last executing test programs: 1m44.083017226s ago: executing program 3 (id=1201): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x23, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x3e0, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x252, 0x2a, [@supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x36}, {0x6c}, {0xc, 0x1}, {0x5}, {0xc, 0x1}]}, @tim={0x5, 0xf1, {0x3, 0xcd, 0x0, "5de8ff66c5a75f4fa0ff66fad0e053fb22e818097c38dfcc8c56a68a954b0e0f747fc47ff888cc03fe1bb43f02b111d9f9a8831f41b7f13b0f9fc25309ecb78c544b0ce2042e1d8efacb38f123d565c491c19baf03ca80c0e6fe91386da2e6387e29687fae46377d3fda0d8b57da97d170396b3a1aa935feed69b90abd891bd3247353cfd07b4a1a85cf82036ee2c4e170613d03bc2a233ed667cd52eb1b0335d7acadf2e9ad39bf64a9e89c9ca94c9a5f2fb5b91bfc1e429a1aa53be521d18200c1d7ef06dbfcb5d1d155cf248370d000c7b662f488f489fd07100e61e55dbdbcca862139886611e25163fe75d1"}}, @random_vendor={0xdd, 0x53, "5e54266bd7322141fc97d89d0a778f2aa64404b019899135911034facb85d29a9df2ebce56807a48c32066dc1f2b49a845a01efb80527a3cf348a6f61efaa2805aeb968e6e2be5a0f69ab0ee6e547d94c4560a"}, @fast_bss_trans={0x37, 0x7a, {0xc, 0x2, "095ab068bfa662283733f89feaf8f416", "4c8af32b56d2cf94397797e92413fbd357e31bd4c59fb7f3086f325bee7e332d", "d1c3261641c3421c1705b2b6319e3781e77f2c914234e1347598f40f190af817", [{0x3, 0x23, "25999d724d4674ccc588ef4d80aa373c9e6e31f58f5ac14c32725e37800e648ffbef9a"}, {0x2, 0x1, '\b'}]}}, @tim={0x5, 0x80, {0x4, 0x34, 0x9, "2629e85410feb813fafcf5f9406a400fea5f5dcf39eb244ee98171acf8099e8a56ab2333f3c19b7ff371f9880e5f9837e54314c7c40b67e95116ec085437ffd592a9f26afdc30857a2e333d5f5209446416883fca86fa7bbcc0cf784c0b33e6ec50ce75f1e178988228eb9f159162d6605b2c8379af370cb4cef381db9"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e554788609e"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x144, 0x2a, [@tim={0x5, 0x69, {0xff, 0x2e, 0xdf, "d3a359fec213a3669f757af8c93458b69a3a2ab6abc90dc3975f58339121f8637f25814e021d21947ef10b9f967ba45a4108add7da6b0f3890c0399b2b68f40a2937b36e436aa50949b97d84f4140c68ddeaed4b57501a6f38a394b471b6b61593f7b3ee1d1f"}}, @tim={0x5, 0xd3, {0x1, 0xb5, 0x0, "fa777474d0451f6b813284e8107a870c7df588c2e61fefc371c03e7054202c6f411bd7d36c4d460fd3b68e7571873ba48b43cefc38dab6f1963f344a47001e7389c4f93f4744c5449b212b05b7ee884f9d1cf12f4b8453a761538e4c02fcbd862d10fbba5a4cea7839e06359f5c34325731f1cbfc6c5e1a09c1aedabe8deda13bd64b106e3f98f98b27cea0d57903035ad02ea8960798addfd096781ba068ed7a97398b42d4ccccedaf60235bd381a6a2fed6c08b8e288932054a5e638f5591ea8fea805ad0049bf3bdbaf65fde1fcb7"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1dd}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x184, @empty, 0x3}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x184, @empty, 0x3}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m43.932867188s ago: executing program 3 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x20040080) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYRES8=r0, @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x4044042}, 0x20008400) 1m42.770640842s ago: executing program 2 (id=1222): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x20, 0x70bd28, 0x25df5bfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10040001}, 0x40801) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="9f1291d7cb73f6944a15d0954b73390ccf187d2bef1619e60db29c19cb6cba5601301fa70301a0319a893ca64faa9533e96242119b41cc0eb3efc56a0eb9b2e85d22bba352296442908d6d464c0f2aeb75c17318068bc09cae342ceef7c3fc867823e540382ef6b66a2ef97475da5c775f6617fc6646810aabea858b2a9278379521848cf50b688bc69e64f278194303e0116da06d5038ab5241380299843c756574af480975c3437c10dba50ebed752f0ffbc10870f98825573f421e3e4a081a560648ec4c310b9d7eefc1c4030cd73f0d531c75a3c42903cf2cffc5e0f", 0xde) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f00000002c0)=0x2, 0x4) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@fallback=r5, 0xffffffffffffffff, 0x0, 0x4}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m42.649437442s ago: executing program 2 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000405000300070000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 1m42.617684066s ago: executing program 3 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8840}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1m42.498854721s ago: executing program 3 (id=1229): r0 = socket(0x1e, 0x80000, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x2, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r4, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r4, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000040cc01802c0004001400010002000000ac14140f0000000000000000000000000d0001007564f03a73797a32000000000000000020000004004b1c0c44480000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32000000010c000280"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}}, 0x2000c841) 1m42.470897059s ago: executing program 2 (id=1230): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500fdffffff020000000600000008000000", @ANYRES32=r3, @ANYBLOB="080005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500fdffffff020000000600000008000000", @ANYRES32=r3, @ANYBLOB="080005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 1m42.276063095s ago: executing program 2 (id=1233): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000400000009000000000500004317b7e1f2ba4855bdaa6fe951a2911764f908f22bc040c115730e93bd62874be21f4bd78617572e240e902da31754dea3c0e415069d480050fff6a5c04ae270528dea9f9a35989f0c579f667ec8998de54296b846050056187b4c425f648e7abab09ab6ae035c8c835ce90bb1a2122b029da43d5e6fd6bdd262ea9c09def888f736288f637622647e2ab67e5f4e41615415383f37a0151df748dd907868b1cd267b0090e35be58c0022e6e75146097a734cc5c87f837237dc94c126a88a5ec3b50b0dc2c5648d2e06cf7afc2acbc5068af857684aed8cb960e7fe", @ANYRES32, @ANYBLOB="00d45ab4ee3994aa4000ee0000f7ffcd0400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES8=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="00000007ffffffffffffff000000000016000000a3f8b5a1f27e5a5c74cd490dc4cad60bf44056ddadb7982a4bfb1324844d6f29371cb9bf8d001bd7f764e4fa62ca5eda1055dc0efc41656434a4c73464a3b60d02a1c0b9ae3527efc13423e4a133e93ab475c425ed5e7df64756", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x234800, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, &(0x7f00000004c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0x2}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000001a00)={{r3}, "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"}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000380)="2acfb759abd3", 0x6}], 0x2) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0286dd"], 0x32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1m42.194783635s ago: executing program 3 (id=1235): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x12ed8180, 0x3, 0x1}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8002044}, 0x20040800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x144, "d0cc43012216", @long="9f2cbb7e20222e08193db4b37aff8615"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48801}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080005000200bee7141a06029078e0000002ac1414bbad4a1e1c54"], 0x27) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.186561534s ago: executing program 2 (id=1236): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x23, 0x6, 0x4) connect$qrtr(r2, &(0x7f0000000100)={0x2a, 0x4, 0xfffffffe}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c008}, 0x4000880) clock_gettime(0x3, &(0x7f0000000540)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000000800)=""/4111, &(0x7f0000000000)=0x100f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c800000", @ANYRES16=r5, @ANYBLOB="00032abd7000fddbdf253d00000008005d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000200)=0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/367], 0x11c}}, 0x20000800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m41.9230307s ago: executing program 3 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x74, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3cd6a53e565af18b38ae24475bbc28c358ab5f5a"}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x220, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x69e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x7, 0x8, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73c7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1e21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20040050}, 0x20008000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x7, 0x400, 0x7}}) 1m41.597069259s ago: executing program 32 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x74, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3cd6a53e565af18b38ae24475bbc28c358ab5f5a"}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x220, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x69e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x7, 0x8, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73c7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1e21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20040050}, 0x20008000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x7, 0x400, 0x7}}) 1m41.5863484s ago: executing program 2 (id=1244): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003704000000000200000000000000", @ANYRES32=r4, @ANYBLOB="83040500000000001c0012800b00010062726964676500000c000280e6ff2a0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) socket(0x8, 0x2, 0x401) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x1, 0x5, 0x5, 0x2, 0x401, 0x1, r8}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="b1aaaaaaaaaaffffffe4a6796a156e0d1130000000008002907800000000e00003000307907800030c58450600000065000e4e24000c00000000ac141444"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1m41.353070816s ago: executing program 33 (id=1244): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003704000000000200000000000000", @ANYRES32=r4, @ANYBLOB="83040500000000001c0012800b00010062726964676500000c000280e6ff2a0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) socket(0x8, 0x2, 0x401) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x1, 0x5, 0x5, 0x2, 0x401, 0x1, r8}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="b1aaaaaaaaaaffffffe4a6796a156e0d1130000000008002907800000000e00003000307907800030c58450600000065000e4e24000c00000000ac141444"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 3.059499281s ago: executing program 4 (id=2442): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.450347456s ago: executing program 4 (id=2456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 2.254486065s ago: executing program 4 (id=2461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) 2.015759085s ago: executing program 4 (id=2466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.867246784s ago: executing program 4 (id=2469): socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 1.762711502s ago: executing program 4 (id=2471): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.552109809s ago: executing program 6 (id=2476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.259898727s ago: executing program 5 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 1.083885507s ago: executing program 5 (id=2481): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x2a}, 0x18) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) close(r0) 859.728192ms ago: executing program 0 (id=2483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 847.836789ms ago: executing program 6 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) 835.798813ms ago: executing program 1 (id=2485): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 792.052325ms ago: executing program 5 (id=2486): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 751.548301ms ago: executing program 6 (id=2487): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0200001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980600000000002c0012800b00010069703667726500001c00028008000500070000000800040081"], 0x25c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000400)="11", 0x1, 0x2404c001, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) 678.507496ms ago: executing program 1 (id=2488): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0xff}]}}}}}, 0x0) 591.984509ms ago: executing program 5 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 583.163106ms ago: executing program 1 (id=2490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r1, @ANYBLOB="1c002d8005000400eaffffff070002"], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) 541.333235ms ago: executing program 0 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) 456.14132ms ago: executing program 6 (id=2492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='vegas', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 450.53825ms ago: executing program 5 (id=2493): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 400.47564ms ago: executing program 1 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 297.374424ms ago: executing program 0 (id=2495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) 296.738354ms ago: executing program 5 (id=2496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x2, 0x4, 0x0, 0x7, 0xc}, 0x14) 296.377495ms ago: executing program 6 (id=2497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) 172.088419ms ago: executing program 1 (id=2498): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 171.901172ms ago: executing program 0 (id=2499): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 110.446213ms ago: executing program 6 (id=2500): syz_emit_ethernet(0x3e, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}, "3f3f48adaff694cc627fed5bb2a0c8d3"}}}}}}, 0x0) 107.345823ms ago: executing program 0 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) 90.126837ms ago: executing program 1 (id=2502): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0200001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980600000000002c0012800b00010069703667726500001c00028008000500070000000800040081"], 0x25c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000400)="11", 0x1, 0x2404c001, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @link_local}, 0x14) 0s ago: executing program 0 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): ][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.980755][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.015023][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.061070][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.068378][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.137163][ T5827] veth0_vlan: entered promiscuous mode [ 91.150774][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.158021][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.240220][ T5827] veth1_vlan: entered promiscuous mode [ 91.300142][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.415646][ T5827] veth0_macvtap: entered promiscuous mode [ 91.459615][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.490851][ T5827] veth1_macvtap: entered promiscuous mode [ 91.535330][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.607371][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.679355][ T3000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691006][ T3000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.766325][ T3000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793740][ T3000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.811444][ T5835] veth0_vlan: entered promiscuous mode [ 91.821448][ T9] cfg80211: failed to load regulatory.db [ 91.841146][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.898702][ T5835] veth1_vlan: entered promiscuous mode [ 91.967394][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.990593][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.006742][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.021602][ T5836] veth0_vlan: entered promiscuous mode [ 92.048187][ T5836] veth1_vlan: entered promiscuous mode [ 92.078311][ T5835] veth0_macvtap: entered promiscuous mode [ 92.090501][ T5835] veth1_macvtap: entered promiscuous mode [ 92.102097][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.113609][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.176625][ T5831] veth0_vlan: entered promiscuous mode [ 92.191135][ T5831] veth1_vlan: entered promiscuous mode [ 92.208404][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.218800][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.231170][ T5840] veth0_vlan: entered promiscuous mode [ 92.249965][ T5836] veth0_macvtap: entered promiscuous mode [ 92.261010][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.279408][ T52] Bluetooth: hci0: command tx timeout [ 92.298406][ T5836] veth1_macvtap: entered promiscuous mode [ 92.352098][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.361135][ T52] Bluetooth: hci1: command tx timeout [ 92.370435][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385648][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399940][ T5840] veth1_vlan: entered promiscuous mode [ 92.424144][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.433183][ T52] Bluetooth: hci3: command tx timeout [ 92.454449][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.478514][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.491621][ T5945] Zero length message leads to an empty skb [ 92.513711][ T52] Bluetooth: hci2: command tx timeout [ 92.524435][ T3000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535520][ T3000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545518][ T3000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.562475][ T2972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584747][ T5831] veth0_macvtap: entered promiscuous mode [ 92.593602][ T52] Bluetooth: hci4: command tx timeout [ 92.622173][ T5831] veth1_macvtap: entered promiscuous mode [ 92.680203][ T5840] veth0_macvtap: entered promiscuous mode [ 92.732724][ T5840] veth1_macvtap: entered promiscuous mode [ 92.747963][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.786531][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.816246][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.839527][ T3000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.848523][ T3000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.859558][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.873582][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.883286][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.908990][ T3000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989813][ T3000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.999524][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012929][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.026612][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.029262][ T3000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.043949][ T3000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.052690][ T3000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.064825][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 93.093485][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 93.116993][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.127503][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.140005][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.148389][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.268382][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.285254][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.463131][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.480272][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.510134][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.536447][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.641399][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.698039][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.733241][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.353711][ T52] Bluetooth: hci0: command tx timeout [ 94.433047][ T52] Bluetooth: hci1: command tx timeout [ 94.510893][ T5999] syzkaller0: entered promiscuous mode [ 94.513037][ T52] Bluetooth: hci3: command tx timeout [ 94.516823][ T5999] syzkaller0: entered allmulticast mode [ 94.544485][ T6005] netlink: 'syz.1.19': attribute type 11 has an invalid length. [ 94.548140][ T6003] ip6gre0: Master is either lo or non-ether device [ 94.552319][ T6005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19'. [ 94.596138][ T52] Bluetooth: hci2: command tx timeout [ 94.605544][ T6010] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 94.633317][ T6012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.19'. [ 94.650825][ T6010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20'. [ 94.673427][ T52] Bluetooth: hci4: command tx timeout [ 94.784343][ T5977] netlink: 'syz.4.14': attribute type 10 has an invalid length. [ 94.817196][ T5977] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.975890][ T6020] IPVS: length: 8 != 1152 [ 94.981365][ T6020] warning: `syz.4.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.394678][ T6027] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 95.567910][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 95.594119][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.636183][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.758079][ T6037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.857756][ T5857] IPVS: starting estimator thread 0... [ 95.924816][ T6047] geneve2: entered promiscuous mode [ 95.954621][ T6049] IPVS: using max 26 ests per chain, 62400 per kthread [ 95.956963][ T6047] geneve2: entered allmulticast mode [ 95.991266][ T50] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.013518][ T50] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.088326][ T6051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.124959][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 96.139649][ T6062] syz.4.36 uses obsolete (PF_INET,SOCK_PACKET) [ 96.158464][ T50] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.169270][ T6065] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.181177][ T6065] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 96.201713][ T6064] netlink: 84 bytes leftover after parsing attributes in process `syz.3.37'. [ 96.226380][ T6064] netlink: 84 bytes leftover after parsing attributes in process `syz.3.37'. [ 96.554671][ T6077] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 96.560610][ T6077] syzkaller1: Refused to change device type [ 97.294063][ T6090] veth1: entered promiscuous mode [ 97.323677][ T6090] veth1: left promiscuous mode [ 97.405421][ T6095] sctp: [Deprecated]: syz.3.45 (pid 6095) Use of int in max_burst socket option. [ 97.405421][ T6095] Use struct sctp_assoc_value instead [ 97.422033][ T6095] sctp: [Deprecated]: syz.3.45 (pid 6095) Use of int in max_burst socket option deprecated. [ 97.422033][ T6095] Use struct sctp_assoc_value instead [ 97.868009][ T6111] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 97.926737][ T6051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.937612][ T6051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.024701][ T6051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.036056][ T6051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.119461][ T6051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.130121][ T6051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.149406][ T6120] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 98.166113][ T6122] __nla_validate_parse: 2 callbacks suppressed [ 98.166130][ T6122] netlink: 72 bytes leftover after parsing attributes in process `syz.4.54'. [ 98.300809][ T6125] bond1: Removing last ns target with arp_interval on [ 98.365521][ T2972] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 98.377136][ T2972] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.441028][ T2972] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 98.464824][ T2972] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.546406][ T6051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 98.559393][ T6051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.651497][ T6051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 98.686888][ T6051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 98.711408][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 98.836588][ T6141] x_tables: duplicate underflow at hook 1 [ 98.861008][ T6141] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 98.930368][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.940679][ T6149] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 98.969824][ T6143] netlink: 80 bytes leftover after parsing attributes in process `syz.1.62'. [ 99.191943][ T6160] tipc: Started in network mode [ 99.209422][ T6160] tipc: Node identity 4aed5bd61165, cluster identity 4711 [ 99.257110][ T6160] tipc: Enabled bearer , priority 0 [ 99.303603][ T6170] syzkaller0: entered promiscuous mode [ 99.357693][ T6170] syzkaller0: entered allmulticast mode [ 99.376485][ T6160] tipc: Enabling of bearer rejected, already enabled [ 99.417764][ T6183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.425225][ T6183] IPv6: NLM_F_CREATE should be set when creating new route [ 99.440875][ T6159] tipc: Resetting bearer [ 99.470426][ T6159] tipc: Disabling bearer [ 99.686727][ T6196] Bluetooth: MGMT ver 1.23 [ 99.707920][ T6196] Illegal XDP return value 1795512036 on prog (id 20) dev N/A, expect packet loss! [ 99.773927][ T6198] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 99.811510][ T6198] bond1 (unregistering): Released all slaves [ 99.838013][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 99.991855][ T6213] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 100.072679][ T6216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.81'. [ 100.277202][ T6223] openvswitch: netlink: Missing key (keys=40, expected=100) [ 100.378021][ T6234] ipt_ECN: cannot use operation on non-tcp rule [ 100.772679][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.809663][ T6262] macvlan2: entered promiscuous mode [ 100.815661][ T6262] macvlan2: entered allmulticast mode [ 100.880518][ T6265] netlink: 'syz.4.95': attribute type 39 has an invalid length. [ 101.440503][ T6292] tipc: Started in network mode [ 101.446143][ T6292] tipc: Node identity 7e5c419350b9, cluster identity 4711 [ 101.457806][ T6292] tipc: Enabled bearer , priority 0 [ 101.492376][ T6296] syzkaller0: entered promiscuous mode [ 101.505103][ T6296] syzkaller0: entered allmulticast mode [ 101.518625][ T6294] tipc: Enabling of bearer rejected, already enabled [ 101.600017][ T6294] tipc: Resetting bearer [ 101.667040][ T6294] tipc: Disabling bearer [ 101.760162][ T6302] netlink: 'syz.0.104': attribute type 12 has an invalid length. [ 101.768546][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.104'. [ 101.809388][ T6302] tipc: Enabled bearer , priority 0 [ 101.824530][ T6302] syzkaller0: entered promiscuous mode [ 101.830137][ T6302] syzkaller0: entered allmulticast mode [ 101.855742][ T6301] tipc: Resetting bearer [ 101.951784][ T6301] tipc: Disabling bearer [ 102.021686][ T6318] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 102.074807][ T6318] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 102.371272][ T6336] netlink: 'syz.3.115': attribute type 83 has an invalid length. [ 102.506315][ T6348] netlink: 92 bytes leftover after parsing attributes in process `syz.3.118'. [ 102.561520][ T6351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.119'. [ 102.577629][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.828415][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 103.071896][ T6365] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.156789][ T6370] tipc: Started in network mode [ 103.161884][ T6370] tipc: Node identity 2a44def69aef, cluster identity 4711 [ 103.177175][ T6370] tipc: Enabled bearer , priority 0 [ 103.190558][ T6375] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 103.201560][ T6375] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 103.210554][ T6375] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 103.222201][ T6370] tipc: Resetting bearer [ 103.294618][ T6366] tipc: Disabling bearer [ 103.424400][ T6386] netlink: 'syz.3.131': attribute type 2 has an invalid length. [ 103.656252][ T6395] syzkaller1: entered promiscuous mode [ 103.675461][ T6395] syzkaller1: entered allmulticast mode [ 103.889964][ T6405] tipc: Enabled bearer , priority 0 [ 103.904518][ T6405] syzkaller0: entered promiscuous mode [ 103.910105][ T6405] syzkaller0: entered allmulticast mode [ 103.970156][ T6405] tipc: Resetting bearer [ 104.018619][ T6404] tipc: Resetting bearer [ 104.094268][ T6404] tipc: Disabling bearer [ 104.132519][ T6423] trusted_key: syz.4.143 sent an empty control message without MSG_MORE. [ 104.287066][ T6428] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 104.365197][ T6428] bond1: entered promiscuous mode [ 104.378739][ T6428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.419685][ T6433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.440279][ T6433] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 104.450898][ T6433] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 104.468643][ T6433] bond1: (slave gre1): making interface the new active one [ 104.476290][ T6433] gre1: entered promiscuous mode [ 104.488546][ T6433] bond1: (slave gre1): Enslaving as an active interface with an up link [ 104.523163][ T6442] __nla_validate_parse: 2 callbacks suppressed [ 104.523183][ T6442] netlink: 64 bytes leftover after parsing attributes in process `syz.1.148'. [ 104.659961][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 104.696583][ T6447] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 104.868220][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 104.915130][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 104.925075][ T6457] netlink: 'syz.3.154': attribute type 7 has an invalid length. [ 104.941737][ T6452] syzkaller0: entered promiscuous mode [ 104.942300][ T6457] netlink: 'syz.3.154': attribute type 8 has an invalid length. [ 104.963460][ T6452] syzkaller0: entered allmulticast mode [ 104.977398][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 104.977987][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 104.994322][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.002217][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.010128][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.018034][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.025958][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.033869][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.041766][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.049792][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.057681][ T6462] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.536450][ T6485] netlink: 256 bytes leftover after parsing attributes in process `syz.0.158'. [ 105.575973][ T6489] netlink: 1 bytes leftover after parsing attributes in process `syz.4.160'. [ 105.720140][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 106.014034][ T6503] xt_bpf: check failed: parse error [ 106.824937][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 106.854929][ T6510] geneve2: entered promiscuous mode [ 106.891110][ T6519] netlink: 68 bytes leftover after parsing attributes in process `syz.4.166'. [ 107.108447][ T6523] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 107.209162][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.789522][ T6554] bond2: option all_slaves_active: invalid value (5) [ 107.810542][ T6554] bond2 (unregistering): Released all slaves [ 127.935020][ T6572] veth0: entered promiscuous mode [ 127.943746][ T6572] __nla_validate_parse: 15 callbacks suppressed [ 127.943765][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 128.150470][ T6583] smc: net device vcan0 applied user defined pnetid SYZ1 [ 128.194348][ T6580] vlan0: entered promiscuous mode [ 128.199922][ T6580] vlan0: entered allmulticast mode [ 128.205591][ T6580] veth0_vlan: entered allmulticast mode [ 128.255443][ T6588] nbd0: detected capacity change from 0 to 127 [ 128.311018][ T6591] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 128.362325][ T52] block nbd0: Receive control failed (result -104) [ 128.415532][ T6595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.466938][ T6594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.470865][ T6607] netlink: 76 bytes leftover after parsing attributes in process `syz.4.188'. [ 128.697679][ T6619] netlink: 56 bytes leftover after parsing attributes in process `syz.0.191'. [ 129.035040][ T6637] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 129.287383][ T6653] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 129.349731][ T6654] geneve2: entered promiscuous mode [ 129.370905][ T6654] geneve2: entered allmulticast mode [ 129.418892][ T3574] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 129.431791][ T6659] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 129.446059][ T3574] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 129.472828][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 129.525929][ T6666] netlink: 248 bytes leftover after parsing attributes in process `syz.3.208'. [ 129.528247][ T6649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.574146][ T6663] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 129.595652][ T6663] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 129.609156][ T6663] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 129.634716][ T6663] netlink: 'syz.1.207': attribute type 2 has an invalid length. [ 129.651878][ T6663] netlink: 76 bytes leftover after parsing attributes in process `syz.1.207'. [ 129.668744][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 129.678221][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 129.724260][ T6667] netlink: 248 bytes leftover after parsing attributes in process `syz.3.208'. [ 130.065834][ T6692] IPVS: ip_vs_add_dest(): server weight less than zero [ 130.073204][ T5941] IPVS: starting estimator thread 0... [ 130.173738][ T6693] IPVS: using max 30 ests per chain, 72000 per kthread [ 130.212954][ T6696] ipt_REJECT: TCP_RESET invalid for non-tcp [ 130.284462][ T6696] net_ratelimit: 44 callbacks suppressed [ 130.284480][ T6696] openvswitch: netlink: IP tunnel dst address not specified [ 130.336650][ T6703] bridge2: entered promiscuous mode [ 130.361868][ T6703] bridge2: entered allmulticast mode [ 130.384936][ T6703] team0: Port device bridge2 added [ 130.395286][ T6710] bridge0: port 3(team0) entered blocking state [ 130.426596][ T6710] bridge0: port 3(team0) entered disabled state [ 130.461067][ T6710] team0: entered allmulticast mode [ 130.470905][ T6710] team_slave_0: entered allmulticast mode [ 130.502827][ T6710] team_slave_1: entered allmulticast mode [ 130.515564][ T6710] team0: entered promiscuous mode [ 130.538463][ T6710] team_slave_0: entered promiscuous mode [ 130.548223][ T6710] team_slave_1: entered promiscuous mode [ 130.587534][ T6710] bridge0: port 3(team0) entered blocking state [ 130.594147][ T6710] bridge0: port 3(team0) entered forwarding state [ 130.616745][ T10] IPVS: starting estimator thread 0... [ 130.653007][ T6719] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 130.713657][ T6720] IPVS: using max 29 ests per chain, 69600 per kthread [ 130.838234][ T6734] netlink: 18 bytes leftover after parsing attributes in process `syz.1.223'. [ 131.323345][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.227'. [ 131.403554][ T6649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.423162][ T6754] xt_l2tp: invalid flags combination: 8 [ 131.431950][ T6649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 131.468630][ T6760] ksmbd: Unknown IPC event: 8, ignore. [ 131.615914][ T6649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.664214][ T6649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 131.904685][ T6649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.962116][ T6649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 132.167043][ T6787] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 132.293551][ T2972] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 132.342907][ T2972] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.411281][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 132.432821][ T50] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.463767][ T6794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.517661][ T6796] bridge_slave_1: left allmulticast mode [ 132.524318][ T6796] bridge_slave_1: left promiscuous mode [ 132.530331][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.543927][ T6796] bridge_slave_0: left allmulticast mode [ 132.549720][ T6796] bridge_slave_0: left promiscuous mode [ 132.556645][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.616710][ T2972] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 132.626519][ T2972] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.653858][ T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 132.662200][ T79] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.682035][ T6802] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 132.764320][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770873][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797635][ T6808] tipc: Enabling of bearer rejected, failed to enable media [ 132.910440][ T6810] syzkaller0: entered promiscuous mode [ 132.923236][ T6810] syzkaller0: entered allmulticast mode [ 133.000097][ T6814] __nla_validate_parse: 7 callbacks suppressed [ 133.000132][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 133.083565][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 133.116438][ T6817] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 133.128571][ T6817] netlink: 228 bytes leftover after parsing attributes in process `syz.2.247'. [ 133.149703][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 133.177388][ T6823] sctp: [Deprecated]: syz.4.249 (pid 6823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.177388][ T6823] Use struct sctp_sack_info instead [ 133.359641][ T6830] netlink: 'syz.1.251': attribute type 13 has an invalid length. [ 133.406285][ T6830] veth0_macvtap: left promiscuous mode [ 133.435539][ T6830] macvtap0: entered allmulticast mode [ 133.486023][ T6830] macvtap0: refused to change device tx_queue_len [ 133.685616][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 133.710221][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 133.985945][ T6869] Cannot find map_set index 0 as target [ 134.146493][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 134.291429][ T6876] netlink: 220 bytes leftover after parsing attributes in process `syz.0.264'. [ 134.322935][ T6876] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 134.971832][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 135.474776][ T6936] netlink: 124 bytes leftover after parsing attributes in process `syz.3.278'. [ 135.490554][ T6935] tipc: Enabled bearer , priority 0 [ 135.536641][ T6935] syzkaller0: entered promiscuous mode [ 135.542177][ T6935] syzkaller0: entered allmulticast mode [ 135.578340][ T6935] tipc: Resetting bearer [ 135.599250][ T6933] tipc: Resetting bearer [ 135.629479][ T6943] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 135.650378][ T6933] tipc: Disabling bearer [ 136.028889][ T6954] bond2: option all_slaves_active: invalid value (222) [ 136.056379][ T6954] bond2 (unregistering): Released all slaves [ 136.517081][ T6988] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 136.659839][ T6996] netlink: 'syz.3.293': attribute type 8 has an invalid length. [ 136.675749][ T6999] set match dimension is over the limit! [ 137.167302][ T7031] netlink: 'syz.1.303': attribute type 14 has an invalid length. [ 137.196051][ T7032] netlink: 'syz.1.303': attribute type 14 has an invalid length. [ 137.218610][ T7031] netlink: 'syz.1.303': attribute type 13 has an invalid length. [ 137.226870][ T7032] netlink: 'syz.1.303': attribute type 13 has an invalid length. [ 137.454432][ T7047] xt_hashlimit: overflow, try lower: 3/0 [ 137.694005][ T7063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.733070][ T7066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.206227][ T7090] ipvlan2: entered promiscuous mode [ 138.274686][ T7098] __nla_validate_parse: 13 callbacks suppressed [ 138.274706][ T7098] netlink: 72 bytes leftover after parsing attributes in process `syz.3.324'. [ 138.443694][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 138.457433][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 138.467015][ T7111] netlink: 'syz.0.329': attribute type 33 has an invalid length. [ 138.475486][ T7110] netlink: 50 bytes leftover after parsing attributes in process `syz.2.326'. [ 138.485156][ T7110] netlink: 50 bytes leftover after parsing attributes in process `syz.2.326'. [ 138.537150][ T7111] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 138.569347][ T7111] bond1 (unregistering): Released all slaves [ 138.658824][ T7122] netlink: 'syz.1.330': attribute type 21 has an invalid length. [ 138.668469][ T7122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.330'. [ 138.690503][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 138.697406][ T2972] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 138.730773][ T2972] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.767764][ T2972] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.842888][ T2972] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.894748][ T7127] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 139.180809][ T7148] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 139.222922][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.535049][ T7170] netlink: 7 bytes leftover after parsing attributes in process `syz.2.347'. [ 139.648429][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 139.760927][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.350'. [ 140.081706][ T7200] IPVS: length: 48 != 216 [ 140.088073][ T7200] netlink: 'syz.0.355': attribute type 4 has an invalid length. [ 140.244687][ T7203] block nbd1: Unsupported socket: should be TCP or UNIX. [ 140.279099][ T52] Bluetooth: hci4: link tx timeout [ 140.285565][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.468674][ T7215] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 140.498997][ T7219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.802683][ T7230] netlink: 'syz.4.366': attribute type 39 has an invalid length. [ 141.106884][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.115615][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.210164][ T7249] bond2 (unregistering): Released all slaves [ 141.245150][ T7255] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 141.253738][ T7255] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 141.261574][ T7255] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 141.273399][ T7254] openvswitch: netlink: Message has 6 unknown bytes. [ 141.879980][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.351424][ T7316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.359431][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 142.456429][ T7321] bond2: (slave veth3): Enslaving as an active interface with a down link [ 142.488813][ T7316] bond2: (slave veth0_to_bond): making interface the new active one [ 142.499098][ T7316] veth0_to_bond: entered promiscuous mode [ 142.505545][ T7316] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 142.541957][ T7321] bond2: (slave veth5): Enslaving as an active interface with a down link [ 142.841055][ T7355] netlink: 'syz.0.403': attribute type 11 has an invalid length. [ 143.038758][ T7363] syzkaller0: entered promiscuous mode [ 143.044537][ T7363] syzkaller0: entered allmulticast mode [ 143.254877][ T7377] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 143.275458][ T7377] bond2 (unregistering): Released all slaves [ 143.727865][ T7414] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 143.764072][ T7415] tap0: tun_chr_ioctl cmd 1074025676 [ 143.769575][ T7415] tap0: owner set to 0 [ 143.866596][ T7420] __nla_validate_parse: 9 callbacks suppressed [ 143.866615][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.908238][ T7420] validate_nla: 6 callbacks suppressed [ 143.908256][ T7420] netlink: 'syz.0.420': attribute type 83 has an invalid length. [ 144.346550][ T7438] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 144.398774][ T7440] netlink: 'syz.4.425': attribute type 41 has an invalid length. [ 144.646696][ T7444] tipc: Enabled bearer , priority 0 [ 144.675579][ T7446] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 144.690374][ T7444] syzkaller0: entered promiscuous mode [ 144.703001][ T7444] syzkaller0: entered allmulticast mode [ 144.733026][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.754218][ T7446] bridge_slave_1: left allmulticast mode [ 144.778374][ T7446] bridge_slave_1: left promiscuous mode [ 144.794025][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.853946][ T7446] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 144.920950][ T7457] tipc: Resetting bearer [ 144.977953][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 145.002934][ T7463] netlink: 'syz.3.431': attribute type 3 has an invalid length. [ 145.013475][ T7457] tipc: Resetting bearer [ 145.063753][ T7457] tipc: Disabling bearer [ 145.101497][ T7465] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 145.111922][ T7465] bond2 (unregistering): Released all slaves [ 145.114754][ T7470] netlink: 9 bytes leftover after parsing attributes in process `syz.2.434'. [ 145.144460][ T7473] netlink: 312 bytes leftover after parsing attributes in process `syz.3.435'. [ 145.205673][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 145.223860][ T7480] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.241438][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'. [ 145.273579][ T7467] pim6reg1: entered promiscuous mode [ 145.279151][ T7467] pim6reg1: entered allmulticast mode [ 145.508580][ T7495] netlink: 'syz.4.441': attribute type 29 has an invalid length. [ 145.522670][ T7495] netlink: 'syz.4.441': attribute type 29 has an invalid length. [ 145.533524][ T7495] Bluetooth: MGMT ver 1.23 [ 145.546872][ T7490] syzkaller0: entered promiscuous mode [ 145.552570][ T7490] syzkaller0: entered allmulticast mode [ 145.595449][ T7500] netlink: 100 bytes leftover after parsing attributes in process `syz.0.442'. [ 145.632074][ T7490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 145.858965][ T7514] netlink: 'syz.4.448': attribute type 4 has an invalid length. [ 145.892904][ T7514] netlink: 240 bytes leftover after parsing attributes in process `syz.4.448'. [ 145.908087][ T7517] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'. [ 145.926809][ T7521] block nbd1: Unsupported socket: should be TCP or UNIX. [ 146.133685][ T7537] tipc: Enabled bearer , priority 0 [ 146.158138][ T7537] syzkaller0: entered promiscuous mode [ 146.185197][ T7537] syzkaller0: entered allmulticast mode [ 146.215218][ T7537] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.249884][ T7543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.305843][ T7537] tipc: Resetting bearer [ 146.337994][ T7535] tipc: Resetting bearer [ 146.394628][ T7535] tipc: Disabling bearer [ 146.640456][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.464'. [ 147.423714][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.456749][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.038599][ T7573] netlink: 'syz.4.466': attribute type 29 has an invalid length. [ 148.063728][ T50] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.110430][ T50] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.125977][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.135385][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.231908][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.271690][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.362824][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.393877][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.511574][ T7618] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 148.554076][ T7618] bridge0: port 3(team0) entered disabled state [ 148.586431][ T7618] team0: left allmulticast mode [ 148.591435][ T7618] team_slave_0: left allmulticast mode [ 148.617802][ T7621] ipt_ECN: cannot use operation on non-tcp rule [ 148.630128][ T7618] team_slave_1: left allmulticast mode [ 148.636980][ T7618] team0: left promiscuous mode [ 148.641905][ T7618] team_slave_0: left promiscuous mode [ 148.647959][ T7618] team_slave_1: left promiscuous mode [ 148.656715][ T7618] bridge0: port 3(team0) entered disabled state [ 148.672496][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.683590][ T7618] bond0: (slave team0): Enslaving as an active interface with an up link [ 148.915889][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 148.971742][ T7638] __nla_validate_parse: 1 callbacks suppressed [ 148.971762][ T7638] netlink: 112 bytes leftover after parsing attributes in process `syz.0.482'. [ 149.024739][ T7638] netlink: ct family unspecified [ 149.030758][ T7638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.042191][ T7642] veth0_to_bridge: entered promiscuous mode [ 149.098648][ T7644] tipc: Enabling of bearer rejected, failed to enable media [ 149.188485][ T7639] veth0_to_bridge: left promiscuous mode [ 149.229321][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 149.727360][ T7676] netlink: 830 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.184047][ T7697] netlink: 'syz.1.505': attribute type 5 has an invalid length. [ 150.248376][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 150.306274][ T7707] netlink: 'syz.2.507': attribute type 9 has an invalid length. [ 150.377358][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 150.393975][ T7703] bridge18: entered promiscuous mode [ 150.399288][ T7703] bridge18: entered allmulticast mode [ 150.548751][ T7724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.564306][ T7723] netlink: 'syz.2.512': attribute type 9 has an invalid length. [ 150.735194][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 150.755497][ T50] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 150.955774][ T7754] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 150.964231][ T7754] netlink: 'syz.2.520': attribute type 2 has an invalid length. [ 150.971889][ T7754] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 151.275954][ T7759] netlink: 104 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.347009][ T7760] x_tables: unsorted underflow at hook 3 [ 151.353114][ T7760] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.354190][ T7761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.481194][ T7741] netlink: 'syz.3.516': attribute type 11 has an invalid length. [ 151.489837][ T7741] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.516'. [ 151.783399][ T7782] netlink: 'syz.1.528': attribute type 3 has an invalid length. [ 151.810649][ T30] audit: type=1804 audit(1761849689.942:2): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.528" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=545 res=1 errno=0 [ 151.834877][ T30] audit: type=1800 audit(1761849689.942:3): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="cgroup.controllers" dev="tmpfs" ino=545 res=0 errno=0 [ 152.786381][ T7759] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.264802][ T7851] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 153.299297][ T7851] bond2 (unregistering): Released all slaves [ 153.813400][ T7885] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.883626][ T7888] team0: Device wireguard0 is of different type [ 153.887888][ T7890] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 153.951993][ T7890] bond1: entered promiscuous mode [ 153.959824][ T7890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.978468][ T7896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.985636][ T7896] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 153.997993][ T7896] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 154.011363][ T7890] __nla_validate_parse: 7 callbacks suppressed [ 154.011378][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 154.012142][ T7896] bond1: (slave wireguard0): making interface the new active one [ 154.034643][ T7896] wireguard0: entered promiscuous mode [ 154.041377][ T7896] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 154.065548][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 154.076498][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 154.310658][ T7910] netlink: 284 bytes leftover after parsing attributes in process `syz.2.569'. [ 154.337671][ T7910] xt_hashlimit: invalid rate [ 154.684488][ T7936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.577'. [ 154.736994][ T7939] Bluetooth: MGMT ver 1.23 [ 154.768774][ T7942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.580'. [ 154.822808][ T7942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.580'. [ 154.903200][ T7958] xt_TCPMSS: Only works on TCP SYN packets [ 154.924415][ T7958] xt_TCPMSS: Only works on TCP SYN packets [ 154.930412][ T7958] xt_TCPMSS: Only works on TCP SYN packets [ 154.961727][ T7958] xt_TCPMSS: Only works on TCP SYN packets [ 155.605958][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 155.673492][ T8011] netlink: 72 bytes leftover after parsing attributes in process `syz.1.596'. [ 155.690692][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 156.091339][ T8036] can: request_module (can-proto-0) failed. [ 156.289841][ T8052] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.923635][ T8081] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 157.407462][ T8081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.414899][ T8082] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 157.439628][ T8083] bond3: (slave ip6gretap1): making interface the new active one [ 157.467474][ T8083] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 157.493750][ T8086] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.501350][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.643345][ T8097] netlink: zone id is out of range [ 157.649705][ T8097] netlink: zone id is out of range [ 157.656474][ T8097] netlink: zone id is out of range [ 157.661919][ T8097] netlink: zone id is out of range [ 157.682224][ T8097] netlink: zone id is out of range [ 157.695474][ T8097] netlink: zone id is out of range [ 157.709057][ T8097] netlink: zone id is out of range [ 157.731306][ T8097] netlink: zone id is out of range [ 158.031362][ T8121] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 158.294111][ T8134] 8021q: VLANs not supported on ipvlan1 [ 158.303120][ T8134] tipc: Failed to obtain node identity [ 158.309075][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 158.357187][ T56] block nbd0: Possible stuck request ffff8880250be000: control (read@0,1024B). Runtime 30 seconds [ 158.368592][ T56] block nbd0: Possible stuck request ffff8880250be1c0: control (read@1024,1024B). Runtime 30 seconds [ 158.379959][ T56] block nbd0: Possible stuck request ffff8880250be380: control (read@2048,1024B). Runtime 30 seconds [ 158.392134][ T56] block nbd0: Possible stuck request ffff8880250be540: control (read@3072,1024B). Runtime 30 seconds [ 158.417563][ T8143] netlink: 'syz.2.633': attribute type 2 has an invalid length. [ 158.578161][ T8149] syzkaller1: entered promiscuous mode [ 158.583885][ T8149] syzkaller1: entered allmulticast mode [ 158.598886][ T8149] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 159.217511][ T8157] __nla_validate_parse: 9 callbacks suppressed [ 159.217530][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 159.335844][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 159.520373][ T8159] macvlan2: entered promiscuous mode [ 159.525956][ T8159] macvlan2: entered allmulticast mode [ 159.532151][ T8159] bond2: (slave macvlan2): Opening slave failed [ 159.731321][ T8177] netlink: 'syz.2.644': attribute type 4 has an invalid length. [ 159.751589][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 159.803024][ T8184] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 159.810747][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 159.833434][ T8180] veth7: entered promiscuous mode [ 159.840182][ T8186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.646'. [ 160.042002][ T8198] bridge_slave_0: invalid flags given to default FDB implementation [ 160.135611][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 160.192177][ T8207] SET target dimension over the limit! [ 160.300002][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 160.426752][ T8222] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 160.459309][ T8222] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 160.471318][ T8224] x_tables: unsorted entry at hook 2 [ 160.696903][ T8245] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 160.712905][ T8245] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 160.723403][ T8245] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 160.741480][ T8245] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 161.240309][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 161.272372][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 161.294273][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 161.681036][ T8314] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 161.847242][ T8329] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.449851][ T8371] sch_fq: defrate 0 ignored. [ 163.042225][ T8402] validate_nla: 3 callbacks suppressed [ 163.042242][ T8402] netlink: 'syz.2.716': attribute type 7 has an invalid length. [ 163.070140][ T8402] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 163.426238][ T8428] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 163.442049][ T8428] netlink: 'syz.2.725': attribute type 4 has an invalid length. [ 163.664537][ T8440] veth0_to_hsr: entered promiscuous mode [ 163.879440][ T8448] bond2: option all_slaves_active: invalid value (222) [ 163.890815][ T8448] bond2 (unregistering): Released all slaves [ 164.245942][ T8480] __nla_validate_parse: 10 callbacks suppressed [ 164.245963][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.743'. [ 164.393052][ T8493] netlink: 408 bytes leftover after parsing attributes in process `syz.2.746'. [ 164.467944][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 164.533374][ T8505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 164.551949][ T8491] team0 (unregistering): Port device team_slave_0 removed [ 164.567845][ T8491] team0 (unregistering): Port device team_slave_1 removed [ 164.569511][ T8507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.750'. [ 164.718974][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'. [ 164.986361][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 165.008812][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 165.048968][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 165.108882][ T8539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.758'. [ 165.432443][ T8564] netlink: 'syz.4.766': attribute type 3 has an invalid length. [ 165.485867][ T8570] sctp: [Deprecated]: syz.3.768 (pid 8570) Use of int in maxseg socket option. [ 165.485867][ T8570] Use struct sctp_assoc_value instead [ 165.694406][ T8588] net_ratelimit: 3 callbacks suppressed [ 165.694424][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.702392][ T8591] netlink: 'syz.4.775': attribute type 12 has an invalid length. [ 166.167831][ T8608] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 166.804186][ T8653] bond0: entered promiscuous mode [ 166.815842][ T8653] bond_slave_0: entered promiscuous mode [ 166.838783][ T8653] bond_slave_1: entered promiscuous mode [ 166.853065][ T8653] team0: entered promiscuous mode [ 166.869288][ T8653] team_slave_0: entered promiscuous mode [ 166.903129][ T8653] team_slave_1: entered promiscuous mode [ 167.227893][ T8687] netlink: 'syz.1.799': attribute type 39 has an invalid length. [ 167.233139][ T8683] netlink: 'syz.1.799': attribute type 39 has an invalid length. [ 167.331489][ T8691] xt_hashlimit: invalid rate [ 167.446036][ T8696] bond3: option all_slaves_active: invalid value (222) [ 167.466560][ T8696] bond3 (unregistering): Released all slaves [ 167.673824][ T8711] netlink: 'syz.1.808': attribute type 30 has an invalid length. [ 167.694700][ T8711] netlink: 'syz.1.808': attribute type 29 has an invalid length. [ 167.789741][ T8716] syzkaller1: entered promiscuous mode [ 167.804737][ T8716] syzkaller1: entered allmulticast mode [ 167.847513][ T8720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.888840][ T8720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.952948][ T8728] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 167.960708][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.489825][ T8766] validate_nla: 1 callbacks suppressed [ 168.489842][ T8766] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 168.504721][ T8766] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 168.552896][ T8766] netlink: 'syz.0.827': attribute type 2 has an invalid length. [ 168.735429][ T8786] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 168.753308][ T8786] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 168.813188][ T8791] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 168.821185][ T8791] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 168.850666][ T8800] netlink: 'syz.3.835': attribute type 8 has an invalid length. [ 169.166758][ T8816] sctp: [Deprecated]: syz.0.840 (pid 8816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.166758][ T8816] Use struct sctp_sack_info instead [ 169.214440][ T8816] sctp: [Deprecated]: syz.0.840 (pid 8816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.214440][ T8816] Use struct sctp_sack_info instead [ 169.241171][ T8816] sctp: [Deprecated]: syz.0.840 (pid 8816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.241171][ T8816] Use struct sctp_sack_info instead [ 169.269576][ T8814] sctp: [Deprecated]: syz.0.840 (pid 8814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.269576][ T8814] Use struct sctp_sack_info instead [ 169.318276][ T8828] Can't find ip_set type bitmap [ 169.499392][ T8843] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 169.548528][ T8843] netlink: 'syz.4.848': attribute type 3 has an invalid length. [ 169.765748][ T8862] vlan2: entered promiscuous mode [ 169.781197][ T8862] bond0: entered promiscuous mode [ 169.795050][ T8862] bond_slave_0: entered promiscuous mode [ 169.802436][ T8867] __nla_validate_parse: 20 callbacks suppressed [ 169.802452][ T8867] netlink: 148 bytes leftover after parsing attributes in process `syz.3.855'. [ 169.823890][ T8862] bond_slave_1: entered promiscuous mode [ 169.829734][ T8862] bridge_slave_1: entered promiscuous mode [ 169.841638][ T8871] sctp: [Deprecated]: syz.0.854 (pid 8871) Use of int in max_burst socket option. [ 169.841638][ T8871] Use struct sctp_assoc_value instead [ 169.908272][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.048458][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 170.283795][ T8888] C: renamed from lo [ 170.399226][ T8893] bond2: entered promiscuous mode [ 170.405610][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 170.416060][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.862'. [ 170.600384][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 170.650502][ T8904] netlink: 2 bytes leftover after parsing attributes in process `syz.3.867'. [ 171.095281][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 171.127080][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 171.353420][ T8966] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20000 [ 171.793430][ T52] Bluetooth: hci1: command tx timeout [ 172.145656][ T9004] team0 (unregistering): Port device team_slave_0 removed [ 172.154543][ T9004] team0 (unregistering): Port device team_slave_1 removed [ 172.486607][ T9036] netlink: 'syz.0.902': attribute type 21 has an invalid length. [ 172.688149][ T9051] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.895008][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 173.031409][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'. [ 173.162272][ T9084] bond4: (slave bridge1): making interface the new active one [ 173.170631][ T9084] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 173.306886][ T9094] block nbd0: reconnected socket [ 173.320146][ T52] block nbd0: Receive control failed (result -32) [ 173.667042][ T9113] validate_nla: 2 callbacks suppressed [ 173.667059][ T9113] netlink: 'syz.0.927': attribute type 39 has an invalid length. [ 174.007331][ T9135] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 174.144461][ T5955] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 174.152038][ T5955] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 174.162166][ T9147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.216696][ T9150] 0{X: renamed from gretap0 [ 174.225572][ T5955] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 174.252351][ T9150] 0{X: entered allmulticast mode [ 174.268566][ T5955] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 174.303265][ T5955] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 174.322396][ T9150] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 174.349169][ T5955] hid-generic 0005:0C45:1012.0001: unexpected long global item [ 174.362318][ T5955] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 174.416752][ T9164] geneve3: entered promiscuous mode [ 174.422085][ T9164] geneve3: entered allmulticast mode [ 174.621027][ T9181] netlink: 'syz.2.943': attribute type 12 has an invalid length. [ 174.666317][ T9181] netlink: 'syz.2.943': attribute type 29 has an invalid length. [ 174.677756][ T9181] netlink: 'syz.2.943': attribute type 2 has an invalid length. [ 174.701748][ T9181] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 174.922621][ T9199] bond3: entered promiscuous mode [ 174.928276][ T9199] bond3: entered allmulticast mode [ 174.934259][ T9199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.019361][ T9209] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 175.096077][ T9218] __nla_validate_parse: 137 callbacks suppressed [ 175.096098][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 175.641028][ T9253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.697229][ T9261] gtp0: entered promiscuous mode [ 176.702229][ T9261] gtp0: entered allmulticast mode [ 177.177711][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.198618][ T9297] netlink: 'syz.4.979': attribute type 21 has an invalid length. [ 177.207542][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.256030][ T2972] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.256170][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.293859][ T9297] netlink: 'syz.4.979': attribute type 21 has an invalid length. [ 177.315318][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.334759][ T2972] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.340784][ T9306] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 177.370310][ T2972] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.409202][ T2972] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.471366][ T9309] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 177.904858][ T9342] netlink: 'syz.3.993': attribute type 6 has an invalid length. [ 177.913448][ T9343] netlink: 'syz.3.993': attribute type 6 has an invalid length. [ 178.010442][ T9358] sch_fq: defrate 0 ignored. [ 178.218285][ T9366] netlink: 100 bytes leftover after parsing attributes in process `syz.0.998'. [ 178.223830][ T9369] x_tables: duplicate underflow at hook 3 [ 178.253045][ T9370] lo: entered allmulticast mode [ 178.297328][ T9370] dvmrp1: entered allmulticast mode [ 178.328974][ T9367] lo: left allmulticast mode [ 178.682122][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 179.157464][ T9430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1020'. [ 179.555934][ T9454] bond5: Unable to set up delay as MII monitoring is disabled [ 179.574645][ T9454] bond5 (unregistering): Released all slaves [ 179.628924][ T9462] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1030'. [ 179.745819][ T9468] netlink: 'syz.4.1031': attribute type 26 has an invalid length. [ 179.775268][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 179.809516][ T9478] openvswitch: netlink: Message has 2712 unknown bytes. [ 179.817651][ T9468] netlink: 'syz.4.1031': attribute type 26 has an invalid length. [ 179.937123][ T9486] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.969393][ T9488] netlink: 'syz.3.1036': attribute type 12 has an invalid length. [ 180.072274][ T9492] syzkaller1: entered promiscuous mode [ 180.078187][ T9492] syzkaller1: entered allmulticast mode [ 180.612629][ T9516] __nla_validate_parse: 4 callbacks suppressed [ 180.612648][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 180.793338][ T9527] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 180.848053][ T9527] bond5 (unregistering): Released all slaves [ 180.858316][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 180.885575][ T9536] ip6tnl1: entered promiscuous mode [ 180.890902][ T9536] ip6tnl1: entered allmulticast mode [ 180.915346][ T9534] vlan2: entered promiscuous mode [ 181.007988][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 181.044444][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 181.058373][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1054'. [ 181.208255][ T9549] netem: incorrect ge model size [ 181.214388][ T9549] netem: change failed [ 181.269880][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'. [ 181.279484][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 181.292407][ T9556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.349039][ T9561] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 181.363405][ T9567] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 0, id = 0 [ 181.689321][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 181.743481][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1072'. [ 181.763761][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 182.038595][ T9602] vlan2: entered promiscuous mode [ 182.053595][ T9602] geneve1: entered promiscuous mode [ 182.071186][ T9602] vlan2: entered allmulticast mode [ 182.091091][ T9602] geneve1: entered allmulticast mode [ 182.098458][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.106666][ T9609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.140473][ T9609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.159323][ T9609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.281241][ T9629] tipc: Enabled bearer , priority 0 [ 182.296800][ T9622] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 182.336292][ T9629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.397241][ T9627] tipc: Disabling bearer [ 182.966756][ T9680] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 183.316190][ T9701] ipt_REJECT: TCP_RESET invalid for non-tcp [ 183.994736][ T9724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.003931][ T9724] bond_slave_0: left promiscuous mode [ 184.011841][ T9741] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 184.031264][ T9724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.044973][ T9724] bond_slave_1: left promiscuous mode [ 184.073924][ T9724] bond0 (unregistering): (slave team0): Releasing backup interface [ 184.084567][ T9724] team0: left promiscuous mode [ 184.089454][ T9724] team_slave_0: left promiscuous mode [ 184.097038][ T9724] team_slave_1: left promiscuous mode [ 184.117930][ T9724] bond0 (unregistering): Released all slaves [ 184.199518][ T9741] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.240475][ T9748] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 184.271087][ T9749] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 184.325456][ T9753] bridge0: port 2(batadv0) entered blocking state [ 184.362557][ T9756] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 184.363499][ T9753] bridge0: port 2(batadv0) entered disabled state [ 184.380963][ T9753] batadv0: entered allmulticast mode [ 184.390968][ T9753] batadv0: entered promiscuous mode [ 184.581760][ T9767] Bluetooth: MGMT ver 1.23 [ 184.816079][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 184.825794][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 184.844935][ T9796] tipc: Started in network mode [ 184.849863][ T9796] tipc: Node identity 5aadf71e091, cluster identity 4711 [ 184.862680][ T9796] tipc: Enabled bearer , priority 0 [ 184.927514][ T9796] syzkaller0: entered promiscuous mode [ 184.933262][ T9796] syzkaller0: entered allmulticast mode [ 184.939521][ T9796] tipc: Resetting bearer [ 184.951419][ T9806] 8021q: VLANs not supported on vxcan1 [ 184.952665][ T9804] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 184.982500][ T9794] tipc: Resetting bearer [ 185.556039][ T9819] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 185.985295][ T7580] tipc: Node number set to 1404958494 [ 186.159280][ T9794] tipc: Disabling bearer [ 186.210961][ T9819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.275880][ T9820] bond5: (slave geneve2): making interface the new active one [ 186.302498][ T9820] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 186.349971][ T79] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 20000 - 0 [ 186.444321][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.477559][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.483759][ T9830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.508033][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.525915][ T9831] syzkaller0: entered allmulticast mode [ 186.546221][ T9831] __nla_validate_parse: 13 callbacks suppressed [ 186.546240][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1131'. [ 186.575372][ T9842] tipc: Enabling of bearer rejected, failed to enable media [ 186.589283][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 186.601086][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 186.636330][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 186.661875][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 187.171994][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. [ 187.207474][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 187.317459][ T9884] netlink: 'syz.3.1148': attribute type 4 has an invalid length. [ 187.332163][ T9878] tipc: Enabled bearer , priority 0 [ 187.415941][ T9878] syzkaller0: entered promiscuous mode [ 187.438254][ T9878] syzkaller0: entered allmulticast mode [ 187.557934][ T9899] tipc: Resetting bearer [ 187.586017][ T9877] tipc: Resetting bearer [ 187.648292][ T9877] tipc: Disabling bearer [ 187.705617][ T9906] netlink: zone id is out of range [ 187.756081][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 187.867299][ T9911] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1156'. [ 187.899232][ T9914] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 187.918708][ T9914] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 187.958912][ T9914] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 187.979708][ T9919] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 188.031273][ T9919] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 188.048790][ T3574] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.066272][ T9919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.100553][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 188.184143][ T50] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.234007][ T9930] xt_CT: No such helper "pptp" [ 188.434483][ T56] block nbd0: Possible stuck request ffff8880250be000: control (read@0,1024B). Runtime 60 seconds [ 188.450762][ T56] block nbd0: Possible stuck request ffff8880250be1c0: control (read@1024,1024B). Runtime 60 seconds [ 188.463290][ T25] block nbd0: Dead connection, failed to find a fallback [ 188.470986][ T25] block nbd0: shutting down sockets [ 188.472168][ T9950] geneve3: entered promiscuous mode [ 188.478598][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.493717][ T56] block nbd0: Possible stuck request ffff8880250be380: control (read@2048,1024B). Runtime 60 seconds [ 188.506214][ T56] block nbd0: Possible stuck request ffff8880250be540: control (read@3072,1024B). Runtime 60 seconds [ 188.518640][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.528905][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.538099][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 188.546729][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.556240][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.564170][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.573340][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 188.582291][ T6586] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.593202][ T6586] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.602572][ T6586] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.613517][ T6586] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.614593][ T9949] veth0: entered promiscuous mode [ 188.621707][ T6586] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.636688][ T6586] Buffer I/O error on dev nbd0, logical block 2, async page read [ 188.645348][ T6586] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.655451][ T6586] Buffer I/O error on dev nbd0, logical block 3, async page read [ 188.663799][ T6586] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.670788][ T9947] veth0: left promiscuous mode [ 188.674463][ T6586] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.686392][ T6586] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.696160][ T6586] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.710605][ T6586] ldm_validate_partition_table(): Disk read failed. [ 188.719869][ T6586] Dev nbd0: unable to read RDB block 0 [ 188.727786][ T6586] nbd0: unable to read partition table [ 188.747698][ T6586] ldm_validate_partition_table(): Disk read failed. [ 188.769005][ T6586] Dev nbd0: unable to read RDB block 0 [ 188.778079][ T6586] nbd0: unable to read partition table [ 188.799709][ T6586] udevd[6586]: failed to send result of seq 11927 to main daemon: Connection refused [ 189.145465][ T9976] tipc: Enabled bearer , priority 0 [ 189.154044][ T9976] syzkaller0: entered promiscuous mode [ 189.159556][ T9976] syzkaller0: entered allmulticast mode [ 189.186018][ T9981] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 189.205249][ T9976] tipc: Resetting bearer [ 189.225867][ T9975] tipc: Resetting bearer [ 189.251231][ T9975] tipc: Disabling bearer [ 189.264725][ T9981] batadv_slave_1: entered promiscuous mode [ 189.311166][ T9981] netlink: 'syz.0.1175': attribute type 4 has an invalid length. [ 189.465436][ T9992] syzkaller1: entered promiscuous mode [ 189.471006][ T9992] syzkaller1: entered allmulticast mode [ 189.552011][T10001] block nbd1: Unsupported socket: should be TCP or UNIX. [ 189.645763][T10008] veth0_to_bond: entered allmulticast mode [ 189.779685][T10018] xt_TCPMSS: Only works on TCP SYN packets [ 189.949513][ T9977] batadv_slave_1: left promiscuous mode [ 190.115236][T10036] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 190.126040][T10036] netlink: 'syz.0.1196': attribute type 2 has an invalid length. [ 190.226740][T10039] openvswitch: netlink: IP tunnel dst address not specified [ 191.084063][T10095] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.190445][T10101] netlink: 'syz.1.1216': attribute type 7 has an invalid length. [ 191.239697][T10101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 191.440657][T10114] netlink: 'syz.1.1218': attribute type 11 has an invalid length. [ 191.672571][T10124] __nla_validate_parse: 16 callbacks suppressed [ 191.672590][T10124] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1221'. [ 191.796368][T10133] openvswitch: netlink: IP tunnel dst address not specified [ 191.820023][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.825086][T10129] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1224'. [ 191.841379][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 191.857525][T10129] ip6gretap0: entered promiscuous mode [ 191.883109][T10129] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1224'. [ 191.922354][T10144] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1229'. [ 191.943251][T10147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 191.964505][T10145] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 192.150061][T10160] nbd: device at index 1 is going down [ 192.765518][ T3000] batadv0: left allmulticast mode [ 192.770881][ T3000] batadv0: left promiscuous mode [ 192.805892][ T3000] bridge0: port 2(batadv0) entered disabled state [ 192.835269][ T3000] bridge_slave_0: left allmulticast mode [ 192.841239][ T3000] bridge_slave_0: left promiscuous mode [ 192.863232][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.159646][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 193.502063][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.521412][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.530030][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.548619][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.561895][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.618819][T10217] netlink: 'syz.1.1252': attribute type 4 has an invalid length. [ 193.643571][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.652420][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.661821][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.670610][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.678606][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.955779][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.965361][ T3000] bond_slave_0: left promiscuous mode [ 193.973636][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.982419][ T3000] bond_slave_1: left promiscuous mode [ 193.991298][ T3000] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 194.001344][ T3000] bridge_slave_1: left promiscuous mode [ 194.008281][ T3000] bond0 (unregistering): Released all slaves [ 194.089291][ T3000] bond1 (unregistering): Released all slaves [ 194.225956][ T3000] tipc: Left network mode [ 194.490384][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 194.793789][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 194.916769][T10245] hsr_slave_0 (unregistering): left promiscuous mode [ 194.930663][T10251] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgҒ?NZez [ 195.055107][ T3000] hsr_slave_0: left promiscuous mode [ 195.062622][ T3000] hsr_slave_1: left promiscuous mode [ 195.090852][ T3000] veth1_macvtap: left promiscuous mode [ 195.097294][ T3000] veth0_macvtap: left promiscuous mode [ 195.103528][ T3000] veth1_vlan: left promiscuous mode [ 195.479491][ T3000] team0 (unregistering): Port device team_slave_1 removed [ 195.511283][ T3000] team0 (unregistering): Port device team_slave_0 removed [ 195.636698][ T5839] Bluetooth: hci1: command tx timeout [ 195.713096][ T5839] Bluetooth: hci4: command tx timeout [ 195.843834][T10218] chnl_net:caif_netlink_parms(): no params data found [ 195.985107][T10213] chnl_net:caif_netlink_parms(): no params data found [ 196.189077][T10286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1269'. [ 196.215832][T10286] netlink: 'syz.0.1269': attribute type 21 has an invalid length. [ 196.250209][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.258230][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.266502][T10218] bridge_slave_0: entered allmulticast mode [ 196.277338][T10218] bridge_slave_0: entered promiscuous mode [ 196.301679][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.319838][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.348473][T10218] bridge_slave_1: entered allmulticast mode [ 196.404369][T10218] bridge_slave_1: entered promiscuous mode [ 196.578072][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.665232][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.703702][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.710955][T10213] bridge_slave_0: entered allmulticast mode [ 196.756560][T10213] bridge_slave_0: entered promiscuous mode [ 196.811928][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.851616][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.875570][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.894071][T10213] bridge_slave_1: entered allmulticast mode [ 196.904809][T10213] bridge_slave_1: entered promiscuous mode [ 196.922176][ T3000] IPVS: stop unused estimator thread 0... [ 197.050035][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.076441][T10218] team0: Port device team_slave_0 added [ 197.712958][ T5839] Bluetooth: hci1: command tx timeout [ 197.793070][ T5839] Bluetooth: hci4: command tx timeout [ 198.190747][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.202176][T10218] team0: Port device team_slave_1 added [ 198.357241][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.365914][T10332] delete_channel: no stack [ 198.366885][T10331] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 198.378749][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.416353][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.432294][T10213] team0: Port device team_slave_0 added [ 198.442321][T10213] team0: Port device team_slave_1 added [ 198.454213][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.471370][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.498577][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.597180][T10345] __nla_validate_parse: 1 callbacks suppressed [ 198.597199][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 198.680381][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.691422][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.729268][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.760272][T10218] hsr_slave_0: entered promiscuous mode [ 198.773905][T10218] hsr_slave_1: entered promiscuous mode [ 198.777087][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1288'. [ 198.791603][T10218] debugfs: 'hsr0' already exists in 'hsr' [ 198.798303][T10218] Cannot create hsr debugfs directory [ 198.824740][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.831747][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.866649][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.997859][T10213] hsr_slave_0: entered promiscuous mode [ 199.014033][T10213] hsr_slave_1: entered promiscuous mode [ 199.020324][T10213] debugfs: 'hsr0' already exists in 'hsr' [ 199.026997][T10213] Cannot create hsr debugfs directory [ 199.403409][T10218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.419802][T10218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.431396][T10218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.452517][T10218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.539941][T10213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.559113][T10213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.576742][T10213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.599147][T10213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.755931][T10218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.804482][ T5839] Bluetooth: hci1: command tx timeout [ 199.804727][T10218] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.831939][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.839182][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.860826][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.874193][ T5839] Bluetooth: hci4: command tx timeout [ 199.901795][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.909103][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.984512][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.040884][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.048115][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.121487][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.128719][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.177667][T10409] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 200.441425][T10420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.537080][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 200.562593][T10218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.774862][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.229798][T10218] veth0_vlan: entered promiscuous mode [ 201.260121][T10218] veth1_vlan: entered promiscuous mode [ 201.347476][T10218] veth0_macvtap: entered promiscuous mode [ 201.385627][T10218] veth1_macvtap: entered promiscuous mode [ 201.430525][T10218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.460293][T10469] syzkaller1: entered promiscuous mode [ 201.469269][T10469] syzkaller1: entered allmulticast mode [ 201.506802][T10218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.548188][ T79] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.558976][ T79] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.608578][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.629634][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.692401][T10213] veth0_vlan: entered promiscuous mode [ 201.759283][T10213] veth1_vlan: entered promiscuous mode [ 201.869836][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.880214][ T5839] Bluetooth: hci1: command tx timeout [ 201.886309][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.899009][T10213] veth0_macvtap: entered promiscuous mode [ 201.952948][ T5839] Bluetooth: hci4: command tx timeout [ 201.984649][T10213] veth1_macvtap: entered promiscuous mode [ 201.992171][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.010039][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.074643][T10490] team0 (unregistering): Port device team_slave_0 removed [ 202.109365][T10490] team0 (unregistering): Port device team_slave_1 removed [ 202.143456][T10490] team0 (unregistering): Port device bridge2 removed [ 202.167778][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.181196][T10492] netlink: 'syz.0.1319': attribute type 75 has an invalid length. [ 202.207482][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.228316][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.264040][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.321799][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.339840][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.538649][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.557278][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.615912][T10512] netlink: 'syz.1.1323': attribute type 50 has an invalid length. [ 202.630900][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.644929][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.875669][T10528] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 203.388056][T10575] netlink: 'syz.1.1339': attribute type 11 has an invalid length. [ 203.610586][T10586] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 203.642998][T10586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1344'. [ 203.718566][T10587] syzkaller0: entered promiscuous mode [ 203.724599][T10587] syzkaller0: entered allmulticast mode [ 203.734220][T10586] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 203.741802][T10586] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 203.768647][T10586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 203.794153][T10599] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 204.078557][T10605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.088904][T10605] bond4: (slave bond5): making interface the new active one [ 204.097368][T10605] bond4: (slave bond5): Enslaving as an active interface with an up link [ 204.119710][T10599] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.132358][T10599] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 204.223258][T10611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1349'. [ 204.778640][T10640] netlink: 'syz.4.1358': attribute type 3 has an invalid length. [ 205.877561][T10651] netlink: 'syz.6.1362': attribute type 1 has an invalid length. [ 205.906208][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 205.963016][T10654] netlink: 'syz.1.1364': attribute type 16 has an invalid length. [ 206.008334][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1364'. [ 206.077742][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1368'. [ 206.079450][T10670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.093542][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 206.107517][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 206.134102][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'. [ 206.157707][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 206.167281][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1368'. [ 207.018883][T10731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.183138][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.953232][T10795] can: request_module (can-proto-0) failed. [ 207.970235][T10788] netlink: 'syz.0.1397': attribute type 5 has an invalid length. [ 208.121031][T10807] nbd: must specify at least one socket [ 208.154369][T10809] gretap0: entered promiscuous mode [ 208.530824][T10823] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 208.945577][T10866] sctp: [Deprecated]: syz.0.1422 (pid 10866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.945577][T10866] Use struct sctp_sack_info instead [ 209.240306][T10880] __nla_validate_parse: 10 callbacks suppressed [ 209.240325][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 209.399148][T10887] delete_channel: no stack [ 209.833658][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 209.938536][ T3574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.090456][ T3574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.235718][ T3574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.276098][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 210.289517][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 210.348749][T10937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1439'. [ 210.536220][ T3574] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.617504][T10945] macvlan0: entered promiscuous mode [ 210.634863][T10945] batadv0: entered promiscuous mode [ 210.641569][T10945] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 210.659706][T10945] hsr1: entered allmulticast mode [ 210.681418][T10945] macvlan0: entered allmulticast mode [ 210.688895][T10945] batadv0: entered allmulticast mode [ 210.697802][T10945] macvlan0: left promiscuous mode [ 210.705413][T10945] batadv0: left promiscuous mode [ 210.723754][T10964] ip6t_REJECT: ECHOREPLY is not supported [ 211.104227][T10981] syzkaller0: entered promiscuous mode [ 211.113358][T10981] syzkaller0: entered allmulticast mode [ 211.180018][T10992] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 211.427217][ T3574] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 211.530611][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 211.550850][ T3574] bond1 (unregistering): (slave gre1): Releasing backup interface [ 211.560418][ T3574] gre1 (unregistering): left promiscuous mode [ 211.585174][ T3574] bond5 (unregistering): (slave geneve2): Releasing active interface [ 211.633643][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.635326][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 211.664023][ T3574] bond4 (unregistering): (slave bridge1): Releasing active interface [ 211.787636][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.798000][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.807580][ T3574] bond0 (unregistering): Released all slaves [ 211.887631][ T3574] bond1 (unregistering): Released all slaves [ 211.969317][ T3574] bond2 (unregistering): (slave veth3): Releasing active interface [ 211.978885][ T3574] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 211.989069][ T3574] bond2 (unregistering): (slave veth5): Releasing active interface [ 211.998037][ T3574] bond2 (unregistering): Released all slaves [ 212.082409][ T3574] bond3 (unregistering): Released all slaves [ 212.096503][ T3574] bond4 (unregistering): Released all slaves [ 212.180582][ T3574] bond5 (unregistering): Released all slaves [ 212.320381][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.338319][T11026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.397671][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.430681][ T3574] IPVS: stopping backup sync thread 9567 ... [ 212.431988][T11026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.460438][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 212.471074][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 212.527445][T11027] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 212.758512][T11051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1465'. [ 212.790425][T11055] tunl0: entered promiscuous mode [ 212.815701][T11055] netlink: 'syz.1.1466': attribute type 3 has an invalid length. [ 212.834691][T11055] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1466'. [ 212.845029][T11057] bridge0: port 3(syz_tun) entered blocking state [ 212.857853][T11057] bridge0: port 3(syz_tun) entered disabled state [ 212.936097][T11057] syz_tun: entered allmulticast mode [ 212.954108][T11057] syz_tun: entered promiscuous mode [ 212.966098][T11057] bridge0: port 3(syz_tun) entered blocking state [ 212.972751][T11057] bridge0: port 3(syz_tun) entered forwarding state [ 213.035862][T11055] tipc: Enabling of bearer rejected, failed to enable media [ 213.115464][T11072] nbd: must specify a device to reconfigure [ 213.611354][ T3574] hsr_slave_0: left promiscuous mode [ 213.638500][ T3574] hsr_slave_1: left promiscuous mode [ 213.655600][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.794340][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.007496][T11117] netlink: 'syz.5.1484': attribute type 1 has an invalid length. [ 214.530816][ T3574] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 215.579039][T11171] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 215.588728][T11175] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1499'. [ 215.632364][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1499'. [ 215.805834][T11182] xt_socket: unknown flags 0x50 [ 216.085727][T11208] netlink: 'syz.1.1509': attribute type 13 has an invalid length. [ 216.341534][T11201] syzkaller0: entered promiscuous mode [ 216.347236][T11201] syzkaller0: entered allmulticast mode [ 216.414421][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1515'. [ 216.534176][T11233] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.805647][T11250] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1518'. [ 217.835101][T11250] tipc: Enabling of bearer rejected, failed to enable media [ 218.254211][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 218.373894][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1529'. [ 218.384027][T11289] openvswitch: netlink: Message has 592 unknown bytes. [ 218.400027][T11286] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1529'. [ 218.418464][T11289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.432999][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1529'. [ 218.553207][T11305] C: renamed from team_slave_0 [ 218.566685][T11304] x_tables: duplicate underflow at hook 3 [ 218.576495][T11305] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 218.598366][T11305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 218.623187][T11307] tipc: Enabling of bearer rejected, failed to enable media [ 218.664455][T11304] syzkaller0: entered promiscuous mode [ 218.672096][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 218.680721][T11304] syzkaller0: entered allmulticast mode [ 218.737576][T11315] macvlan0: entered promiscuous mode [ 218.745049][T11315] batadv0: entered promiscuous mode [ 218.755864][T11315] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 218.766215][T11315] hsr1: entered allmulticast mode [ 218.772609][T11315] macvlan0: left promiscuous mode [ 218.784460][T11315] batadv0: left promiscuous mode [ 218.817773][T11310] wg1: entered promiscuous mode [ 218.822914][T11310] wg1: entered allmulticast mode [ 218.940570][T11323] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1540'. [ 219.017687][T11327] syz_tun: tun_net_xmit 86 [ 219.039073][T11330] netlink: 'syz.4.1542': attribute type 30 has an invalid length. [ 219.220108][T11334] bond3: Invalid ad_actor_system MAC address. [ 219.240089][T11334] bond3: option ad_actor_system: invalid value (1) [ 219.255469][T11334] bond3 (unregistering): Released all slaves [ 219.390067][T11351] netlink: 'syz.0.1549': attribute type 7 has an invalid length. [ 219.410705][T11351] netlink: 'syz.0.1549': attribute type 8 has an invalid length. [ 219.438936][T11351] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.472397][T11351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.675796][T11363] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 220.032971][ C0] syz_tun: tun_net_xmit 86 [ 220.258149][T11401] netlink: 'syz.1.1567': attribute type 12 has an invalid length. [ 220.447406][T11401] bond0: option primary_reselect: invalid value (255) [ 220.528689][T11401] bond0 (unregistering): Released all slaves [ 220.938310][T11421] __nla_validate_parse: 15 callbacks suppressed [ 220.938329][T11421] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1574'. [ 220.987864][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 221.073195][ C0] syz_tun: tun_net_xmit 86 [ 221.319482][T11449] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 221.415476][T11453] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1585'. [ 221.452539][T11457] xt_NFQUEUE: number of total queues is 0 [ 221.515404][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 221.637448][T11472] netlink: 'syz.4.1593': attribute type 7 has an invalid length. [ 221.665552][T11472] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1593'. [ 221.724604][T11476] netlink: 696 bytes leftover after parsing attributes in process `syz.5.1594'. [ 221.738644][T11478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1595'. [ 221.790059][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 221.986731][T11501] sctp: [Deprecated]: syz.1.1600 (pid 11501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.986731][T11501] Use struct sctp_sack_info instead [ 222.007879][T11497] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 222.034416][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 222.046086][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 222.077245][T11503] netlink: 'syz.5.1599': attribute type 15 has an invalid length. [ 222.160510][T11504] syzkaller0: entered promiscuous mode [ 222.167906][T11504] syzkaller0: entered allmulticast mode [ 224.927351][ C1] syz_tun: tun_net_xmit 70 [ 230.034542][ C0] syz_tun: tun_net_xmit 70 [ 248.635750][T11509] sch_fq: defrate 0 ignored. [ 248.643100][T11510] __nla_validate_parse: 1 callbacks suppressed [ 248.643139][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 248.698664][T11514] syzkaller0: entered promiscuous mode [ 248.715994][T11514] syzkaller0: entered allmulticast mode [ 248.755112][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 249.032110][T11540] openvswitch: netlink: EtherType 53b is less than min 600 [ 249.048011][T11543] openvswitch: netlink: EtherType 53b is less than min 600 [ 249.481055][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1623'. [ 249.534311][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1624'. [ 249.860510][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 249.941986][T11604] macsec1: entered promiscuous mode [ 249.947484][T11604] macsec1: entered allmulticast mode [ 249.954148][T11604] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 250.061510][T11619] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 250.100606][T11619] bond5 (unregistering): Released all slaves [ 250.133650][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 250.168884][T11626] netlink: 'syz.6.1639': attribute type 1 has an invalid length. [ 250.176804][T11626] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1639'. [ 250.248144][T11632] : renamed from bridge_slave_0 (while UP) [ 250.299582][T11634] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1642'. [ 250.433942][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 251.004474][T11671] syz_tun: tun_net_xmit 86 [ 251.093159][ T7580] syz_tun: tun_net_xmit 130 [ 251.328263][T11698] netlink: 'syz.6.1659': attribute type 1 has an invalid length. [ 251.336667][ T7579] IPVS: starting estimator thread 0... [ 251.365925][T11698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.433891][T11699] IPVS: using max 29 ests per chain, 69600 per kthread [ 251.446913][T11707] netlink: 'syz.6.1661': attribute type 1 has an invalid length. [ 251.468872][T11707] netlink: 'syz.6.1661': attribute type 2 has an invalid length. [ 251.476032][T11709] IPv6: sit1: Disabled Multicast RS [ 251.482040][T11707] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1661'. [ 251.483629][T11709] sit1: entered allmulticast mode [ 251.653274][ T30] audit: type=1800 audit(1761849789.812:4): pid=11711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1661" name="memory.events" dev="tmpfs" ino=377 res=0 errno=0 [ 251.887387][T11724] openvswitch: netlink: Missing key (keys=40, expected=100) [ 251.963070][ T5848] syz_tun: tun_net_xmit 130 [ 251.987275][T11732] ipt_REJECT: TCP_RESET invalid for non-tcp [ 252.032961][ C0] syz_tun: tun_net_xmit 86 [ 252.266011][T11746] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 252.278274][T11746] netlink: 'syz.0.1675': attribute type 4 has an invalid length. [ 252.487904][T11768] netlink: 'syz.6.1683': attribute type 11 has an invalid length. [ 253.083299][ C0] syz_tun: tun_net_xmit 86 [ 254.111315][T11873] bridge4: entered promiscuous mode [ 254.141993][T11873] bridge4: entered allmulticast mode [ 254.428646][T11883] __nla_validate_parse: 8 callbacks suppressed [ 254.428665][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 254.458079][T11883] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 254.689306][T11894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.736778][T11894] bridge_slave_0: left allmulticast mode [ 254.755747][T11894] bridge_slave_0: left promiscuous mode [ 254.761594][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.786082][T11894] bridge_slave_1: left allmulticast mode [ 254.794281][T11894] bridge_slave_1: left promiscuous mode [ 254.800104][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.842624][T11894] bond0: (slave bond_slave_0): Releasing backup interface [ 254.891322][T11894] bond0: (slave bond_slave_1): Releasing backup interface [ 254.939930][T11894] team0: Port device team_slave_0 removed [ 254.985343][T11894] team0: Port device team_slave_1 removed [ 255.000643][T11894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.008706][T11894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.030069][T11894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.038018][T11894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.048627][T11894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.231405][T11921] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.378201][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 255.416730][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1728'. [ 255.558061][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 256.105283][T11962] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1738'. [ 256.278173][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 256.303658][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 256.304705][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 256.322034][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 256.391570][T11972] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 256.428824][T11978] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 256.627477][T11988] sctp: [Deprecated]: syz.4.1748 (pid 11988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.627477][T11988] Use struct sctp_sack_info instead [ 257.035796][T12015] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 257.136486][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1761'. [ 257.413529][T12042] netlink: 'syz.0.1766': attribute type 83 has an invalid length. [ 257.529326][T12045] bond3: Unable to set down delay as MII monitoring is disabled [ 257.556462][T12045] bond3 (unregistering): Released all slaves [ 257.599020][T12050] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 257.695378][T12053] bond5 (unregistering): Released all slaves [ 257.880938][T12071] unsupported nla_type 52263 [ 258.139634][T12085] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 258.811154][T12112] pimreg: entered allmulticast mode [ 258.818017][T12112] pimreg: left allmulticast mode [ 259.476328][T12140] __nla_validate_parse: 6 callbacks suppressed [ 259.476351][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 260.426902][T12178] netlink: 'syz.1.1822': attribute type 1 has an invalid length. [ 260.540181][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 261.206440][T12209] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1837'. [ 261.595448][T12228] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 261.627717][T12234] syz_tun: entered allmulticast mode [ 261.849214][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'. [ 262.040917][T12260] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1861'. [ 262.112075][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1863'. [ 262.574580][T12276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1869'. [ 262.589476][T12280] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1870'. [ 262.889615][T12300] xt_hashlimit: max too large, truncated to 1048576 [ 263.154349][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 263.183122][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 264.091180][T12347] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.427341][T12432] macvtap0: refused to change device tx_queue_len [ 265.636623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d9f5c00: rx timeout, send abort [ 265.874404][ T5955] syz_tun: tun_net_xmit 90 [ 266.136660][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880590b9c00: rx timeout, send abort [ 266.146491][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d9f5c00: abort rx timeout. Force session deactivation [ 266.473766][ T24] syz_tun: tun_net_xmit 90 [ 266.645104][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880590b9c00: abort rx timeout. Force session deactivation [ 266.886569][T12519] __nla_validate_parse: 1 callbacks suppressed [ 266.886589][T12519] netlink: 108712 bytes leftover after parsing attributes in process `syz.5.1980'. [ 267.369051][T12541] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 267.464544][T12547] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1993'. [ 267.600079][T12555] syzkaller0: entered promiscuous mode [ 267.605936][T12555] syzkaller0: entered allmulticast mode [ 269.403418][T12567] netlink: 'syz.4.2002': attribute type 12 has an invalid length. [ 269.404746][T12563] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 269.411995][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2002'. [ 269.421294][T12563] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 269.437659][T12563] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 269.461534][T12595] tipc: Enabled bearer , priority 0 [ 269.503482][T12594] tipc: Disabling bearer [ 270.008413][T12621] netlink: 'syz.6.2025': attribute type 1 has an invalid length. [ 270.093844][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.319361][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 270.585267][T12649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.630259][T12658] pimreg: entered allmulticast mode [ 270.698827][T12649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.734488][T12651] pimreg: left allmulticast mode [ 270.800109][T12649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.936757][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 270.971268][T12649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.254155][ T1163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.302515][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.375388][ T2972] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.447504][ T1163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.689761][T12706] syzkaller0: entered allmulticast mode [ 271.741463][T12703] syzkaller0 (unregistering): left allmulticast mode [ 272.601475][T12735] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.629948][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 272.741001][T12735] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.804747][T12747] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.834075][T12747] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.945233][T12735] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.064422][T12735] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.114852][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 273.143365][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 273.161013][T12767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2092'. [ 273.299121][ T2972] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.328475][ T2972] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.353640][T12776] netlink: 'syz.1.2096': attribute type 3 has an invalid length. [ 273.391961][T12776] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 273.402816][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.421251][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.473916][T12781] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2098'. [ 273.518340][T12776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.534873][T12778] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2097'. [ 273.564369][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 273.612091][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 273.676086][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 273.744241][T12797] netlink: 30 bytes leftover after parsing attributes in process `syz.5.2104'. [ 273.831327][T12776] bond5 (unregistering): Released all slaves [ 274.445181][T12831] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 274.826640][T12856] netlink: 'syz.0.2131': attribute type 7 has an invalid length. [ 277.768982][T12989] atomic_op ffff88804145e198 conn xmit_atomic 0000000000000000 [ 277.993589][T13001] netlink: 'syz.4.2199': attribute type 4 has an invalid length. [ 278.404445][T13010] __nla_validate_parse: 4 callbacks suppressed [ 278.404462][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 278.507454][T13010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.546270][T13012] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 278.656507][T13016] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2204'. [ 278.795303][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 278.877073][T13026] team0: entered promiscuous mode [ 278.889877][T13026] team0: entered allmulticast mode [ 278.896145][T13026] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.037510][T13040] netlink: 'syz.1.2216': attribute type 3 has an invalid length. [ 279.461033][T13064] veth2: entered promiscuous mode [ 279.486199][T13064] veth2: entered allmulticast mode [ 279.509249][T13072] netlink: 'syz.6.2231': attribute type 3 has an invalid length. [ 279.607172][T13075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.679365][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2234'. [ 279.860498][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2238'. [ 280.577624][T13109] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 280.991560][ T9] IPVS: starting estimator thread 0... [ 281.092805][T13138] IPVS: using max 33 ests per chain, 79200 per kthread [ 281.538401][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2274'. [ 282.005974][T13197] netlink: 528 bytes leftover after parsing attributes in process `syz.4.2286'. [ 282.018989][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 282.039992][T13199] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2289'. [ 282.382553][T13221] netlink: 'syz.0.2297': attribute type 21 has an invalid length. [ 282.391127][T13221] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.421574][T13221] IPv6: Can't replace route, no match found [ 283.367059][T13272] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.118978][T13290] netlink: 528 bytes leftover after parsing attributes in process `syz.4.2327'. [ 284.159737][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 284.181700][T13292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.302312][T13292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.383147][T13292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.465540][T13292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.678921][ T1163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.703188][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.739931][ T79] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.791886][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.961093][T13331] netlink: 528 bytes leftover after parsing attributes in process `syz.0.2341'. [ 284.971534][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 284.983539][T13334] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.2344'. [ 285.099924][T13338] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2345'. [ 285.121125][T13338] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2345'. [ 285.145918][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 285.843138][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 285.955748][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 286.441419][T13409] netlink: 'syz.1.2377': attribute type 5 has an invalid length. [ 286.683721][T13420] netlink: 'syz.0.2383': attribute type 10 has an invalid length. [ 286.696534][T13420] netlink: 'syz.0.2383': attribute type 10 has an invalid length. [ 286.733939][T13427] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 286.773812][T13426] netlink: 'syz.1.2385': attribute type 27 has an invalid length. [ 286.798962][T13426] tunl0: left promiscuous mode [ 287.342542][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.350817][T13426] bridge0: port 1() entered disabled state [ 287.837271][T13426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.924404][T13426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.219170][T13426] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 288.237149][T13426] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 288.302320][T13426] macvtap0: left allmulticast mode [ 288.327506][T13426] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 288.410823][T13426] bridge2: left promiscuous mode [ 288.418957][T13426] bridge2: left allmulticast mode [ 288.436343][T13426] bond2: left promiscuous mode [ 288.445223][T13426] bond3: left promiscuous mode [ 288.451552][T13426] bond3: left allmulticast mode [ 288.577439][T13426] team0: left promiscuous mode [ 288.582386][T13426] team0: left allmulticast mode [ 288.592910][T13426] veth2: left promiscuous mode [ 288.597939][T13426] veth2: left allmulticast mode [ 288.611187][T13433] syzkaller1: entered promiscuous mode [ 288.619177][T13433] syzkaller1: entered allmulticast mode [ 288.656385][ T2972] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.682903][ T2972] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.761409][T13482] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 288.870198][T13486] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 288.883083][T13486] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 289.284257][T13501] netlink: 'syz.1.2413': attribute type 10 has an invalid length. [ 289.345881][T13504] netlink: 'syz.1.2413': attribute type 10 has an invalid length. [ 289.353990][T13504] __nla_validate_parse: 8 callbacks suppressed [ 289.354008][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2413'. [ 290.305199][T13467] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2402'. [ 290.315210][ T2972] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.324392][ T2972] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.333915][T13485] syzkaller1: left promiscuous mode [ 290.339246][T13485] syzkaller1: left allmulticast mode [ 290.347603][T13504] batadv0: entered promiscuous mode [ 290.353889][T13504] bridge0: port 3(batadv0) entered blocking state [ 290.360676][T13504] bridge0: port 3(batadv0) entered disabled state [ 290.377793][T13509] ip6_vti0: entered allmulticast mode [ 290.476766][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 290.486639][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 290.613482][T13522] netlink: 528 bytes leftover after parsing attributes in process `syz.6.2422'. [ 290.642863][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 290.737858][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 290.766086][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 290.783233][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 291.223376][T13558] netlink: 528 bytes leftover after parsing attributes in process `syz.1.2438'. [ 291.244404][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 291.256831][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 291.258916][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 291.594998][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 291.611457][T13581] ip6gre1: entered allmulticast mode [ 293.028523][T13648] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 293.059844][T13648] hsr_slave_1: left promiscuous mode [ 293.864365][T13672] netlink: 'syz.1.2490': attribute type 2 has an invalid length. [ 294.358347][T13699] [ 294.360983][T13699] ============================= [ 294.366241][T13699] WARNING: suspicious RCU usage [ 294.371169][T13699] syzkaller #0 Not tainted [ 294.375664][T13699] ----------------------------- [ 294.381036][T13699] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 294.390066][T13699] [ 294.390066][T13699] other info that might help us debug this: [ 294.390066][T13699] [ 294.400383][T13699] [ 294.400383][T13699] rcu_scheduler_active = 2, debug_locks = 1 [ 294.408512][T13699] 1 lock held by syz.0.2503/13699: [ 294.413690][T13699] #0: ffffffff8df3d4c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 294.423971][T13699] [ 294.423971][T13699] stack backtrace: [ 294.429891][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.0.2503 Not tainted syzkaller #0 PREEMPT(full) [ 294.429914][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.429931][T13699] Call Trace: [ 294.429937][T13699] [ 294.429944][T13699] dump_stack_lvl+0x189/0x250 [ 294.429974][T13699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.429996][T13699] ? __pfx__printk+0x10/0x10 [ 294.430022][T13699] lockdep_rcu_suspicious+0x140/0x1d0 [ 294.430043][T13699] get_callchain_entry+0x2b6/0x3c0 [ 294.430070][T13699] get_perf_callchain+0xb3/0x6f0 [ 294.430093][T13699] ? __pfx___schedule+0x10/0x10 [ 294.430113][T13699] ? __pfx_get_perf_callchain+0x10/0x10 [ 294.430146][T13699] __bpf_get_stack+0x3fa/0xa60 [ 294.430175][T13699] ? __pfx___bpf_get_stack+0x10/0x10 [ 294.430206][T13699] bpf_get_stack+0x33/0x50 [ 294.430225][T13699] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 294.430243][T13699] bpf_get_stack_raw_tp+0x1a9/0x220 [ 294.430271][T13699] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 294.430285][T13699] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 294.430307][T13699] bpf_prog_test_run_syscall+0x312/0x4b0 [ 294.430325][T13699] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 294.430340][T13699] ? __fget_files+0x2a/0x420 [ 294.430358][T13699] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 294.430374][T13699] bpf_prog_test_run+0x2c7/0x340 [ 294.430394][T13699] __sys_bpf+0x562/0x860 [ 294.430410][T13699] ? __pfx___sys_bpf+0x10/0x10 [ 294.430440][T13699] ? rcu_is_watching+0x15/0xb0 [ 294.430463][T13699] __x64_sys_bpf+0x7c/0x90 [ 294.430486][T13699] do_syscall_64+0xfa/0xfa0 [ 294.430505][T13699] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.430525][T13699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.430539][T13699] ? clear_bhb_loop+0x60/0xb0 [ 294.430562][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.430577][T13699] RIP: 0033:0x7f62b838efc9 [ 294.430590][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.430605][T13699] RSP: 002b:00007f62b922b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.430623][T13699] RAX: ffffffffffffffda RBX: 00007f62b85e5fa0 RCX: 00007f62b838efc9 [ 294.430635][T13699] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 294.430644][T13699] RBP: 00007f62b8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.430654][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.430663][T13699] R13: 00007f62b85e6038 R14: 00007f62b85e5fa0 R15: 00007ffeec09fea8 [ 294.430688][T13699]