcd8fb54bb25b1979e952c879d2fb03175bb0f800fa745a834d1b716a6570ba"}, {0x50, 0xff, 0x800, "93eace715421caf49796e90fa5190c6e6d025bcbbaf81fdb6490b70384b422cdca70b079f5ddf15e89c6110b2cbffe7839b9e770d6a608e3021b035a69"}, {0x58, 0x3a, 0x94ad, "1c303b3f71d9fa6a3410afa4f122f70f2d5f6bc5c7084c680c6948091b625e303690a65d99c41e4b7e75ee467ca23678085139760f1ddf94cf2edb054cb14363537c9d54bfe0"}], 0x228}, 0x20044000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200008c0}], 0x1, 0x44840) recvmsg$can_j1939(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x174, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x219404e4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x890}, 0x40000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="94080800", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r10, @ANYRESDEC=r5, @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 499.224171ms ago: executing program 3 (id=3783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="440002804000010024002c006c625f686173685f737461747300050000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000bd1f707cf72edfc08000a000100"/32], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 334.212767ms ago: executing program 1 (id=3784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000007}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) (async) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000340)=0x2, 0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'hsr0\x00', {}, 0x3}) 274.304248ms ago: executing program 4 (id=3785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000104000000004000000000003500", @ANYRES32=0x0, @ANYBLOB="038000002c08050020001980070001000004000014000400958cade18001090eeb06303e583db9be080004003a010000140003006272696467655f736c6176655f310000"], 0x5c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x15}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r6 = accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10) getsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @dev, @broadcast}, &(0x7f0000000280)=0xc) 137.406463ms ago: executing program 0 (id=3786): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000440)='\x00!', 0xfffffe37}], 0x1, 0x1, 0x3d) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 0s ago: executing program 1 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x709d2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x4}, {0x1, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}}, 0x200400d4) (async) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x42, &(0x7f00000000c0)=0x81a, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): id length. [ 413.061135][T13260] syzkaller0: entered promiscuous mode [ 413.081113][T13260] syzkaller0: entered allmulticast mode [ 413.270043][T13265] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 413.291966][T13265] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2395'. [ 413.579960][T13281] netlink: 'syz.0.2400': attribute type 15 has an invalid length. [ 413.750513][T13288] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.757831][T13288] bridge0: port 2(bridge_slave_1) entered listening state [ 413.765339][T13288] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.772528][T13288] bridge0: port 1(bridge_slave_0) entered listening state [ 413.815010][T13288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.862904][T13289] pim6reg: entered allmulticast mode [ 413.881102][T13284] pim6reg: left allmulticast mode [ 413.965251][T13296] netlink: 'syz.2.2403': attribute type 10 has an invalid length. [ 414.070346][T13294] lo speed is unknown, defaulting to 1000 [ 414.098175][T13296] lo speed is unknown, defaulting to 1000 [ 414.182651][T13297] lo speed is unknown, defaulting to 1000 [ 414.568801][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2405'. [ 415.209195][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2412'. [ 415.551750][T13337] lo speed is unknown, defaulting to 1000 [ 415.597598][T13345] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 415.674341][T13345] bond6: entered promiscuous mode [ 415.679944][T13345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.728586][T13345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.771816][T13345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.815232][T13350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.845482][T13350] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 415.886591][T13350] bond6: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 415.970527][T13350] bond6: (slave wireguard2): making interface the new active one [ 415.980239][T13350] wireguard2: entered promiscuous mode [ 415.996093][T13350] bond6: (slave wireguard2): Enslaving as an active interface with an up link [ 416.693851][T13371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2423'. [ 416.704997][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2423'. [ 417.225835][T13385] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.690153][T13412] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2433'. [ 417.851235][T13422] lo speed is unknown, defaulting to 1000 [ 417.921036][T13425] lo speed is unknown, defaulting to 1000 [ 418.129047][T13437] netlink: 'syz.4.2441': attribute type 13 has an invalid length. [ 418.204362][T13438] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2441'. [ 418.364680][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.378467][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.519347][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 418.771760][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 418.831465][ T4389] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.840037][ T4389] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.857133][T13444] geneve0: entered allmulticast mode [ 418.941525][ T4389] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.949943][ T4389] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.132212][T13460] nbd: socks must be embedded in a SOCK_ITEM attr [ 419.361805][T13466] netlink: 'syz.3.2447': attribute type 2 has an invalid length. [ 419.393703][T13466] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 419.414381][T13467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'. [ 419.458855][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'. [ 419.707457][T13476] IPVS: ip_vs_edit_dest(): server weight less than zero [ 419.800869][T13479] syz_tun: entered allmulticast mode [ 419.847803][T13480] dvmrp8: entered allmulticast mode [ 419.935549][T13482] syz_tun: left allmulticast mode [ 420.182369][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.426913][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 420.436579][T13511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2461'. [ 420.448950][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 420.480621][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2461'. [ 420.606160][T13516] lo speed is unknown, defaulting to 1000 [ 420.675283][T13519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.699425][T13509] lo speed is unknown, defaulting to 1000 [ 421.323082][T13541] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 421.345388][T13536] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2467'. [ 421.576151][T13541] bond7: entered promiscuous mode [ 421.595164][T13541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 421.684408][T13541] bond7: (slave bridge9): making interface the new active one [ 421.692822][T13541] bridge9: entered promiscuous mode [ 421.699529][T13541] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 421.762309][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 421.832267][T13561] sctp: [Deprecated]: syz.4.2473 (pid 13561) Use of int in max_burst socket option deprecated. [ 421.832267][T13561] Use struct sctp_assoc_value instead [ 421.920846][T13561] netlink: 'syz.4.2473': attribute type 1 has an invalid length. [ 421.976465][T13561] gretap1: entered allmulticast mode [ 421.983299][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 421.994971][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 422.007117][T13565] netlink: 'syz.0.2474': attribute type 18 has an invalid length. [ 422.100306][T13569] batman_adv: batadv0: Removing interface: macvtap0 [ 422.273307][T13582] tipc: Trying to set illegal importance in message [ 422.287459][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 422.304996][T13582] netlink: 'syz.3.2480': attribute type 4 has an invalid length. [ 422.546431][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'. [ 422.645707][T13599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.680669][T13604] geneve3: entered promiscuous mode [ 422.697000][T13604] geneve3: entered allmulticast mode [ 422.754931][T13599] macsec1: entered promiscuous mode [ 422.760205][T13599] bond4: entered promiscuous mode [ 422.765894][T13599] macsec1: entered allmulticast mode [ 422.771387][T13599] bond4: entered allmulticast mode [ 422.779224][T13599] bond4: left allmulticast mode [ 422.785044][T13599] bond4: left promiscuous mode [ 422.815620][ T4389] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.824619][ T4389] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.847667][T13607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 422.905345][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.930309][T13608] bond6: (slave bond0): Enslaving as an active interface with an up link [ 423.102418][T13609] bond6 (unregistering): (slave bond0): Releasing backup interface [ 423.114337][T13609] bond6 (unregistering): Released all slaves [ 423.131552][ T4389] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.140056][T13594] lo speed is unknown, defaulting to 1000 [ 423.158786][ T4389] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.192608][T13613] lo speed is unknown, defaulting to 1000 [ 423.635799][T13630] tipc: Enabled bearer , priority 0 [ 423.701230][T13625] syzkaller0: entered promiscuous mode [ 423.707431][T13625] syzkaller0: entered allmulticast mode [ 423.748728][T13625] tipc: Resetting bearer [ 423.761777][T13624] tipc: Resetting bearer [ 423.806422][T13624] tipc: Disabling bearer [ 424.735670][T13667] xt_TCPMSS: Only works on TCP SYN packets [ 424.855898][T13675] sctp: [Deprecated]: syz.1.2504 (pid 13675) Use of int in max_burst socket option. [ 424.855898][T13675] Use struct sctp_assoc_value instead [ 425.145226][T13700] syzkaller0: entered promiscuous mode [ 425.152835][T13700] syzkaller0: entered allmulticast mode [ 425.200463][T13704] bond4: option packets_per_slave: invalid value (1048582) [ 425.208391][T13704] bond4: option packets_per_slave: allowed values 0 - 65535 [ 425.221679][T13704] bond4 (unregistering): Released all slaves [ 425.446443][T13731] __nla_validate_parse: 12 callbacks suppressed [ 425.446463][T13731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.649681][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.659278][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.668601][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.727902][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.737068][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.746139][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.836080][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.845276][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 425.854522][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.966994][T13750] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 427.205853][T13765] lo speed is unknown, defaulting to 1000 [ 427.284924][T13777] pim6reg1: entered promiscuous mode [ 427.290372][T13777] pim6reg1: entered allmulticast mode [ 427.726828][T13792] lo speed is unknown, defaulting to 1000 [ 428.514636][T13819] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 428.530213][T13821] veth0_to_bridge: entered promiscuous mode [ 428.657718][T13819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.678395][T13819] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 428.746678][T13819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.754607][T13819] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 428.841844][T13817] veth0_to_bridge: left promiscuous mode [ 428.889172][T13819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 428.896794][T13819] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 428.905050][T13832] tipc: Enabled bearer , priority 0 [ 428.916572][T13836] syzkaller0: entered promiscuous mode [ 428.922218][T13836] syzkaller0: entered allmulticast mode [ 428.979303][T13819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.004522][T13819] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 429.025411][T13832] tipc: Resetting bearer [ 429.262747][T13819] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.373793][T13831] tipc: Resetting bearer [ 429.412226][T13831] tipc: Disabling bearer [ 429.764122][T13865] vlan0: entered promiscuous mode [ 429.769385][T13865] vlan0: entered allmulticast mode [ 429.817589][T13865] hsr_slave_1: entered allmulticast mode [ 429.988906][T13865] lo speed is unknown, defaulting to 1000 [ 430.254608][T13896] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 430.307400][T13896] 8021q: adding VLAN 0 to HW filter on device bond10 [ 430.387572][T13896] bond10: (slave geneve0): making interface the new active one [ 430.404699][T13896] bond10: (slave geneve0): Enslaving as an active interface with an up link [ 430.430924][T13900] lo speed is unknown, defaulting to 1000 [ 430.520770][T13909] __nla_validate_parse: 6 callbacks suppressed [ 430.520788][T13909] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2564'. [ 430.610065][T13912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2566'. [ 430.712362][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 430.724317][T13915] 8021q: VLANs not supported on wg2 [ 431.157454][T13927] lo speed is unknown, defaulting to 1000 [ 431.929368][T13960] lo speed is unknown, defaulting to 1000 [ 431.977868][T13963] lo speed is unknown, defaulting to 1000 [ 432.083044][T13970] lo speed is unknown, defaulting to 1000 [ 432.092328][T13973] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2580'. [ 432.315225][T13976] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2583'. [ 432.912159][T13997] netlink: 'syz.2.2589': attribute type 39 has an invalid length. [ 433.382564][T14022] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 433.555564][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 434.602944][T14072] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 434.610914][T14072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2610'. [ 434.676200][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2611'. [ 434.762721][T14079] team0: Port device bridge10 added [ 434.771156][T14076] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2611'. [ 434.886125][T14089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.922116][T14089] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 435.245628][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2615'. [ 435.840807][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 435.866050][T14127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 436.275351][T14154] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 436.356054][T14154] bond8 (unregistering): Released all slaves [ 436.417664][T14157] veth6: entered allmulticast mode [ 436.427283][T14163] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 436.566601][T14164] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2634'. [ 436.576005][T14163] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2634'. [ 436.758519][T14176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2637'. [ 436.855000][T14178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2637'. [ 436.894866][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 436.936990][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 436.950459][T14176] netlink: 'syz.2.2637': attribute type 5 has an invalid length. [ 436.983528][T14176] ip6erspan0: entered promiscuous mode [ 436.999636][T14188] smc: net device geneve0 erased user defined pnetid SYZ0 [ 437.086122][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 437.546024][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 437.579228][T14212] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2648'. [ 437.663396][T14210] wg1: entered promiscuous mode [ 437.668300][T14210] wg1: entered allmulticast mode [ 437.842765][T14223] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.860452][T14223] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 437.875999][T14223] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 438.247690][T14258] netlink: 'syz.0.2657': attribute type 12 has an invalid length. [ 438.261883][T14258] smc: net device geneve0 applied user defined pnetid SYZ0 [ 438.275041][T14258] netlink: 'syz.0.2657': attribute type 4 has an invalid length. [ 438.425455][T14262] batadv1: entered promiscuous mode [ 438.450960][ T985] lo speed is unknown, defaulting to 1000 [ 438.459803][ T985] syz1: Port: 1 Link DOWN [ 438.670149][T14279] : renamed from bond_slave_0 [ 438.682553][T14281] C: renamed from lo (while UP) [ 438.691680][T14281] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 438.913927][T14289] lo speed is unknown, defaulting to 1000 [ 438.983457][T14294] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 439.162968][T14310] tipc: Enabled bearer , priority 0 [ 439.190468][T14310] syzkaller0: entered promiscuous mode [ 439.199544][T14310] syzkaller0: entered allmulticast mode [ 439.263348][T14310] tipc: Resetting bearer [ 439.278076][T14308] tipc: Resetting bearer [ 439.298029][T14308] tipc: Disabling bearer [ 439.363765][T14319] bridge_slave_1: entered promiscuous mode [ 439.370320][T14319] bridge_slave_1: entered allmulticast mode [ 439.460261][T14321] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 439.506547][T14321] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.537163][T14327] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.548537][T14327] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 439.560528][T14327] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 439.594382][T14321] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 439.603771][T14321] bond8: (slave wlan0): Opening slave failed [ 439.625085][T14325] lo speed is unknown, defaulting to 1000 [ 439.982874][T14311] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 440.708379][T14379] bond9: option updelay: invalid value (18446744073709551615) [ 440.735546][T14379] bond9: option updelay: allowed values 0 - 2147483647 [ 440.802272][T14379] bond9 (unregistering): Released all slaves [ 441.111419][T14395] ip6t_rpfilter: unknown options [ 441.177988][T14398] netlink: 'syz.4.2699': attribute type 3 has an invalid length. [ 441.191715][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 441.746198][T14427] lo speed is unknown, defaulting to 1000 [ 441.756554][T14417] Set syz1 is full, maxelem 65536 reached [ 441.784950][T14429] lo speed is unknown, defaulting to 1000 [ 442.002712][T14424] __nla_validate_parse: 14 callbacks suppressed [ 442.002730][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2707'. [ 442.157448][T14442] pim6reg: entered allmulticast mode [ 443.064480][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.074051][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.087708][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.100542][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.114517][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.210327][T14463] lo speed is unknown, defaulting to 1000 [ 443.312701][T14469] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 443.730088][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 443.821741][T14486] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2721'. [ 443.908861][T14486] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 443.993200][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 444.001675][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 444.071699][ T752] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.112087][ T752] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.154364][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.184437][ T4766] bridge_slave_1: left allmulticast mode [ 444.190281][ T4766] bridge_slave_1: left promiscuous mode [ 444.197601][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.208880][ T4766] bridge_slave_0: left allmulticast mode [ 444.214922][ T4766] bridge_slave_0: left promiscuous mode [ 444.221124][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.229886][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2724'. [ 444.242126][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2724'. [ 444.633702][ T4766] dvmrp8 (unregistering): left allmulticast mode [ 444.658683][ T4766] bond5 (unregistering): (slave geneve2): Releasing active interface [ 444.812770][ T4766] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 444.820961][ T4766] bond1 (unregistering): (slave bridge2): the permanent HWaddr of slave - ba:04:87:5d:00:81 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 444.839660][ T4766] bridge2 (unregistering): left promiscuous mode [ 444.846099][ T4766] bond1 (unregistering): (slave bridge3): making interface the new active one [ 444.855114][ T4766] bridge3 (unregistering): entered promiscuous mode [ 444.910901][ T4766] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 444.919298][ T4766] bridge3 (unregistering): left promiscuous mode [ 445.192713][ T5829] Bluetooth: hci1: command tx timeout [ 445.199190][ T4766] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 445.207788][ T4766] bridge9 (unregistering): left promiscuous mode [ 445.263540][ T4766] team0: Port device bridge10 removed [ 445.411036][ T4766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.421175][ T4766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.430909][ T4766] bond0 (unregistering): Released all slaves [ 445.533305][ T4766] bond1 (unregistering): Released all slaves [ 445.546146][ T4766] bond2 (unregistering): Released all slaves [ 445.647157][ T4766] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 445.655740][ T4766] wireguard0: left promiscuous mode [ 445.662127][ T4766] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 445.671014][ T4766] bond3 (unregistering): Released all slaves [ 445.763392][ T4766] bond4 (unregistering): (slave veth1): Releasing active interface [ 445.772394][ T4766] bond4 (unregistering): Released all slaves [ 445.865829][ T4766] bond5 (unregistering): Released all slaves [ 445.960300][ T4766] bond6 (unregistering): (slave wireguard2): Releasing backup interface [ 445.968783][ T4766] wireguard2: left promiscuous mode [ 445.974793][ T4766] bond6 (unregistering): Released all slaves [ 446.066523][ T4766] bond7 (unregistering): Released all slaves [ 446.156961][ T4766] bond8 (unregistering): Released all slaves [ 446.169857][ T12] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.187553][T14463] chnl_net:caif_netlink_parms(): no params data found [ 446.316540][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.327747][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.421802][ T8941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.518350][ T4766] tipc: Left network mode [ 446.566016][ T4766] IPVS: stopping backup sync thread 9351 ... [ 446.597167][T14507] lo speed is unknown, defaulting to 1000 [ 446.639844][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.650024][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.677817][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.685639][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.693338][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.701613][T14463] bridge_slave_0: entered allmulticast mode [ 446.709396][T14463] bridge_slave_0: entered promiscuous mode [ 446.753136][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 446.773232][T14537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2729'. [ 446.858503][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.876062][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.892142][T14463] bridge_slave_1: entered allmulticast mode [ 446.914674][T14463] bridge_slave_1: entered promiscuous mode [ 446.962606][T14536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.977358][T14547] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 446.980130][T14540] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 446.993850][T14540] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 447.113480][T14547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.188849][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 447.271997][ T5829] Bluetooth: hci1: command tx timeout [ 447.339962][T14549] bond6 (unregistering): Released all slaves [ 447.394592][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.414716][T14551] macvlan2: entered promiscuous mode [ 447.420186][T14551] macvlan2: entered allmulticast mode [ 447.425845][T14551] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 447.436860][ T8941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.489801][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.534060][T14563] IPVS: Unknown mcast interface: netpci0 [ 447.656553][T14463] team0: Port device team_slave_0 added [ 447.668903][T14463] team0: Port device team_slave_1 added [ 447.717821][T14584] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2741'. [ 447.798851][T14463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.831931][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.883594][T14463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.924323][T14463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.942073][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.968663][T14463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.100760][T14587] lo speed is unknown, defaulting to 1000 [ 448.119842][T14588] lo speed is unknown, defaulting to 1000 [ 448.169368][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 448.182475][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'. [ 448.228570][T14463] hsr_slave_0: entered promiscuous mode [ 448.242540][T14463] hsr_slave_1: entered promiscuous mode [ 448.250880][T14463] debugfs: 'hsr0' already exists in 'hsr' [ 448.258789][T14463] Cannot create hsr debugfs directory [ 448.340134][T14597] lo speed is unknown, defaulting to 1000 [ 448.662721][T14463] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.757151][T14463] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.842841][T14463] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.870054][T14624] netlink: 'syz.2.2752': attribute type 10 has an invalid length. [ 448.880726][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2752'. [ 448.890441][T14624] geneve0: left allmulticast mode [ 448.903639][T14624] team0: Port device geneve0 added [ 448.910765][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.924466][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.937394][T14463] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.969096][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.978545][ T756] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.046586][T14627] digital: digital_start_poll: Unknown protocol [ 449.251967][T14463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.265605][T14463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.276820][T14463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.297027][T14463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.351940][ T5840] Bluetooth: hci1: command tx timeout [ 449.779665][T14463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.831794][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2756'. [ 449.837460][T14463] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.036128][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.043369][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.155423][ T4766] hsr_slave_0: left promiscuous mode [ 450.166020][ T4766] hsr_slave_1: left promiscuous mode [ 450.175085][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.184459][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.192615][ T4766] batman_adv: batadv0: Removing interface: macvtap0 [ 450.402019][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.787834][ T4766] team0 (unregistering): Port device team_slave_1 removed [ 450.826840][ T4766] team0 (unregistering): Port device team_slave_0 removed [ 451.154441][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.161650][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.268975][T14463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.359446][T14658] netlink: 'syz.3.2761': attribute type 12 has an invalid length. [ 451.431824][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 451.768471][T14463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.789691][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'. [ 451.840965][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 451.851720][T14678] netlink: 'syz.0.2766': attribute type 14 has an invalid length. [ 451.872934][T14678] netlink: 'syz.0.2766': attribute type 13 has an invalid length. [ 452.083865][T14668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2763'. [ 452.417406][T14463] veth0_vlan: entered promiscuous mode [ 452.468439][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 452.475186][T14463] veth1_vlan: entered promiscuous mode [ 452.589796][T14463] veth0_macvtap: entered promiscuous mode [ 452.611149][T14463] veth1_macvtap: entered promiscuous mode [ 452.682489][T14463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.805805][T14463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.855470][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'. [ 452.864866][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.879468][T14714] openvswitch: netlink: Message has 572 unknown bytes. [ 452.887042][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.898454][T14714] netlink: 'syz.0.2772': attribute type 10 has an invalid length. [ 452.906829][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.100567][T14714] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.134145][T14714] bond0: (slave team0): Enslaving as an active interface with an up link [ 453.143420][ T6696] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 453.159912][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.179112][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.317551][ T4766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.329974][ T4766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.377693][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.386306][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.512206][ T5829] Bluetooth: hci1: command 0x0419 tx timeout [ 453.537946][T14733] Bluetooth: MGMT ver 1.23 [ 453.756568][T14745] syzkaller0: entered promiscuous mode [ 453.763576][T14745] syzkaller0: entered allmulticast mode [ 453.848815][T14727] lo speed is unknown, defaulting to 1000 [ 453.858309][T14745] tipc: Enabled bearer , priority 0 [ 453.866992][T14744] tipc: Resetting bearer [ 453.884873][T14744] tipc: Disabling bearer [ 453.895824][T14750] bridge_slave_0: entered promiscuous mode [ 453.902501][T14750] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 454.512766][T14775] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 454.523627][T14775] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 454.540182][T14775] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 454.549921][T14775] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 454.558490][T14775] netlink: 'syz.4.2787': attribute type 1 has an invalid length. [ 454.699967][T14782] lo speed is unknown, defaulting to 1000 [ 454.716175][T14784] tipc: Enabled bearer , priority 0 [ 454.857538][T14784] syzkaller0: entered promiscuous mode [ 454.867950][T14784] syzkaller0: entered allmulticast mode [ 454.886152][T14784] tipc: Resetting bearer [ 454.933139][T14783] tipc: Resetting bearer [ 455.921230][T14807] netlink: 'syz.1.2795': attribute type 28 has an invalid length. [ 456.527347][T14783] tipc: Disabling bearer [ 456.704336][T14810] lo speed is unknown, defaulting to 1000 [ 456.738100][T14817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2798'. [ 457.158899][T14837] tipc: Enabled bearer , priority 0 [ 457.185897][T14841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2804'. [ 457.198823][T14837] syzkaller0: entered promiscuous mode [ 457.205164][T14837] syzkaller0: entered allmulticast mode [ 457.258477][T14837] tipc: Resetting bearer [ 457.425051][T14840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.876408][T14832] tipc: Resetting bearer [ 457.925109][T14832] tipc: Disabling bearer [ 458.071551][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.097187][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 458.188438][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 458.205401][T14881] netlink: 'syz.1.2815': attribute type 21 has an invalid length. [ 458.231528][T14881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2815'. [ 458.255788][T14881] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2815'. [ 458.549269][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'. [ 458.807112][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 458.828920][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2822'. [ 459.093114][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 459.154332][T14919] syzkaller0: entered promiscuous mode [ 459.166807][T14919] syzkaller0: entered allmulticast mode [ 459.669822][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.687722][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.696534][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.704630][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.713827][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 459.929925][T14943] lo speed is unknown, defaulting to 1000 [ 459.990406][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 460.093381][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2837'. [ 460.198620][T14967] lo speed is unknown, defaulting to 1000 [ 460.329256][T14971] syzkaller0: entered promiscuous mode [ 460.344280][T14971] syzkaller0: entered allmulticast mode [ 460.473572][T14978] xt_CT: No such helper "netbios-ns" [ 460.674295][T14983] netlink: 'syz.2.2843': attribute type 18 has an invalid length. [ 460.977143][T14943] chnl_net:caif_netlink_parms(): no params data found [ 461.338442][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.362827][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.379940][T14943] bridge_slave_0: entered allmulticast mode [ 461.419836][T14943] bridge_slave_0: entered promiscuous mode [ 461.465382][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.473110][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.480382][T14943] bridge_slave_1: entered allmulticast mode [ 461.495423][T14943] bridge_slave_1: entered promiscuous mode [ 461.532463][T15015] openvswitch: netlink: Message has 16 unknown bytes. [ 461.621880][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.665364][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.745085][T14943] team0: Port device team_slave_0 added [ 461.813704][T14943] team0: Port device team_slave_1 added [ 461.861855][T15025] netlink: 'syz.2.2854': attribute type 3 has an invalid length. [ 461.892171][T15022] lo speed is unknown, defaulting to 1000 [ 461.942654][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.954164][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.982036][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.995148][ T5840] Bluetooth: hci5: command tx timeout [ 462.017690][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.028360][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.062157][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.209208][T14943] hsr_slave_0: entered promiscuous mode [ 462.225173][T14943] hsr_slave_1: entered promiscuous mode [ 462.242644][T14943] debugfs: 'hsr0' already exists in 'hsr' [ 462.253937][T14943] Cannot create hsr debugfs directory [ 462.602060][T15045] bond0: (slave team0): Releasing backup interface [ 462.645404][T15045] bridge_slave_0: left allmulticast mode [ 462.652703][T15045] bridge_slave_0: left promiscuous mode [ 462.676207][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.877312][T15045] bridge_slave_1: left allmulticast mode [ 462.894886][T15045] bridge_slave_1: left promiscuous mode [ 463.005206][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.031749][T15045] bond0: (slave bond_slave_0): Releasing backup interface [ 463.068617][T15045] bond0: (slave bond_slave_1): Releasing backup interface [ 463.086056][T15045] team_slave_0: left promiscuous mode [ 463.106509][T15045] team0: Port device team_slave_0 removed [ 463.133407][T15045] team_slave_1: left promiscuous mode [ 463.160389][T15045] team0: Port device team_slave_1 removed [ 463.191267][T15045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.200104][T15045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.209429][T15045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.255177][ T8973] !yz!: Port: 1 Link DOWN [ 463.353924][T14943] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.392144][T15060] __nla_validate_parse: 6 callbacks suppressed [ 463.392162][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 463.419651][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'. [ 463.425342][T14943] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.536777][T15074] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2865'. [ 463.560415][T14943] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.602924][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'. [ 463.706456][T15081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.803412][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.811236][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.964404][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.978159][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.071483][ T5840] Bluetooth: hci5: command tx timeout [ 464.111952][T14943] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.160494][ T6696] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.178188][ T6696] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.201600][ T6696] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.222151][ T6696] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.306481][T15105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2869'. [ 464.490812][T14943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.537359][T14943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.574804][T15113] netlink: 'syz.2.2872': attribute type 11 has an invalid length. [ 464.595125][T15113] netlink: 'syz.2.2872': attribute type 4 has an invalid length. [ 464.603103][T14943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.610386][T15113] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2872'. [ 464.630978][T14943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.645126][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 464.674428][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 464.862280][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 464.885411][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2879'. [ 464.909309][T15137] xt_ecn: cannot match TCP bits for non-tcp packets [ 464.934245][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.978932][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.039327][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.046597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.075331][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.082549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.117519][T15145] syzkaller0: entered promiscuous mode [ 465.127001][T15145] syzkaller0: entered allmulticast mode [ 465.876074][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.903940][T15187] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 465.947149][T15191] 8021q: VLANs not supported on tunl0 [ 465.994231][T14943] veth0_vlan: entered promiscuous mode [ 466.050369][T14943] veth1_vlan: entered promiscuous mode [ 466.150786][T14943] veth0_macvtap: entered promiscuous mode [ 466.151491][ T5840] Bluetooth: hci5: command tx timeout [ 466.205049][T14943] veth1_macvtap: entered promiscuous mode [ 466.241160][T15202] lo speed is unknown, defaulting to 1000 [ 466.308708][T15206] bridge1: port 1(veth3) entered blocking state [ 466.317940][T15206] bridge1: port 1(veth3) entered disabled state [ 466.324867][T15206] veth3: entered allmulticast mode [ 466.333697][T15206] veth3: entered promiscuous mode [ 466.347038][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.363265][T15211] bridge1: port 2(veth0_to_bond) entered blocking state [ 466.383380][T15211] bridge1: port 2(veth0_to_bond) entered disabled state [ 466.406612][T15211] veth0_to_bond: entered allmulticast mode [ 466.419089][T15211] veth0_to_bond: entered promiscuous mode [ 466.497126][T15206] bridge1: port 3(veth5) entered blocking state [ 466.503733][T15206] bridge1: port 3(veth5) entered disabled state [ 466.510284][T15206] veth5: entered allmulticast mode [ 466.518060][T15206] veth5: entered promiscuous mode [ 466.529697][T15214] tipc: Enabling of bearer rejected, failed to enable media [ 466.544088][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.586165][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.721418][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.740590][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.768659][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.989448][T15222] lo speed is unknown, defaulting to 1000 [ 467.020167][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.049227][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.134625][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.163623][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.370799][T15248] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 468.130553][T15272] lo speed is unknown, defaulting to 1000 [ 468.225381][T15279] netlink: 'syz.4.2915': attribute type 10 has an invalid length. [ 468.235328][ T5840] Bluetooth: hci5: command tx timeout [ 468.258600][T15279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 468.628606][T15294] __nla_validate_parse: 9 callbacks suppressed [ 468.628625][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2919'. [ 468.643066][T15295] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2918'. [ 468.673307][T15292] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2919'. [ 468.683287][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2919'. [ 468.890843][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 469.645778][T15344] sctp: [Deprecated]: syz.2.2930 (pid 15344) Use of int in max_burst socket option. [ 469.645778][T15344] Use struct sctp_assoc_value instead [ 470.073907][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'. [ 470.447454][T15385] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2941'. [ 471.383380][T15392] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2942'. [ 471.785611][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 471.932512][T15409] syzkaller1: entered promiscuous mode [ 471.940169][T15409] syzkaller1: entered allmulticast mode [ 471.947416][T15412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2949'. [ 471.985985][T15414] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 472.405555][T15441] lo speed is unknown, defaulting to 1000 [ 472.469234][T15451] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 472.491801][T15446] lo speed is unknown, defaulting to 1000 [ 472.729164][T15458] vlan2: entered allmulticast mode [ 473.371852][T15482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.663661][T15506] __nla_validate_parse: 2 callbacks suppressed [ 473.663701][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'. [ 473.953601][T15510] lo speed is unknown, defaulting to 1000 [ 474.071771][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.104743][T15517] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 474.161552][T15515] macsec1: entered promiscuous mode [ 474.194217][T15515] macsec1: entered allmulticast mode [ 474.308919][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 474.329985][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'. [ 474.382903][T15526] IPVS: Error connecting to the multicast addr [ 474.409433][T15526] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 474.419815][T15526] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 474.425052][T15528] lo speed is unknown, defaulting to 1000 [ 474.428499][T15529] veth0: entered promiscuous mode [ 474.439244][T15526] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 474.524515][T15529] netlink: 'syz.0.2978': attribute type 16 has an invalid length. [ 474.543253][T15529] netlink: 'syz.0.2978': attribute type 17 has an invalid length. [ 474.650658][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.701549][T15529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.723674][ T8977] lo speed is unknown, defaulting to 1000 [ 474.733398][ T8977] syz1: Port: 1 Link ACTIVE [ 474.754917][T15535] netlink: 'syz.1.2979': attribute type 27 has an invalid length. [ 474.847402][T15535] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.854866][T15535] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.870742][T15535] tipc: Resetting bearer [ 474.906757][T15535] wg1: left promiscuous mode [ 474.911693][T15535] wg1: left allmulticast mode [ 474.968205][T15535] batadv_slave_0: left promiscuous mode [ 474.998594][T15535] macsec0: left promiscuous mode [ 475.026303][T15535] macsec1: left promiscuous mode [ 475.056881][T15535] bond2: left promiscuous mode [ 475.062065][T15535] ip6gretap1: left promiscuous mode [ 475.067395][T15535] bond2: left allmulticast mode [ 475.072471][T15535] ip6gretap1: left allmulticast mode [ 475.177959][T15537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.188725][T15537] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.196075][T15537] tipc: Resetting bearer [ 475.205156][T15537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.230451][ T6696] tipc: Resetting bearer [ 475.238331][ T985] syz0: Port: 1 Link DOWN [ 475.248828][ T4766] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.268932][T15529] veth0: left promiscuous mode [ 475.292705][ T4766] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.342387][ T4766] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.391785][ T4766] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.393950][T15543] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2981'. [ 475.842389][ T985] IPVS: starting estimator thread 0... [ 475.848872][T15558] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 475.944424][T15560] IPVS: using max 31 ests per chain, 74400 per kthread [ 475.985987][T15565] vlan2: entered allmulticast mode [ 476.006637][T15565] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 476.273991][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.283942][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.292235][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.303985][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.314766][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.406140][T15578] lo speed is unknown, defaulting to 1000 [ 476.654702][T15598] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2994'. [ 476.887256][T15578] chnl_net:caif_netlink_parms(): no params data found [ 476.959565][T15578] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.967411][T15578] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.974870][T15578] bridge_slave_0: entered allmulticast mode [ 476.983354][T15578] bridge_slave_0: entered promiscuous mode [ 476.991204][T15578] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.998425][T15578] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.006106][T15578] bridge_slave_1: entered allmulticast mode [ 477.014138][T15578] bridge_slave_1: entered promiscuous mode [ 477.060500][T15578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.075311][T15578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.153951][T15578] team0: Port device team_slave_0 added [ 477.163962][T15578] team0: Port device team_slave_1 added [ 477.255789][T15611] lo: entered promiscuous mode [ 477.261584][T15611] tunl0: entered promiscuous mode [ 477.267339][T15611] gre0: entered promiscuous mode [ 477.275404][T15611] gretap0: entered promiscuous mode [ 477.282847][T15611] erspan0: entered promiscuous mode [ 477.289100][T15611] ip_vti0: entered promiscuous mode [ 477.295390][T15611] ip6_vti0: entered promiscuous mode [ 477.302015][T15611] sit0: entered promiscuous mode [ 477.307806][T15611] ip6tnl0: entered promiscuous mode [ 477.318843][T15611] ip6gre0: entered promiscuous mode [ 477.325102][T15611] ip6gretap0: entered promiscuous mode [ 477.331261][T15611] bridge0: entered promiscuous mode [ 477.337291][T15611] vcan0: entered promiscuous mode [ 477.343476][T15611] bond0: entered promiscuous mode [ 477.348581][T15611] bond_slave_0: entered promiscuous mode [ 477.355109][T15611] bond_slave_1: entered promiscuous mode [ 477.363804][T15611] team0: entered promiscuous mode [ 477.368911][T15611] team_slave_0: entered promiscuous mode [ 477.375172][T15611] team_slave_1: entered promiscuous mode [ 477.382282][T15611] dummy0: entered promiscuous mode [ 477.389451][T15611] nlmon0: entered promiscuous mode [ 477.396251][T15611] caif0: entered promiscuous mode [ 477.415994][T15611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.433969][T15578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.442999][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.473101][T15578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.487033][T15578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.505050][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.538772][T15578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.622726][T15622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3000'. [ 477.669883][T15578] hsr_slave_0: entered promiscuous mode [ 477.710666][T15578] hsr_slave_1: entered promiscuous mode [ 477.719837][T15578] debugfs: 'hsr0' already exists in 'hsr' [ 477.725739][T15578] Cannot create hsr debugfs directory [ 477.754875][T15626] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 477.907808][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'. [ 477.937001][T15635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3006'. [ 478.089956][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 478.107019][T15578] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.224367][T15578] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.264162][T15652] tipc: Started in network mode [ 478.269070][T15652] tipc: Node identity 32774288c418, cluster identity 4711 [ 478.283690][T15652] tipc: Enabled bearer , priority 0 [ 478.296214][T15578] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.325062][T15651] tipc: Disabling bearer [ 478.359094][T15578] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.410137][ T5829] Bluetooth: hci0: command tx timeout [ 478.669011][T15578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.682361][T15578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.703922][T15578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.721962][T15578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.868752][T15578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.924533][T15578] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.954084][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.961327][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.985317][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.992542][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.110864][T15690] bridge1: entered allmulticast mode [ 479.162192][T15694] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3021'. [ 479.200878][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 479.214679][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3021'. [ 479.218063][T15697] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 479.291048][T15697] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.341195][T15698] bond6: (slave veth7): Enslaving as an active interface with a down link [ 479.468980][T15578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.545184][T15578] veth0_vlan: entered promiscuous mode [ 479.562422][T15578] veth1_vlan: entered promiscuous mode [ 479.598639][T15578] veth0_macvtap: entered promiscuous mode [ 479.611210][T15578] veth1_macvtap: entered promiscuous mode [ 479.635282][T15578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.653110][T15578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.670217][ T4389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.693791][ T4389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.717525][ T4389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.739457][ T4389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.791231][T15727] netlink: 'syz.1.3027': attribute type 58 has an invalid length. [ 479.799365][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3027'. [ 479.996735][T15730] lo speed is unknown, defaulting to 1000 [ 480.044198][T15733] geneve2: entered promiscuous mode [ 480.049448][T15733] geneve2: entered allmulticast mode [ 480.081091][ T4389] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.105282][ T4389] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.135718][ T4389] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.174134][ T4766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.186398][ T4766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.203968][ T4389] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 480.268053][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3030'. [ 480.281059][T15737] netlink: 'syz.1.3030': attribute type 10 has an invalid length. [ 480.290283][ T756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.303686][T15737] tipc: Resetting bearer [ 480.305894][ T756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.475574][ T5829] Bluetooth: hci0: command tx timeout [ 481.229720][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 481.529996][T15768] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 481.572805][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3037'. [ 481.601037][T15768] dummy0: entered promiscuous mode [ 481.618379][T15768] bridge0: port 3(dummy0) entered blocking state [ 481.626947][T15768] bridge0: port 3(dummy0) entered disabled state [ 481.635266][T15768] dummy0: entered allmulticast mode [ 481.691961][T15772] tipc: Enabled bearer , priority 0 [ 481.739615][T15772] syzkaller0: entered promiscuous mode [ 481.759496][T15772] syzkaller0: entered allmulticast mode [ 482.031077][T15773] tipc: Resetting bearer [ 482.336119][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3045'. [ 482.365307][T15773] tipc: Disabling bearer [ 482.555113][ T5829] Bluetooth: hci0: command tx timeout [ 482.826689][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'. [ 483.092407][T15832] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 483.262562][T15835] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 483.298048][T15835] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 483.336149][T15835] bond12: (slave xfrm1): making interface the new active one [ 483.346536][T15841] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 483.367570][T15835] bond12: (slave xfrm1): Enslaving as an active interface with an up link [ 483.380936][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 483.605355][T15850] lo speed is unknown, defaulting to 1000 [ 483.711879][T15848] netlink: 'syz.0.3057': attribute type 8 has an invalid length. [ 483.836508][T15849] lo speed is unknown, defaulting to 1000 [ 484.417502][T15875] lo: left promiscuous mode [ 484.423099][T15875] __nla_validate_parse: 2 callbacks suppressed [ 484.423115][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.461961][T15875] tunl0: left promiscuous mode [ 484.491991][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.533422][T15875] gre0: left promiscuous mode [ 484.538634][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.582215][T15875] gretap0: left promiscuous mode [ 484.587669][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.610995][T15888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3068'. [ 484.635215][ T5829] Bluetooth: hci0: command tx timeout [ 484.642877][T15875] erspan0: left promiscuous mode [ 484.648237][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.658591][T15875] ip_vti0: left promiscuous mode [ 484.664777][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.674962][T15875] ip6_vti0: left promiscuous mode [ 484.680508][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.690289][T15875] sit0: left promiscuous mode [ 484.696231][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.706135][T15875] ip6tnl0: left promiscuous mode [ 484.712550][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 484.722304][T15875] ip6gre0: left promiscuous mode [ 484.728070][T15875] ip6gretap0: left promiscuous mode [ 484.734712][T15875] bridge0: left promiscuous mode [ 484.740403][T15875] vcan0: left promiscuous mode [ 484.746084][T15875] bond0: left promiscuous mode [ 484.750962][T15875] bond_slave_0: left promiscuous mode [ 484.757668][T15875] bond_slave_1: left promiscuous mode [ 484.796818][T15875] team0: left promiscuous mode [ 484.812225][T15875] team_slave_0: left promiscuous mode [ 484.827823][T15875] team_slave_1: left promiscuous mode [ 484.851053][T15875] dummy0: left promiscuous mode [ 484.868334][T15875] nlmon0: left promiscuous mode [ 484.875778][T15875] caif0: left promiscuous mode [ 484.880695][T15875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.917899][T15887] bond0: (slave erspan0): Error: Device type is different from other slaves [ 484.975817][T15881] sctp: [Deprecated]: syz.3.3066 (pid 15881) Use of int in max_burst socket option. [ 484.975817][T15881] Use struct sctp_assoc_value instead [ 485.195871][T15895] x_tables: duplicate entry at hook 2 [ 485.201154][T15890] bridge1: entered allmulticast mode [ 485.280902][T15896] delete_channel: no stack [ 485.524467][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.532857][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.540765][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.548689][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.556599][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.564518][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.567782][T15909] sctp: [Deprecated]: syz.4.3077 (pid 15909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.567782][T15909] Use struct sctp_sack_info instead [ 485.572440][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.572573][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.572692][T15903] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 485.731400][T15916] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 485.752933][T15909] ip6erspan0: entered allmulticast mode [ 485.766162][T15916] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 486.731426][ T5829] Bluetooth: hci0: command tx timeout [ 487.273859][ T6696] bond0 (unregistering): Released all slaves [ 487.368051][ T6696] bond1 (unregistering): Released all slaves [ 487.382419][ T6696] bond2 (unregistering): Released all slaves [ 487.394563][ T6696] bond3 (unregistering): Released all slaves [ 487.406793][ T6696] bond4 (unregistering): Released all slaves [ 487.601337][ T6696] : left promiscuous mode [ 487.661475][T15964] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 487.687842][T15964] netlink: 'syz.3.3090': attribute type 1 has an invalid length. [ 487.705167][T15964] netlink: 'syz.3.3090': attribute type 3 has an invalid length. [ 487.726799][T15964] netlink: 'syz.3.3090': attribute type 7 has an invalid length. [ 487.734627][ T6696] tipc: Left network mode [ 487.745466][T15964] netlink: 'syz.3.3090': attribute type 8 has an invalid length. [ 487.753822][T15964] NCSI netlink: No device for ifindex 131092 [ 487.797358][T15979] IPVS: length: 147 != 24 [ 488.299865][T16007] 8021q: VLANs not supported on vxcan1 [ 489.235431][T16029] netlink: 'syz.3.3109': attribute type 6 has an invalid length. [ 489.431964][T16047] __nla_validate_parse: 21 callbacks suppressed [ 489.431992][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3113'. [ 489.462075][T16047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 489.469428][T16047] IPv6: NLM_F_CREATE should be set when creating new route [ 489.476766][T16047] IPv6: NLM_F_CREATE should be set when creating new route [ 489.643815][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3115'. [ 490.559646][T16079] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3120'. [ 490.683419][T16096] lo speed is unknown, defaulting to 1000 [ 490.817286][ T6696] IPVS: stop unused estimator thread 0... [ 491.679923][T16133] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3132'. [ 491.680519][T16125] xfrm0: entered promiscuous mode [ 491.696378][T16134] netlink: 'syz.0.3130': attribute type 13 has an invalid length. [ 491.704641][T16134] netlink: 'syz.0.3130': attribute type 17 has an invalid length. [ 491.776919][T16125] xfrm0: entered allmulticast mode [ 491.935007][T16134] net_ratelimit: 45 callbacks suppressed [ 491.935018][T16134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.951216][T16146] Bluetooth: MGMT ver 1.23 [ 491.963545][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'. [ 491.978071][T16148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.978229][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'. [ 492.040252][T16130] lo speed is unknown, defaulting to 1000 [ 492.150145][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.004764][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 493.014194][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'. [ 493.031706][T16173] netlink: 'syz.3.3140': attribute type 15 has an invalid length. [ 493.205769][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 493.705831][T16194] lo speed is unknown, defaulting to 1000 [ 494.212643][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 494.223187][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 494.231132][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 494.254889][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 494.275639][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.339604][ T4766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.351740][ T4766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.362988][T16227] Cannot find add_set index 0 as target [ 494.412555][T16221] tap0: tun_chr_ioctl cmd 1074025677 [ 494.418132][T16221] tap0: linktype set to 776 [ 494.473294][ T4766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.484518][ T4766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.525812][T16216] lo speed is unknown, defaulting to 1000 [ 494.591029][T16237] netlink: 'syz.4.3157': attribute type 11 has an invalid length. [ 494.610915][ T4766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.625180][ T4766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.683492][T16241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3158'. [ 494.777141][ T4766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.810149][ T4766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.865968][T16247] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 494.934718][T16247] dummy0: left allmulticast mode [ 494.939913][T16247] bridge0: port 3(dummy0) entered disabled state [ 494.979927][T16247] bridge_slave_0: left allmulticast mode [ 494.993966][T16247] bridge_slave_0: left promiscuous mode [ 495.000003][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.015440][T16247] bridge_slave_1: left allmulticast mode [ 495.022309][T16247] bridge_slave_1: left promiscuous mode [ 495.028145][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.041635][T16257] netlink: 'syz.4.3159': attribute type 10 has an invalid length. [ 495.046805][T16247] veth0_to_bond: left allmulticast mode [ 495.055240][T16247] veth0_to_bond: left promiscuous mode [ 495.061148][T16247] bridge1: port 2(veth0_to_bond) entered disabled state [ 495.133236][T16247] bond0: (slave bond_slave_0): Releasing backup interface [ 495.158570][T16247] bond0: (slave bond_slave_1): Releasing backup interface [ 495.177570][T16247] team0: Port device team_slave_0 removed [ 495.188104][T16247] team0: Port device team_slave_1 removed [ 495.198217][T16247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.232396][T16247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.240909][T16247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.380927][T16257] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 495.417348][ T4389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.563259][T16272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3163'. [ 495.580564][ T4389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.688395][ T6696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.753571][ T36] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.095672][ T4766] bond12 (unregistering): (slave xfrm1): Releasing backup interface [ 496.272004][ T4766] bond10 (unregistering): (slave geneve0): Releasing active interface [ 496.321789][ T5829] Bluetooth: hci2: command tx timeout [ 496.586925][ T4766] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 496.956932][ T4766] bond0 (unregistering): Released all slaves [ 497.092117][ T4766] bond1 (unregistering): Released all slaves [ 497.220815][ T4766] bond2 (unregistering): Released all slaves [ 497.354568][ T4766] bond3 (unregistering): Released all slaves [ 497.477796][ T4766] bond4 (unregistering): Released all slaves [ 497.602810][ T4766] bond5 (unregistering): Released all slaves [ 497.727706][ T4766] bond6 (unregistering): Released all slaves [ 497.846671][ T4766] bond7 (unregistering): Released all slaves [ 497.940530][ T4766] bond8 (unregistering): Released all slaves [ 498.036195][ T4766] bond9 (unregistering): Released all slaves [ 498.129869][ T4766] bond10 (unregistering): Released all slaves [ 498.142742][ T4766] bond11 (unregistering): Released all slaves [ 498.155625][ T4766] bond12 (unregistering): Released all slaves [ 498.343702][ T4766] : left promiscuous mode [ 498.392751][ T5829] Bluetooth: hci2: command tx timeout [ 498.466212][ T4766] tipc: Left network mode [ 498.518580][T16320] netlink: 'syz.3.3179': attribute type 23 has an invalid length. [ 498.540295][ T4766] IPVS: stopping master sync thread 9182 ... [ 498.649001][T16216] chnl_net:caif_netlink_parms(): no params data found [ 498.733793][T16327] lo speed is unknown, defaulting to 1000 [ 498.760005][T16323] lo speed is unknown, defaulting to 1000 [ 498.950775][T16216] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.959708][T16216] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.967483][T16216] bridge_slave_0: entered allmulticast mode [ 498.976836][T16216] bridge_slave_0: entered promiscuous mode [ 499.116209][T16349] tipc: Enabled bearer , priority 0 [ 499.123760][T16216] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.131091][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.138537][T16216] bridge_slave_1: entered allmulticast mode [ 499.146475][T16216] bridge_slave_1: entered promiscuous mode [ 499.156024][T16351] syzkaller0: entered promiscuous mode [ 499.186401][T16351] syzkaller0: entered allmulticast mode [ 499.197675][T16355] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 499.233455][T16357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3188'. [ 499.244419][T16357] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3188'. [ 499.328125][T16345] tipc: Resetting bearer [ 499.332678][T16362] netlink: 'syz.3.3189': attribute type 3 has an invalid length. [ 499.354219][T16345] tipc: Disabling bearer [ 499.444424][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3191'. [ 499.466010][T16364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3191'. [ 499.516721][T16216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.573347][T16366] vlan2: entered promiscuous mode [ 499.578592][T16366] vlan2: entered allmulticast mode [ 499.594296][T16366] hsr_slave_1: entered allmulticast mode [ 499.634540][T16216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.674990][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 499.983869][T16387] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 500.051158][T16216] team0: Port device team_slave_0 added [ 500.083781][ T4766] hsr_slave_0: left promiscuous mode [ 500.090842][ T4766] hsr_slave_1: left promiscuous mode [ 500.115053][ T4766] veth0_macvtap: left promiscuous mode [ 500.127032][T16389] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.233244][ T4766] pim6reg (unregistering): left allmulticast mode [ 500.471487][ T5829] Bluetooth: hci2: command tx timeout [ 500.871240][T16369] lo speed is unknown, defaulting to 1000 [ 500.873898][T16216] team0: Port device team_slave_1 added [ 500.897912][ T985] lo speed is unknown, defaulting to 1000 [ 500.905444][ T985] syz1: Port: 1 Link DOWN [ 501.024322][T16216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.039880][T16409] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3203'. [ 501.050638][T16216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.077224][T16216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.150666][T16216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.161231][T16216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.187932][T16216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.326005][ T752] smc: removing ib device !yz! [ 501.649802][T16216] hsr_slave_0: entered promiscuous mode [ 501.667159][T16216] hsr_slave_1: entered promiscuous mode [ 502.551674][ T5829] Bluetooth: hci2: command tx timeout [ 502.714201][T16216] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.798099][T16216] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.905696][T16216] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.023011][T16216] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.445267][T16216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.472818][T16216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.540979][T16216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.584838][T16216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.985565][T16216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.034289][T16216] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.066131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.073333][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.116256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.123461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.174982][ T4766] IPVS: stop unused estimator thread 0... [ 504.452841][T16457] macvtap1: entered promiscuous mode [ 504.458174][T16457] veth1_to_hsr: entered promiscuous mode [ 504.472280][T16457] macvtap1: entered allmulticast mode [ 504.477924][T16457] veth1_to_hsr: entered allmulticast mode [ 504.553455][ T9] IPVS: starting estimator thread 0... [ 504.641447][T16466] IPVS: using max 30 ests per chain, 72000 per kthread [ 504.717882][T16216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.725562][T16469] FAULT_INJECTION: forcing a failure. [ 504.725562][T16469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.766258][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.1.3216 Not tainted syzkaller #0 PREEMPT(full) [ 504.766283][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.766294][T16469] Call Trace: [ 504.766301][T16469] [ 504.766309][T16469] dump_stack_lvl+0x189/0x250 [ 504.766336][T16469] ? __pfx____ratelimit+0x10/0x10 [ 504.766357][T16469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.766379][T16469] ? __pfx__printk+0x10/0x10 [ 504.766410][T16469] should_fail_ex+0x414/0x560 [ 504.766441][T16469] _copy_to_user+0x31/0xb0 [ 504.766472][T16469] simple_read_from_buffer+0xe1/0x170 [ 504.766501][T16469] proc_fail_nth_read+0x1b3/0x220 [ 504.766526][T16469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.766550][T16469] ? rw_verify_area+0x2a6/0x4d0 [ 504.766571][T16469] ? __lock_acquire+0xab9/0xd20 [ 504.766586][T16469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.766608][T16469] vfs_read+0x200/0xa30 [ 504.766628][T16469] ? fdget_pos+0x247/0x320 [ 504.766648][T16469] ? __pfx___mutex_lock+0x10/0x10 [ 504.766671][T16469] ? __pfx_vfs_read+0x10/0x10 [ 504.766694][T16469] ? __fget_files+0x2a/0x420 [ 504.766716][T16469] ? __fget_files+0x3a0/0x420 [ 504.766731][T16469] ? __fget_files+0x2a/0x420 [ 504.766757][T16469] ksys_read+0x145/0x250 [ 504.766782][T16469] ? __pfx_ksys_read+0x10/0x10 [ 504.766808][T16469] ? do_syscall_64+0xbe/0xfa0 [ 504.766832][T16469] do_syscall_64+0xfa/0xfa0 [ 504.766850][T16469] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.766869][T16469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.766886][T16469] ? clear_bhb_loop+0x60/0xb0 [ 504.766907][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.766923][T16469] RIP: 0033:0x7fddf5d8e15c [ 504.766940][T16469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 504.766956][T16469] RSP: 002b:00007fddf6bac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.766976][T16469] RAX: ffffffffffffffda RBX: 00007fddf5fe5fa0 RCX: 00007fddf5d8e15c [ 504.766988][T16469] RDX: 000000000000000f RSI: 00007fddf6bac0a0 RDI: 0000000000000004 [ 504.766999][T16469] RBP: 00007fddf6bac090 R08: 0000000000000000 R09: 0000000000000000 [ 504.767010][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.767020][T16469] R13: 00007fddf5fe6038 R14: 00007fddf5fe5fa0 R15: 00007ffeaa43c1c8 [ 504.767053][T16469] [ 504.781948][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3218'. [ 505.020464][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3218'. [ 505.126785][T16216] veth0_vlan: entered promiscuous mode [ 505.162578][T16216] veth1_vlan: entered promiscuous mode [ 505.174743][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 505.195603][T16216] veth0_macvtap: entered promiscuous mode [ 505.244230][T16216] veth1_macvtap: entered promiscuous mode [ 505.307776][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'. [ 505.329139][T16486] tipc: Started in network mode [ 505.334497][T16486] tipc: Node identity 9a9ee2066e95, cluster identity 4711 [ 505.343111][T16486] tipc: Enabled bearer , priority 0 [ 505.353677][T16216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.454217][T16483] tipc: Enabling of bearer rejected, already enabled [ 505.464448][T16486] syzkaller0: entered promiscuous mode [ 505.469945][T16486] syzkaller0: entered allmulticast mode [ 505.480935][T16216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.533228][T16486] tipc: Resetting bearer [ 505.550726][T16482] tipc: Resetting bearer [ 505.575818][T16482] tipc: Disabling bearer [ 505.590115][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.599478][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.668703][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.679894][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.847541][T16499] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3224'. [ 505.859177][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'. [ 505.880447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.891035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.944966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.962681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.971413][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.979856][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.298879][T16516] openvswitch: netlink: Unknown nsh attribute 0 [ 506.298879][T16518] openvswitch: netlink: Unknown nsh attribute 0 [ 506.298913][T16516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.346669][T16518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.559100][T16534] Cannot find add_set index 0 as target [ 506.578607][T16536] Cannot find add_set index 0 as target [ 506.786001][T16537] lec:lec_atm_close: lec0: Shut down! [ 507.064377][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 507.074163][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 507.118443][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3241'. [ 507.137115][T16550] bond1: Removing last arp target with arp_interval on [ 507.144168][T16550] bond1: entered promiscuous mode [ 507.149509][T16550] bond1: entered allmulticast mode [ 507.475141][T16576] netlink: 'syz.3.3245': attribute type 96 has an invalid length. [ 507.540397][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 507.562120][T16576] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3245'. [ 508.179138][ T8973] hid-generic 0005:0002:5508.0002: item fetching failed at offset 3/4 [ 508.243115][ T8973] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 508.455663][T16628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.464673][T16628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.512876][T16628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.543632][T16628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.560993][T16628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.688392][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 509.155123][T16667] netlink: 'syz.2.3265': attribute type 39 has an invalid length. [ 509.256440][T16667] hsr_slave_1 (unregistering): left promiscuous mode [ 509.276205][T16679] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.3267'. [ 509.492919][ T4766] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.522452][T16623] chnl_net:caif_netlink_parms(): no params data found [ 509.564201][ T756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.579642][T16693] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 509.648269][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 509.655222][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 509.670265][ T4766] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.720441][ T4766] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.758861][ T13] bridge_slave_1: left allmulticast mode [ 509.765914][ T13] bridge_slave_1: left promiscuous mode [ 509.772374][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.782988][ T13] bridge_slave_0: left allmulticast mode [ 509.788645][ T13] bridge_slave_0: left promiscuous mode [ 509.794788][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.930093][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 510.632605][ T5829] Bluetooth: hci3: command tx timeout [ 510.725968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.735830][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.745651][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 510.754271][ T13] tipc: Resetting bearer [ 510.760561][ T13] bond0 (unregistering): Released all slaves [ 510.774448][ T13] bond1 (unregistering): Released all slaves [ 510.867150][ T13] bond2 (unregistering): Released all slaves [ 510.880847][ T13] bond3 (unregistering): (slave bond4): Releasing backup interface [ 510.890024][ T13] bond3 (unregistering): Released all slaves [ 510.984732][ T13] bond4 (unregistering): Released all slaves [ 510.997098][ T13] bond5 (unregistering): Released all slaves [ 511.094102][ T13] bond6 (unregistering): (slave veth7): Releasing active interface [ 511.103585][ T13] bond6 (unregistering): Released all slaves [ 511.138786][T16693] team0: Port device team_slave_0 removed [ 511.281532][ T13] tipc: Disabling bearer [ 511.355720][ T13] tipc: Left network mode [ 511.379112][T16623] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.386608][T16623] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.402999][T16623] bridge_slave_0: entered allmulticast mode [ 511.414068][T16623] bridge_slave_0: entered promiscuous mode [ 511.483159][T16623] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.490323][T16623] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.497984][T16623] bridge_slave_1: entered allmulticast mode [ 511.552370][T16623] bridge_slave_1: entered promiscuous mode [ 511.725768][T16727] syzkaller0: entered promiscuous mode [ 511.731652][T16727] syzkaller0: entered allmulticast mode [ 511.798104][T16734] 8021q: VLANs not supported on ip6gre0 [ 512.012890][T16623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.070227][T16623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.398920][T16623] team0: Port device team_slave_0 added [ 512.413447][T16623] team0: Port device team_slave_1 added [ 512.642983][T16623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.668997][T16623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.697267][T16623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.713130][ T5829] Bluetooth: hci3: command tx timeout [ 512.842358][ T13] hsr_slave_0: left promiscuous mode [ 512.848678][ T13] hsr_slave_1: left promiscuous mode [ 512.865672][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.894792][ T13] veth1_to_hsr: left allmulticast mode [ 512.921230][ T13] veth1_to_hsr: left promiscuous mode [ 512.996816][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3291'. [ 513.298331][ T13] team0 (unregistering): Port device team_slave_1 removed [ 513.336760][ T13] team0 (unregistering): Port device team_slave_0 removed [ 513.686830][T16623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.694099][T16623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.720129][T16623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.750476][T16776] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 513.760327][T16776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 513.773207][T16776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 513.923121][T16623] hsr_slave_0: entered promiscuous mode [ 513.929867][T16623] hsr_slave_1: entered promiscuous mode [ 513.949187][T16623] debugfs: 'hsr0' already exists in 'hsr' [ 513.957771][T16623] Cannot create hsr debugfs directory [ 514.088656][T16802] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 514.234691][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'. [ 514.289718][T16810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3297'. [ 514.312842][T16810] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 514.369793][ T13] IPVS: stop unused estimator thread 0... [ 514.388755][T16623] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.589284][T16623] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.791541][ T5829] Bluetooth: hci3: command tx timeout [ 514.823830][T16623] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.872051][T16829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3302'. [ 515.001044][T16623] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.167131][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'. [ 515.183124][T16825] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 515.187187][T16845] netlink: 'syz.4.3306': attribute type 12 has an invalid length. [ 515.201111][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 515.244988][T16849] erspan0: entered promiscuous mode [ 515.320184][T16623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 515.338507][T16623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.350224][T16854] syzkaller0: entered promiscuous mode [ 515.356037][T16854] syzkaller0: entered allmulticast mode [ 515.364811][T16623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.384568][T16623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.533311][T16868] bridge0: entered promiscuous mode [ 515.539059][T16868] macsec1: entered promiscuous mode [ 515.545797][T16868] bridge0: port 3(macsec1) entered blocking state [ 515.552784][T16868] bridge0: port 3(macsec1) entered disabled state [ 515.559496][T16868] macsec1: entered allmulticast mode [ 515.565199][T16868] bridge0: entered allmulticast mode [ 515.572264][T16868] macsec1: left allmulticast mode [ 515.577288][T16868] bridge0: left allmulticast mode [ 515.585246][T16868] bridge0: left promiscuous mode [ 515.615779][T16623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.647269][T16623] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.669166][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.676414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.696724][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.703922][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.815644][T16878] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3312'. [ 516.031224][T16623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.104946][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 516.130887][T16884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3313'. [ 516.148475][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 516.178525][T16623] veth0_vlan: entered promiscuous mode [ 516.210333][T16623] veth1_vlan: entered promiscuous mode [ 516.283834][T16623] veth0_macvtap: entered promiscuous mode [ 516.306463][T16623] veth1_macvtap: entered promiscuous mode [ 516.389670][T16623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.427639][T16623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.469198][ T756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.490688][ T756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.521434][ T756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.567873][T16628] Bluetooth: hci0: command 0x080f tx timeout [ 516.579007][ T756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.750213][T16921] netlink: 'syz.0.3322': attribute type 5 has an invalid length. [ 516.885535][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.887524][T16628] Bluetooth: hci3: command tx timeout [ 516.916471][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.986004][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.997418][T16931] syzkaller0: entered promiscuous mode [ 517.003227][T16931] syzkaller0: entered allmulticast mode [ 517.008962][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.038032][ T5881] IPVS: starting estimator thread 0... [ 517.047847][T16931] IPVS: lc: FWM 3 0x00000003 - no destination available [ 517.098448][T16936] unsupported nlmsg_type 40 [ 517.132030][T16934] IPVS: using max 30 ests per chain, 72000 per kthread [ 517.155730][T16936] syz_tun: entered allmulticast mode [ 517.169587][T16936] dvmrp8: entered allmulticast mode [ 517.190111][T16935] syz_tun: left allmulticast mode [ 517.525075][T16964] sctp: [Deprecated]: syz.3.3333 (pid 16964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.525075][T16964] Use struct sctp_sack_info instead [ 517.639961][T16968] syzkaller0: entered promiscuous mode [ 517.646947][T16968] syzkaller0: entered allmulticast mode [ 518.030106][T16985] __nla_validate_parse: 6 callbacks suppressed [ 518.030127][T16985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3339'. [ 518.074487][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3340'. [ 518.099624][T16987] bond_slave_0: entered promiscuous mode [ 518.105631][T16987] bond_slave_1: entered promiscuous mode [ 518.124980][T16987] macvtap1: entered promiscuous mode [ 518.137075][T16987] bond0: entered promiscuous mode [ 518.150849][T16987] macvtap1: entered allmulticast mode [ 518.166065][T16987] bond0: entered allmulticast mode [ 518.171217][T16987] bond_slave_0: entered allmulticast mode [ 518.177295][T16987] bond_slave_1: entered allmulticast mode [ 518.189901][T16996] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 518.227558][T16987] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 518.539982][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 518.574637][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 518.666638][T17011] vxcan3: entered allmulticast mode [ 518.895868][T17043] netlink: 'syz.2.3355': attribute type 11 has an invalid length. [ 518.956976][T16628] Bluetooth: hci3: command 0x0405 tx timeout [ 519.183800][T17058] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3362'. [ 519.329301][T17066] sock: sock_timestamping_bind_phc: sock not bind to device [ 519.368376][T17068] tc_dump_action: action bad kind [ 519.456795][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 519.520277][ T752] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.538248][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 519.547627][ T752] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.562796][ T752] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.579771][ T752] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.601731][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3369'. [ 519.767823][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 519.789334][T17088] kthread_run failed with err -4 [ 519.798687][T17085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3369'. [ 519.968141][T17108] nbd: nbd0 already in use [ 520.019080][T17114] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 520.081089][T17114] batadv0: entered promiscuous mode [ 520.086789][T17114] batadv0: entered allmulticast mode [ 520.092928][T17114] bridge0: port 3(batadv0) entered blocking state [ 520.099696][T17114] bridge0: port 3(batadv0) entered disabled state [ 520.109568][T17114] bridge0: port 3(batadv0) entered blocking state [ 520.116238][T17114] bridge0: port 3(batadv0) entered forwarding state [ 520.301554][ T4389] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 520.311171][ T4389] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 520.374925][T17126] bridge0: port 3(batadv0) entered disabled state [ 520.381699][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.389381][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.507801][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.524979][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.685353][T17128] netlink: 'syz.2.3381': attribute type 8 has an invalid length. [ 520.704979][T17128] sch_fq: defrate 0 ignored. [ 520.729758][T17130] gretap1: entered promiscuous mode [ 520.750726][ T6696] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.787439][ T6696] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.827830][ T6696] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.852233][ T6696] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.055597][T17152] syzkaller0: entered promiscuous mode [ 521.073664][T17152] syzkaller0: entered allmulticast mode [ 521.135819][T17156] veth3: entered promiscuous mode [ 521.170113][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.178728][T17158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.188329][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.201998][T17158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.695372][T17190] sctp: [Deprecated]: syz.4.3393 (pid 17190) Use of int in maxseg socket option. [ 521.695372][T17190] Use struct sctp_assoc_value instead [ 521.810298][T17194] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 521.832077][T17197] netlink: 'syz.3.3399': attribute type 21 has an invalid length. [ 521.856553][T17194] netlink: 'syz.0.3398': attribute type 3 has an invalid length. [ 522.176070][T17215] netlink: 'syz.2.3405': attribute type 13 has an invalid length. [ 522.186296][T17215] netlink: 'syz.2.3405': attribute type 17 has an invalid length. [ 522.211802][T17219] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 522.672087][T17225] syzkaller0: entered promiscuous mode [ 522.678042][T17225] syzkaller0: entered allmulticast mode [ 523.145349][T17256] netlink: 'syz.0.3413': attribute type 1 has an invalid length. [ 524.361909][T17256] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 524.488655][T17265] delete_channel: no stack [ 524.502879][T17265] delete_channel: no stack [ 524.523685][T17267] __nla_validate_parse: 16 callbacks suppressed [ 524.523702][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 524.595559][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 524.620658][T17273] netlink: 'syz.4.3418': attribute type 4 has an invalid length. [ 524.674069][T17269] netlink: 'syz.4.3418': attribute type 4 has an invalid length. [ 524.693159][T17272] bridge_slave_1: left allmulticast mode [ 524.709967][T17272] bridge_slave_1: left promiscuous mode [ 524.732599][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3419'. [ 524.791930][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.827912][T17272] bridge_slave_0: left allmulticast mode [ 524.859012][T17272] bridge_slave_0: left promiscuous mode [ 524.873340][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.901665][T17285] nbd: socks must be embedded in a SOCK_ITEM attr [ 525.179081][T17275] dvmrp0: entered allmulticast mode [ 525.333095][ T4766] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.343278][ T4766] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.392291][ T4766] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.430149][ T4766] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.489556][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3424'. [ 525.732446][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3427'. [ 525.869391][T17325] netlink: 'syz.4.3430': attribute type 10 has an invalid length. [ 525.908830][T17325] batman_adv: batadv0: Adding interface: macvtap0 [ 525.922044][T17325] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.954563][T17325] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 525.988643][T17325] pim6reg1: entered allmulticast mode [ 526.318818][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3439'. [ 526.396284][T17310] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 526.592176][T17369] delete_channel: no stack [ 527.178033][T17391] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3450'. [ 527.229013][T17391] netlink: 'syz.4.3450': attribute type 9 has an invalid length. [ 527.237104][T17391] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3450'. [ 527.246494][T17391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3450'. [ 527.986072][T17421] syzkaller0: entered promiscuous mode [ 527.992569][T17421] syzkaller0: entered allmulticast mode [ 528.178118][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3458'. [ 528.187397][T17426] netlink: 'syz.4.3458': attribute type 14 has an invalid length. [ 528.197002][T17426] netlink: 'syz.4.3458': attribute type 14 has an invalid length. [ 528.206365][T17428] macvlan0: entered allmulticast mode [ 528.212495][T17428] veth1_vlan: entered allmulticast mode [ 528.221674][T17428] team0: Port device macvlan0 added [ 528.568550][T17453] openvswitch: netlink: Duplicate or invalid key (type 0). [ 528.577125][T17454] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 528.583453][T17453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.650305][T17459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 528.699383][T17459] veth1_vlan: left allmulticast mode [ 528.894655][T17478] ksmbd: Unknown IPC event: 1, ignore. [ 528.913391][T17475] x_tables: ip_tables: osf match: only valid for protocol 6 [ 528.945160][T17483] netlink: 'syz.3.3475': attribute type 21 has an invalid length. [ 528.953659][T17483] netlink: 'syz.3.3475': attribute type 22 has an invalid length. [ 528.968054][T17483] netlink: 'syz.3.3475': attribute type 23 has an invalid length. [ 528.977908][T17483] netlink: 'syz.3.3475': attribute type 25 has an invalid length. [ 528.986059][T17487] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 529.237357][T17489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.360612][T17489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.403033][T17511] dummy0: entered promiscuous mode [ 529.411677][T17511] dummy0: left promiscuous mode [ 529.482538][T17489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.521975][T17515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.577919][T17489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.716671][ T752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.831725][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.876826][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.887431][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.006825][T17543] __nla_validate_parse: 14 callbacks suppressed [ 530.006868][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 530.366516][T17559] netlink: 'syz.4.3495': attribute type 3 has an invalid length. [ 530.598428][T17569] batadv1: entered promiscuous mode [ 531.144286][T17607] syzkaller0: entered promiscuous mode [ 531.151044][T17607] syzkaller0: entered allmulticast mode [ 531.183459][T17607] tipc: Enabled bearer , priority 0 [ 531.198415][T17606] tipc: Resetting bearer [ 531.216897][T17606] tipc: Disabling bearer [ 531.261014][T17611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 531.396897][T17622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3512'. [ 531.638380][T17637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3518'. [ 531.649010][T17637] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3518'. [ 531.659292][T17637] netlink: 'syz.3.3518': attribute type 5 has an invalid length. [ 531.668735][T17637] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3518'. [ 531.760432][T17592] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 531.772691][T17592] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 531.991158][T17660] syzkaller0: entered promiscuous mode [ 531.991933][ T6696] wlan0: Trigger new scan to find an IBSS to join [ 532.007829][T17660] syzkaller0: entered allmulticast mode [ 532.065078][T17660] tipc: Started in network mode [ 532.073849][T17660] tipc: Node identity 3a18c789af0e, cluster identity 4711 [ 532.090258][T17660] tipc: Enabled bearer , priority 0 [ 532.116493][T17659] tipc: Resetting bearer [ 532.166338][T17659] tipc: Disabling bearer [ 532.196365][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 532.960291][T17719] vlan2: entered promiscuous mode [ 532.981004][T17719] bond0: entered promiscuous mode [ 532.986195][T17719] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 533.426442][T17752] netlink: 'syz.2.3549': attribute type 13 has an invalid length. [ 533.434896][T17752] netlink: 'syz.2.3549': attribute type 17 has an invalid length. [ 534.835976][T17752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.032312][ T12] wlan0: Trigger new scan to find an IBSS to join [ 535.071735][T17778] xfrm0: entered promiscuous mode [ 535.115032][T17778] xfrm0: entered allmulticast mode [ 535.255863][T17787] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3560'. [ 535.405244][T17794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.414103][T17794] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.421725][T17794] dummy0: left promiscuous mode [ 535.428553][T17794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.464909][T17798] vlan2: entered promiscuous mode [ 535.477569][T17798] geneve1: entered promiscuous mode [ 535.490138][T17798] vlan2: entered allmulticast mode [ 535.507982][T17798] geneve1: entered allmulticast mode [ 535.668591][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 535.721688][T17813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3566'. [ 535.794072][T17815] tipc: Enabling of bearer rejected, failed to enable media [ 536.064588][T17827] erspan0: entered promiscuous mode [ 536.092203][T17826] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 536.102676][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 536.115143][T17826] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 536.318180][T17840] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3574'. [ 536.360272][T17842] syzkaller0: entered promiscuous mode [ 536.375977][T17842] syzkaller0: entered allmulticast mode [ 536.377705][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 536.673080][T17861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 536.883056][T17844] team0 (unregistering): Port device team_slave_0 removed [ 536.896518][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3579'. [ 536.911214][T17844] team0 (unregistering): Port device team_slave_1 removed [ 536.942906][T17850] tipc: Enabled bearer , priority 0 [ 536.950722][T17857] tc_dump_action: action bad kind [ 536.978550][T17841] tipc: Resetting bearer [ 537.006523][T17841] tipc: Disabling bearer [ 537.155784][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3581'. [ 537.204105][T17878] xfrm0: left promiscuous mode [ 537.216365][T17878] geneve2: left promiscuous mode [ 537.223017][T17878] macvtap1: left promiscuous mode [ 537.228064][T17878] bond0: left promiscuous mode [ 537.238593][T17878] vlan2: left promiscuous mode [ 537.247223][T17878] geneve1: left promiscuous mode [ 537.552972][T17902] bond1: ARP target 9.0.0.0 is already present [ 537.560352][T17902] bond1: option arp_ip_target: invalid value (9) [ 537.586054][T17902] bond1 (unregistering): Released all slaves [ 537.818967][T17922] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3596'. [ 537.985956][T17936] batadv0: left allmulticast mode [ 537.993498][ T756] wlan0: Trigger new scan to find an IBSS to join [ 538.004423][T17936] batadv0: left promiscuous mode [ 538.018278][T17936] bridge0: port 3(batadv0) entered disabled state [ 538.100396][T17936] bridge_slave_1: left allmulticast mode [ 538.116657][T17936] bridge_slave_1: left promiscuous mode [ 538.122948][T17936] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.138593][T17936] bridge_slave_0: left allmulticast mode [ 538.149133][T17936] bridge_slave_0: left promiscuous mode [ 538.157153][T17936] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.707681][T17964] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.973804][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.350685][T18002] netlink: 'syz.3.3616': attribute type 29 has an invalid length. [ 539.377152][T18002] netlink: 'syz.3.3616': attribute type 29 has an invalid length. [ 539.650179][T18017] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 539.980828][T18029] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 540.001433][T18029] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 540.548839][T18053] tipc: Started in network mode [ 540.557362][T18053] tipc: Node identity 6a9c18be8ec3, cluster identity 4711 [ 540.564940][T18053] tipc: Enabled bearer , priority 0 [ 540.573520][T18053] syzkaller0: entered promiscuous mode [ 540.579542][T18053] syzkaller0: entered allmulticast mode [ 540.614671][T18053] tipc: Resetting bearer [ 540.769330][T18052] tipc: Resetting bearer [ 540.863642][T18052] tipc: Disabling bearer [ 540.878479][T18076] netlink: 'syz.0.3635': attribute type 1 has an invalid length. [ 540.891761][T18066] netlink: 'syz.3.3633': attribute type 12 has an invalid length. [ 540.906627][T18070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 541.032639][T18076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.107390][T18078] bond1: (slave ip6gretap2): making interface the new active one [ 541.122915][T18078] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 541.501862][T18099] __nla_validate_parse: 17 callbacks suppressed [ 541.501879][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 541.855582][T18125] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3644'. [ 542.087988][T18138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3652'. [ 542.097604][T18138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3652'. [ 542.108523][T18138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3652'. [ 542.130154][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 542.157780][T18138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3652'. [ 542.200850][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 542.320108][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3656'. [ 542.329393][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3656'. [ 542.976276][T18197] sctp: [Deprecated]: syz.2.3672 (pid 18197) Use of int in max_burst socket option. [ 542.976276][T18197] Use struct sctp_assoc_value instead [ 543.002638][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.010573][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.020308][T18200] tipc: Enabled bearer , priority 0 [ 543.050525][T18200] tipc: Disabling bearer [ 543.134914][T18206] bridge0: entered promiscuous mode [ 543.142897][T18206] bridge0: port 3(vlan1) entered blocking state [ 543.149438][T18206] bridge0: port 3(vlan1) entered disabled state [ 543.156865][T18206] vlan1: entered allmulticast mode [ 543.174792][T18206] bridge0: entered allmulticast mode [ 543.187099][T18206] vlan1: left allmulticast mode [ 543.197750][T18206] bridge0: left allmulticast mode [ 543.209121][T18206] bridge0: left promiscuous mode [ 543.264596][T18208] ipvlan2: entered promiscuous mode [ 543.311399][T18208] team0: Device ipvlan2 is already an upper device of the team interface [ 543.994018][T18268] syzkaller0: entered promiscuous mode [ 543.999505][T18268] syzkaller0: entered allmulticast mode [ 545.285356][T18320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 546.406456][T18294] lo: entered allmulticast mode [ 546.412041][T18296] lo: left allmulticast mode [ 546.465028][T18320] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 546.615322][T18332] __nla_validate_parse: 14 callbacks suppressed [ 546.615341][T18332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3708'. [ 546.948442][T18348] nr0: renamed from bond0 [ 547.005518][T18348] A link change request failed with some changes committed already. Interface nr0 may have been left with an inconsistent configuration, please check. [ 547.047206][T18356] netlink: 'syz.2.3714': attribute type 4 has an invalid length. [ 547.083828][T18356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3714'. [ 547.277997][T18373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3720'. [ 547.352696][T18379] netlink: 'syz.4.3721': attribute type 10 has an invalid length. [ 547.440954][T18384] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 547.480616][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'. [ 547.506217][T18387] netlink: 'syz.3.3723': attribute type 30 has an invalid length. [ 547.530951][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.545458][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'. [ 547.561769][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.575049][T18387] netlink: 'syz.3.3723': attribute type 30 has an invalid length. [ 547.584850][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.619858][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.754312][T18405] batadv_slave_1: entered promiscuous mode [ 547.794952][T18405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3726'. [ 547.816959][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 547.882161][T18405] batadv_slave_1 (unregistering): left promiscuous mode [ 548.156780][T18422] netlink: 'syz.0.3731': attribute type 1 has an invalid length. [ 548.198974][T18422] bond2: entered promiscuous mode [ 548.204311][T18422] bond2: entered allmulticast mode [ 548.210082][T18422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.369949][T18436] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3733'. [ 548.502914][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3733'. [ 548.564464][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3733'. [ 548.682276][T18446] netlink: 'syz.0.3739': attribute type 6 has an invalid length. [ 548.715705][T18446] netlink: 'syz.0.3739': attribute type 6 has an invalid length. [ 549.538963][T18484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.690770][T18484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.822471][T18484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.954766][T18484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.187140][ T4389] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.219380][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.329121][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.347860][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.402939][T18522] tipc: Enabled bearer , priority 10 [ 550.476424][T18522] bridge1: entered allmulticast mode [ 550.527156][T18530] xt_hashlimit: max too large, truncated to 1048576 [ 550.544866][T18530] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 550.640544][T18534] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 550.757666][T18542] netlink: 'syz.2.3765': attribute type 13 has an invalid length. [ 550.770983][T18542] netlink: 'syz.2.3765': attribute type 17 has an invalid length. [ 550.819312][T18546] netlink: 'syz.0.3768': attribute type 3 has an invalid length. [ 550.838185][T18546] syz_tun: entered allmulticast mode [ 550.899253][T18550] syz_tun: left allmulticast mode [ 550.985972][T18555] veth5: entered promiscuous mode [ 551.114499][T18564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.336462][T18571] bond0: option updelay: invalid value (18446744073709551615) [ 551.344958][T18571] bond0: option updelay: allowed values 0 - 2147483647 [ 551.356523][T18571] bond0 (unregistering): Released all slaves [ 551.631766][ T985] tipc: Node number set to 3831437502 [ 551.657221][T18580] syzkaller1: entered promiscuous mode [ 551.674979][T18580] syzkaller1: entered allmulticast mode [ 551.704587][T18593] !: entered promiscuous mode [ 551.829822][T18605] __nla_validate_parse: 8 callbacks suppressed [ 551.829848][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 551.857210][T18607] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3781'. [ 551.895642][T18606] !: left promiscuous mode [ 551.917188][T18607] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3781'. [ 552.458675][T18621] validate_nla: 6 callbacks suppressed [ 552.458692][T18621] netlink: 'syz.4.3785': attribute type 1 has an invalid length. [ 552.494428][T18621] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 552.550372][T18625] syz_tun: entered promiscuous mode [ 552.555894][T18625] vlan2: entered promiscuous mode [ 552.586038][T18621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.752495][T18613] netlink: 'syz.3.3783': attribute type 6 has an invalid length. [ 570.242420][ T5829] Bluetooth: hci1: command 0x0419 tx timeout [ 571.351759][ T4766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 578.392719][ C0] ------------[ cut here ]------------ [ 578.398405][ C0] ODEBUG: free active (active state 0) object: ffff888054f53890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 578.412365][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 578.421686][ C0] Modules linked in: [ 578.425765][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 578.434706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.444768][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 578.450593][ C0] Code: 4c 89 ff e8 67 cb 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 9a 23 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 4e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 578.470243][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 578.476380][ C0] RAX: 864ded4e230ab300 RBX: dffffc0000000000 RCX: ffffffff8dc95200 [ 578.484405][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 578.492421][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 578.500410][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a3a95b0 [ 578.508435][ C0] R13: ffffffff8bbf1400 R14: ffff888054f53890 R15: ffffffff8b6cf7e0 [ 578.516476][ C0] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 578.525466][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.532106][ C0] CR2: 00007fa5b0cda66e CR3: 000000000dd38000 CR4: 00000000003526f0 [ 578.540131][ C0] Call Trace: [ 578.543451][ C0] [ 578.546325][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 578.551939][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 578.557083][ C0] kfree+0x115/0x6d0 [ 578.561012][ C0] rose_timer_expiry+0x4cb/0x600 [ 578.566005][ C0] call_timer_fn+0x17e/0x5f0 [ 578.570610][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 578.576112][ C0] ? call_timer_fn+0xbe/0x5f0 [ 578.580817][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 578.585989][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.591205][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.596448][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 578.601949][ C0] __run_timer_base+0x61a/0x860 [ 578.606844][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 578.612289][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 578.618581][ C0] run_timer_softirq+0xb7/0x180 [ 578.623498][ C0] handle_softirqs+0x286/0x870 [ 578.628297][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 578.633109][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 578.638425][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 578.643692][ C0] __irq_exit_rcu+0xca/0x1f0 [ 578.648312][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 578.653563][ C0] irq_exit_rcu+0x9/0x30 [ 578.657820][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 578.663506][ C0] [ 578.666449][ C0] [ 578.669382][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 578.675446][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 578.681189][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 01 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 578.700844][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 578.706960][ C0] RAX: 864ded4e230ab300 RBX: ffffffff81967b47 RCX: 864ded4e230ab300 [ 578.714984][ C0] RDX: 0000000000000001 RSI: ffffffff8d713f90 RDI: ffffffff8bbf08e0 [ 578.722993][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 578.730990][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d1a70 [ 578.739018][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 578.747038][ C0] ? do_idle+0x1e7/0x510 [ 578.751353][ C0] default_idle+0x13/0x20 [ 578.755726][ C0] default_idle_call+0x73/0xb0 [ 578.760512][ C0] do_idle+0x1e7/0x510 [ 578.764631][ C0] ? __pfx_do_idle+0x10/0x10 [ 578.769261][ C0] cpu_startup_entry+0x44/0x60 [ 578.774064][ C0] rest_init+0x2de/0x300 [ 578.778328][ C0] start_kernel+0x3ae/0x410 [ 578.782874][ C0] x86_64_start_reservations+0x24/0x30 [ 578.788342][ C0] x86_64_start_kernel+0x143/0x1c0 [ 578.793482][ C0] common_startup_64+0x13e/0x147 [ 578.798449][ C0] [ 578.801494][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.808774][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 578.817701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.827759][ C0] Call Trace: [ 578.831050][ C0] [ 578.833912][ C0] dump_stack_lvl+0x99/0x250 [ 578.838530][ C0] ? __asan_memcpy+0x40/0x70 [ 578.843133][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.848335][ C0] ? __pfx__printk+0x10/0x10 [ 578.852933][ C0] vpanic+0x237/0x6d0 [ 578.856918][ C0] ? __pfx_vpanic+0x10/0x10 [ 578.861427][ C0] panic+0xb9/0xc0 [ 578.865143][ C0] ? __pfx_panic+0x10/0x10 [ 578.869568][ C0] __warn+0x31b/0x4b0 [ 578.873549][ C0] ? debug_print_object+0x16b/0x1e0 [ 578.878749][ C0] ? debug_print_object+0x16b/0x1e0 [ 578.883941][ C0] report_bug+0x2be/0x4f0 [ 578.888259][ C0] ? debug_print_object+0x16b/0x1e0 [ 578.893450][ C0] ? debug_print_object+0x16b/0x1e0 [ 578.898645][ C0] ? debug_print_object+0x16d/0x1e0 [ 578.903839][ C0] handle_bug+0x84/0x160 [ 578.908076][ C0] exc_invalid_op+0x1a/0x50 [ 578.912568][ C0] asm_exc_invalid_op+0x1a/0x20 [ 578.917419][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 578.923243][ C0] Code: 4c 89 ff e8 67 cb 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 9a 23 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 4e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 578.942857][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 578.948928][ C0] RAX: 864ded4e230ab300 RBX: dffffc0000000000 RCX: ffffffff8dc95200 [ 578.956890][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 578.964849][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 578.972812][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a3a95b0 [ 578.980775][ C0] R13: ffffffff8bbf1400 R14: ffff888054f53890 R15: ffffffff8b6cf7e0 [ 578.988743][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 578.994395][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 578.999950][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 579.005050][ C0] kfree+0x115/0x6d0 [ 579.008944][ C0] rose_timer_expiry+0x4cb/0x600 [ 579.013881][ C0] call_timer_fn+0x17e/0x5f0 [ 579.018458][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 579.023904][ C0] ? call_timer_fn+0xbe/0x5f0 [ 579.028579][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 579.033711][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.038924][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.044137][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 579.049598][ C0] __run_timer_base+0x61a/0x860 [ 579.054470][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 579.059878][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 579.066129][ C0] run_timer_softirq+0xb7/0x180 [ 579.070986][ C0] handle_softirqs+0x286/0x870 [ 579.075761][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 579.080526][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 579.085807][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 579.090999][ C0] __irq_exit_rcu+0xca/0x1f0 [ 579.095578][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 579.100776][ C0] irq_exit_rcu+0x9/0x30 [ 579.105010][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 579.110662][ C0] [ 579.113581][ C0] [ 579.116499][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 579.122473][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 579.128198][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 01 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 579.147815][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 579.153910][ C0] RAX: 864ded4e230ab300 RBX: ffffffff81967b47 RCX: 864ded4e230ab300 [ 579.161879][ C0] RDX: 0000000000000001 RSI: ffffffff8d713f90 RDI: ffffffff8bbf08e0 [ 579.169839][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 579.177802][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d1a70 [ 579.185768][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 579.193735][ C0] ? do_idle+0x1e7/0x510 [ 579.197989][ C0] default_idle+0x13/0x20 [ 579.202311][ C0] default_idle_call+0x73/0xb0 [ 579.207069][ C0] do_idle+0x1e7/0x510 [ 579.211146][ C0] ? __pfx_do_idle+0x10/0x10 [ 579.215737][ C0] cpu_startup_entry+0x44/0x60 [ 579.220491][ C0] rest_init+0x2de/0x300 [ 579.224733][ C0] start_kernel+0x3ae/0x410 [ 579.229250][ C0] x86_64_start_reservations+0x24/0x30 [ 579.234726][ C0] x86_64_start_kernel+0x143/0x1c0 [ 579.239838][ C0] common_startup_64+0x13e/0x147 [ 579.244793][ C0] [ 579.248171][ C0] Kernel Offset: disabled [ 579.252500][ C0] Rebooting in 86400 seconds..