last executing test programs: 12.524781329s ago: executing program 4 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) (async) 12.154345565s ago: executing program 4 (id=3272): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1c) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e27, 0x4, @mcast2, 0x3}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r4], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e}, 0x28) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r2, 0x1, 0x6}, 0x10) sendto$packet(r5, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 11.68678904s ago: executing program 4 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000a40)="480e23") r2 = socket$netlink(0x10, 0x3, 0x9) listen(r2, 0x7) 11.685653429s ago: executing program 4 (id=3275): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000020000000700"/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x89002820}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x240420b0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x71, 0x6, 0x9, 0x10, @empty, @private1, 0x40, 0x7800, 0x7f, 0x800}}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r8, 0x11, 0x65, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000005c0)=0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r12], 0x50}}, 0xc0) getsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r7}, &(0x7f0000000040), &(0x7f00000007c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x349, 0x2c, &(0x7f0000000140)=""/44, 0x40f00, 0x45, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r6, r7], &(0x7f0000000440)=[{0x0, 0x2, 0xa, 0xa}, {0x753d41aa, 0x3, 0x1, 0x2}, {0x0, 0x2, 0x3, 0x6}, {0x5, 0x3, 0xf, 0x1}, {0x0, 0x3, 0x8, 0x3}], 0x10, 0x1}, 0x94) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r13, 0x1, 0x5, &(0x7f0000000580)=0x5, 0x4) 11.117918996s ago: executing program 4 (id=3277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newnexthop={0x54, 0x68, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x1, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x1, 0x8d}, {0x1, 0x6}, {0x1, 0x38}, {0x1, 0x5}, {0x2, 0xc}, {0x0, 0x6}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x54}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000070000000000060008000000060035000000000000000000000000610700000000000001fd6c845680"], 0x34}}, 0x0) 10.879079361s ago: executing program 4 (id=3280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x5d, 0x3, 0xd) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000240)={0x6, 0x7fffffff, 0xcaeb, 0x1000}, 0x10) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x4000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000340)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x2000}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x3, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f00000002c0)="e9f0b09a810217e5cf07005e7f5e4dcc4a68ea9be8ca65235fd96e9da75694ed6c83372a7070d8eebf0d5874719a") r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='timer_expire_entry\x00', r5}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.369380125s ago: executing program 3 (id=3331): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd6c}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xfff7, 0x4, 0x7fff, 0xee07]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x90f2977e091f524d}, 0x80) (async) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9000, 0x2}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xa, 0x80000001, 0x1c, @loopback, @dev={0xfe, 0x80, '\x00', 0x43}, 0x21, 0x8050, 0x6ea2, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {0xffe0}, {0xa, 0x5}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1c}, {0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x96e5983247161e0c}, 0x24048800) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r1, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8}, 0x881) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000580)={0x923, 0x1, 0x2}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000005c0)={r6, 0x5, 0x2, 0x5}) getpeername(r7, &(0x7f0000000600)=@hci, &(0x7f0000000680)=0x80) (async) sendmsg$nl_route(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getlink={0x30, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x700, 0x511a0}, [@IFLA_LINKMODE={0x5, 0x11, 0x10}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_emit_ethernet(0x145, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @dccp={{0x1c, 0x4, 0x3, 0x2e, 0x137, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0x8, [{@private=0xa010102, 0x56d}]}, @timestamp={0x44, 0x10, 0x25, 0x0, 0x3, [0x0, 0x4, 0x77d]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xa1, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x29}}, {@private=0xa010100, 0x101}, {@empty, 0x6}, {@dev}, {@broadcast}, {@multicast1, 0x1}]}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x6, "e36bea", 0x4, "bf56c1"}, "fb7a91fa05e3fde1adc76815ba8576d52313111e09f3d13aac285aac4999ac92e50ba9ecee1ad03ada3e90e1b095eae3b9da1b58c789ffa771289d850d9db83bc2406d51b5f1d521bcf02315587464af7ab09f694c6513035fa1f8db150be08cae06936d049e838ab6245e0dcc05e551cd9edcccbd1a5f3959d0d5a49421c974b0311f85aa7068c7c0c5ad39f9080a413f334432cb2673e109d5af42b4ffdf943e4011e022397f7177c2d2f135d0f0c944b9a1ac9efa41"}}}}}, &(0x7f0000000940)={0x1, 0x1, [0xf24, 0x508, 0x799, 0xc68]}) (async) shutdown(r2, 0x1) (async) readv(r6, &(0x7f0000001a80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/54, 0x36}, {&(0x7f00000019c0)=""/30, 0x1e}, {&(0x7f0000001a00)=""/81, 0x51}], 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0x7, 0xa}, {0xe, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c00), r0) (async) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001c40)={@remote, @empty, 0x0}, &(0x7f0000001c80)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x44, r9, 0x602, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4042080}, 0x881) r11 = socket$netlink(0x10, 0x3, 0x7) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001e00), r0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001e40)={0x0, @initdev, @remote}, &(0x7f0000001e80)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001f40)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000002d40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d00)={&(0x7f0000002100)={0xbcc, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1f0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc3f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb9}}}]}}]}, 0xbcc}, 0x1, 0x0, 0x0, 0x10048840}, 0x80c0) 3.071970312s ago: executing program 2 (id=3333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) ioctl$int_out(r0, 0x2, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) socket$l2tp(0x2, 0x2, 0x73) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbd78, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x41, &(0x7f00000020c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60430093000b3afffe800000000000000000000000000000ff02000000b7cb8c6d0d16b1c500000180009078000d01209baff4"], 0x0) 2.495001495s ago: executing program 0 (id=3334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) sendmsg$802154_dgram(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) (async) close(r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x8, 0x8d}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r12, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000140)={0x9, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {}, {}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) 2.328427077s ago: executing program 3 (id=3335): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 2.289229599s ago: executing program 1 (id=3336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="40ca72cef75d5ef3cf660c1dbe3bfee7390e3687d9", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="14005a8010000180040001000600020000280000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) 2.14727768s ago: executing program 3 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r5, 0x7, 0x70bd2b, 0x800000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000099452790400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32000000001400000011000100fe000000000000000000000a"], 0x98}}, 0x4048010) 2.095198071s ago: executing program 2 (id=3338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x200ca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x21010000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={r4, 0x6}, 0x8) 2.048112416s ago: executing program 0 (id=3339): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00v\x00\r\v\x00\x00\x00\b'], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x9c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0xc800) 1.12322531s ago: executing program 1 (id=3340): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000380)={0x3, 'veth1_to_batadv\x00', {}, 0x3}) sendmmsg$alg(r2, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000001001000001000000dc000000000000ecb7f083f57fb5381363df3d613f8f1fd260becda58e8f20b79f4b1538c5e442bd5423aae1253e74d8ac7695e16feeee210bf60800a18cd77b2ccf4a2bc8686dd1a0afbecf949fcaed790900efe9dff4213276d5bed07439dd5ba2c4fce699cfe8d118e2f74a6c39452035be4580f8c99dd61674e8c13cb9b73ffec9c48cf052d9751e9ebe8dac721146c5587a16107de980980a167052441e74c2dfed5d749fb9f9610a4d6019f5fafaf100000000"], 0x18}, 0xfc00) r4 = socket$kcm(0x21, 0x2, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000dbff9d3d0b007e329769b26a382b0c44039181467f211d75085650cce551b09c0cffc6b6dd3f6bad0c14f71c28f9a3ea6237f1ab"], 0x18}, 0xfc00) 1.064423223s ago: executing program 2 (id=3341): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x891d, &(0x7f00000001c0)={'gre0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000280)=0x84) r5 = socket(0x2b, 0x1, 0x1) connect$netlink(r5, &(0x7f0000000000)=@unspec, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x8, 0xffffffffffffffff, 0x7, 0x100, 0xfffffffffffff801, 0xd472, 0x4, 0xa5d6, 0x9, 0x5, 0xa4, 0xffff, 0xfff, 0x2, 0xa]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000400)={r4, 0x40, 0x101, 0x9, 0x1, 0x8, 0x6, 0xb, {r6, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x1000, 0x1, 0x6d7, 0x4}}, &(0x7f00000004c0)=0xb0) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) getsockopt(r0, 0x2, 0x2, &(0x7f0000000100)=""/101, &(0x7f0000000000)=0x65) 1.021588865s ago: executing program 3 (id=3342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000ffdbdf250100000000000000014100000018001700000005000000037564703a73797a3000000800"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000c1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x42030028, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f00000007c0)='M', 0x1}], 0x1) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r8, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r9, 0x7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0x100) socket$inet(0xa, 0x801, 0x84) 987.352474ms ago: executing program 0 (id=3343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000a04e21d4f80bda03a94bd1f81bc6a9909af480cbdaa13c2270fd76e0e87414a75420b67cb691efef1cba04e97548074e7c8e820130b51f80845208e5e843849272a72c350c27323482cfcaa0d27267fb4659f5ba3b25cc6c56f28a65a822e66a839a1c6ccebcb3f639d549fcff90761e0df3fd91e5efead2a03306c44dd0e975549709ad8f0c05474be44ca2826d397607dec7ba562021ef36ede1ae4ef13df608c0bc45ac164dc84c9d0600ec6ecf525f7be917f178", @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800110003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffb, 0x4}, {}, {0x1c, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x4b}]}}]}, 0x3c}}, 0x24000001) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1, 0x7, 0x18, @loopback, @local, 0x7, 0x20, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0xd0, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x60008000) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f00000011c0)={{r2}, "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"}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) sendto$inet(r11, &(0x7f00000000c0)="1261830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) 856.43542ms ago: executing program 1 (id=3344): r0 = socket(0x23, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0x5, 0x2, "0a08cf30c194"}}) 855.791082ms ago: executing program 2 (id=3345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xfffffffc}, [@migrate={0x50, 0x11, [{@in=@empty, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) unshare(0x2c060000) unshare(0x24020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'vlan1\x00', {0x8}, 0x7}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="570100001a0007007e82000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0073100000000000000002000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="ff010000000000000000000000000001000000042b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0010000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 772.511289ms ago: executing program 3 (id=3346): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000300)='[', 0x1, 0x4090, &(0x7f0000000000)={0xa, 0x0, 0x8a3, @loopback, 0xb}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="a9", 0x1}], 0x1}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000012c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 613.177569ms ago: executing program 1 (id=3347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000500)) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x8, 0x7, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@multicast1, 0x6, 0x4, 0xc}]}, 0x38}}, 0x80824) (async) socket$kcm(0x29, 0x5, 0x0) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f0000000500000008000000ff0700004c3c0000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="f1ffffffffffffff010000000000000000000000000000000000000050aaaeec7fd1d89c199b8e9b1ce6c2ea9b7902c3f9cb67cd54e501c2b3a90ceed3b4e44a88f62a44ea8dd30967c517ecb8a761c71d362960ff2888eb0e4824d412a919aa0fa27e24ef7f"], 0x50) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 516.107971ms ago: executing program 2 (id=3348): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000200)='nfc\x00', 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="920000000000000061117c000000000095785167b67a06d2"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a00001000028009000c"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}}, 0x80) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x44000820}, 0xa8c4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x40090) r10 = socket(0x22, 0x2, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r10, 0x8905, 0x0) r11 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg(r11, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000000340)="790a8e027549ef861c2fff96ef84980724143aa002958e6ac3570dcd10be0b3ad94cecc3b22f0e21263f272d5c9d0d43eb62b518586c3112644e1e96e98e7f472c20ba55ed530d0b36e3f5f01b578603c3441cbb1ea0d568ec76f44cebe000e1b1946f05254a377e859d566906e0e5e936cc8e2ae5987468484054cfb372c589c7b5ada906dde72d940d66dd4bf52ac505c89844c0855cd58b62367c14e3a6d5d75bdbe2cf730916ffab13152ca4cd8b464a21753f618f832a6618fbdea3909fa66f8cce55bdda222d3d276db720ecc562035edd68b09dc7a44b43d0999f5128c6cdb85959296232abbdf336b10856ba40b8f7986a19", 0xf6}], 0x1}}], 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001000)={0x0, 'veth0_vlan\x00', {0x2}, 0x7}) 423.237115ms ago: executing program 1 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000680009720300000000010000000000040002000000000000"], 0xffffffffffffff72}, 0x1, 0x0, 0x0, 0xc4}, 0x20008090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x4c010) 319.764222ms ago: executing program 0 (id=3350): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x1, 0x0, 0x2, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x1, 0x0, 0x2, 0x2}}, 0x26) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) (async) 224.382001ms ago: executing program 1 (id=3351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, 0x800, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0xfff, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0xfff, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 221.078646ms ago: executing program 3 (id=3352): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x220, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc630}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1446}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbe58}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd8e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x890}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x40040) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x40, 0x1, 0x747}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x9}}, 0x8, 0x6, 0xc, 0x80000001, 0x2, 0x2, 0x63}, &(0x7f0000000540)=0x9c) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000002600000000000000180000000000000000000000000000009500000000000000a403000000001f5a49d000628e00009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000003c0)) 177.343169ms ago: executing program 0 (id=3353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000009d"], 0x18}, 0xfc00) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 161.350911ms ago: executing program 2 (id=3354): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[@timestamping={{0x14, 0x1, 0x25, 0x8d}}], 0x18}}], 0x1, 0x40081) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) 0s ago: executing program 0 (id=3355): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x64, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x17c196a6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'vxcan0\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040801}, 0x42) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x15, 0xb, 0x0, 0x35, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0xf, 0x9, 0x368, 0x0, "91ff9cd973090f238f37821fe0b404178125c3f547f3e59d9e6dff438f4c988efffb7b7925afdd8cbdc4651f60e52749f385bd7cc1f023bba0705f4a49f6f4145ada9f2db9dab89f5447af66d109a1d659389d0bf15e861c8a9ed5af7c892e6252463c57c75619b1e37980c586"}, @sadb_key={0x20, 0x8, 0x7b8, 0x0, "b2ef1c1056c0671ce36dbb7878ef39dc2ce3dc7dd645e6a2a01a9c36f06e3e055dd710e3c983cb26814f325870168a33c9043c7b42ae7e911acf87599ae9c2cebbea0c7720779e167486f893aa033e8ae8e671491775228cd5ea241d92f22658e1c3daae7a003de2e4463db2a73f3497f77e55a939dba833093ee36be7ed944301f366bad4f955c0dd4866ae8a2b869117fa7bbc9f9fb59f18b4bfc84520204b15f0bf14e4e24d1eb7a0db716d419477ee5a1162c2691e4ee6e979c3f7a2555e87ac43befbdc16946ae435265a344005e951bdb58e6d2883ea2c8b10c958dbe34e75c47d46dce88ec0f4883aaa1ea4de2d25d8bccd79c7"}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x1a8}}, 0x20044004) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbb, &(0x7f0000000600)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000580)={0x0, 0x7f}) kernel console output (not intermixed with test programs): ticast mode [ 248.626810][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'. [ 248.733507][T11287] bridge5: port 1(veth9) entered blocking state [ 248.740991][T11287] bridge5: port 1(veth9) entered disabled state [ 248.747607][T11287] veth9: entered allmulticast mode [ 248.759939][T11287] veth9: entered promiscuous mode [ 248.761510][T11239] infiniband syz0: set active [ 248.769960][T11239] infiniband syz0: added lo [ 248.776108][T11239] syz0: rxe_create_cq: returned err = -12 [ 248.782332][T11239] infiniband syz0: Couldn't create ib_mad CQ [ 248.787604][T11281] vlan0: entered allmulticast mode [ 248.789597][T11239] infiniband syz0: Couldn't open port 1 [ 248.798924][T11281] veth0_to_bond: entered allmulticast mode [ 248.805239][T11281] bridge5: port 2(vlan0) entered blocking state [ 248.817285][T11281] bridge5: port 2(vlan0) entered disabled state [ 248.821132][T11239] RDS/IB: syz0: added [ 248.828204][T11239] smc: adding ib device syz0 with port count 1 [ 248.830811][T11281] vlan0: entered promiscuous mode [ 248.835017][T11239] smc: ib device syz0 port 1 has pnetid [ 248.844416][T11281] veth0_to_bond: entered promiscuous mode [ 248.890510][T11293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.918332][ T24] lo speed is unknown, defaulting to 1000 [ 249.036601][ T5942] lo speed is unknown, defaulting to 1000 [ 249.044954][T11239] lo speed is unknown, defaulting to 1000 [ 249.104307][T11301] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1511'. [ 249.448382][T11323] validate_nla: 3 callbacks suppressed [ 249.448400][T11323] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 249.466594][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 249.531073][ T7178] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.540838][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 249.550868][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1519'. [ 249.574144][ T7178] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.591335][ T7178] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.642494][T11330] tipc: Enabled bearer , priority 0 [ 249.651260][ T7178] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.668782][T11330] syzkaller0: entered promiscuous mode [ 249.676081][T11239] lo speed is unknown, defaulting to 1000 [ 249.683681][T11330] syzkaller0: entered allmulticast mode [ 249.755793][T11337] tipc: Resetting bearer [ 249.809866][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.854176][T11339] ip6tnl0: Caught tx_queue_len zero misconfig [ 249.898192][T11343] nbd: nbd0 already in use [ 249.908096][T11329] tipc: Resetting bearer [ 249.915233][T11344] block nbd0: NBD_DISCONNECT [ 249.937837][T11344] block nbd0: Send disconnect failed -32 [ 249.948055][T11344] block nbd0: shutting down sockets [ 249.955005][T11329] tipc: Disabling bearer [ 250.146499][T11239] lo speed is unknown, defaulting to 1000 [ 250.550690][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 250.573476][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'. [ 250.599192][T11239] lo speed is unknown, defaulting to 1000 [ 250.739739][T11378] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 251.159795][T11239] lo speed is unknown, defaulting to 1000 [ 251.167009][T11396] syzkaller1: entered promiscuous mode [ 251.204744][T11396] syzkaller1: entered allmulticast mode [ 251.337052][T11409] netlink: 'syz.0.1541': attribute type 83 has an invalid length. [ 251.489934][T11411] wg1 speed is unknown, defaulting to 1000 [ 251.731874][T11432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.761258][T11239] lo speed is unknown, defaulting to 1000 [ 251.962023][T11447] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 252.049721][T11447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.340892][T11458] bridge0: port 3(batadv0) entered blocking state [ 252.347512][T11458] bridge0: port 3(batadv0) entered forwarding state [ 252.355060][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.832284][T11485] netlink: 'syz.4.1562': attribute type 25 has an invalid length. [ 252.844148][T11485] netlink: 'syz.4.1562': attribute type 8 has an invalid length. [ 253.253621][T11507] netlink: 'syz.3.1570': attribute type 21 has an invalid length. [ 253.266343][T11507] __nla_validate_parse: 41 callbacks suppressed [ 253.266363][T11507] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1570'. [ 253.312872][T11507] netlink: 'syz.3.1570': attribute type 6 has an invalid length. [ 253.433811][T11512] tipc: Enabling of bearer rejected, failed to enable media [ 253.561594][T11521] syzkaller1: entered promiscuous mode [ 253.567111][T11521] syzkaller1: entered allmulticast mode [ 253.606649][T11525] sctp: [Deprecated]: syz.3.1574 (pid 11525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.606649][T11525] Use struct sctp_sack_info instead [ 253.640669][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 253.655248][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 253.815256][T11537] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 253.826432][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 253.847760][T11536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1577'. [ 253.968058][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 253.977196][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 253.991166][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1581'. [ 254.037710][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 254.063911][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1581'. [ 254.235021][T11568] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 254.436379][T11587] netlink: 'syz.4.1590': attribute type 58 has an invalid length. [ 254.817889][T11599] tipc: Enabled bearer , priority 0 [ 254.839478][T11599] syzkaller0: entered promiscuous mode [ 254.846872][T11599] syzkaller0: entered allmulticast mode [ 254.859030][T11607] netlink: 'syz.2.1601': attribute type 6 has an invalid length. [ 254.881423][T11599] tipc: Resetting bearer [ 254.908277][T11597] tipc: Resetting bearer [ 254.950340][T11597] tipc: Disabling bearer [ 255.098710][T11621] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.133360][T11621] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.228199][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.241197][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.277890][T11641] tipc: Enabled bearer , priority 0 [ 255.342449][T11637] syzkaller0: entered promiscuous mode [ 255.348041][T11637] syzkaller0: entered allmulticast mode [ 255.356682][T11637] tipc: Resetting bearer [ 255.371638][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.385818][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.421340][T11636] tipc: Resetting bearer [ 256.403167][ T24] tipc: Node number set to 2801113611 [ 257.199314][T11636] tipc: Disabling bearer [ 257.212665][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.222743][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.275097][T11650] wg1 speed is unknown, defaulting to 1000 [ 257.306232][T11650] lo speed is unknown, defaulting to 1000 [ 257.341153][T11670] netlink: 'syz.1.1620': attribute type 15 has an invalid length. [ 257.439993][ T7177] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.448217][ T7177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.486429][T11673] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.497617][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.519106][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.576957][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.609971][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.641540][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.692400][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.801407][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.832077][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.967377][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.984865][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.155598][T11715] tipc: Enabled bearer , priority 0 [ 258.223780][T11714] tipc: Disabling bearer [ 258.650534][T11743] __nla_validate_parse: 17 callbacks suppressed [ 258.650555][T11743] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1643'. [ 258.664425][T11744] netlink: 'syz.2.1642': attribute type 83 has an invalid length. [ 259.002038][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 259.091745][T11766] netlink: 'syz.1.1651': attribute type 4 has an invalid length. [ 259.116675][T11766] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1651'. [ 259.172085][T11768] netlink: 'syz.3.1652': attribute type 10 has an invalid length. [ 259.180261][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.187993][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.237561][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 259.260238][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 259.452268][T11784] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1657'. [ 259.461427][T11784] netlink: 'syz.3.1657': attribute type 2 has an invalid length. [ 259.483846][T11784] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 259.534386][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 259.561571][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 259.583163][T11794] netlink: 'syz.1.1658': attribute type 3 has an invalid length. [ 259.813994][T11806] xt_l2tp: invalid flags combination: 0 [ 259.962496][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1669'. [ 260.076901][T11830] netem: change failed [ 260.216049][T11838] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 260.240182][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 260.501551][T11860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.256944][T11901] wg1 speed is unknown, defaulting to 1000 [ 261.293375][T11901] lo speed is unknown, defaulting to 1000 [ 261.648151][T11934] netlink: 'syz.4.1705': attribute type 2 has an invalid length. [ 261.656228][T11934] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 262.370642][T11967] netlink: 'syz.1.1713': attribute type 12 has an invalid length. [ 262.390383][T11967] netlink: 'syz.1.1713': attribute type 6 has an invalid length. [ 262.412676][T11968] syzkaller1: entered promiscuous mode [ 262.423761][T11968] syzkaller1: entered allmulticast mode [ 262.563427][T11980] tipc: Enabled bearer , priority 0 [ 262.592303][T11978] syzkaller0: entered promiscuous mode [ 262.613396][T11978] syzkaller0: entered allmulticast mode [ 262.787905][T11977] tipc: Resetting bearer [ 262.877443][T11977] tipc: Disabling bearer [ 263.714646][T12009] veth5: entered allmulticast mode [ 263.954025][T12028] __nla_validate_parse: 18 callbacks suppressed [ 263.954044][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 264.045365][T12028] bridge0: port 1(batadv0) entered disabled state [ 264.179226][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 264.300454][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 264.321833][T12049] bond0: entered promiscuous mode [ 264.327112][T12049] gretap1: entered promiscuous mode [ 264.347533][T12049] bond0: left promiscuous mode [ 264.354134][T12049] gretap1: left promiscuous mode [ 264.750305][T12090] IPVS: Unknown mcast interface: veth0_vlan [ 264.833370][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 264.962549][T12107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1751'. [ 265.076366][T12113] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 265.124312][T12113] bridge0: port 3(batadv0) entered disabled state [ 265.159007][T12113] batadv0: left allmulticast mode [ 265.176038][T12122] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 265.188532][T12113] batadv0: left promiscuous mode [ 265.202495][T12113] bridge0: port 3(batadv0) entered disabled state [ 265.227644][T12122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1753'. [ 265.271225][T12113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.292498][T12113] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.344095][T12122] batadv0: entered promiscuous mode [ 265.357373][T12122] batadv0: entered allmulticast mode [ 265.394016][T12122] bond0: (slave batadv0): Releasing backup interface [ 265.435030][T12122] bridge0: port 3(batadv0) entered blocking state [ 265.462979][T12122] bridge0: port 3(batadv0) entered disabled state [ 265.639132][T12143] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 265.677550][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1761'. [ 265.847818][ T1151] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 265.857539][ T1151] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 265.867234][T12162] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1767'. [ 265.884991][T12164] netlink: 'syz.3.1769': attribute type 83 has an invalid length. [ 265.896164][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 265.935617][T12170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1771'. [ 266.815503][T12216] openvswitch: netlink: EtherType 0 is less than min 600 [ 266.993730][ T30] audit: type=1800 audit(1757724311.963:3): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1782" name="memory.events" dev="tmpfs" ino=1916 res=0 errno=0 [ 267.228204][T12240] smc: removing ib device syz0 [ 267.875172][T12269] sctp: [Deprecated]: syz.3.1801 (pid 12269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.875172][T12269] Use struct sctp_sack_info instead [ 268.142674][T12285] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 268.251210][T12296] netlink: 'syz.3.1806': attribute type 12 has an invalid length. [ 268.556402][T12305] openvswitch: netlink: Key type 85 is out of range max 32 [ 269.898048][T12339] __nla_validate_parse: 17 callbacks suppressed [ 269.898070][T12339] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1821'. [ 269.969009][T12339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1821'. [ 270.065667][T12344] lo: Caught tx_queue_len zero misconfig [ 270.071527][T12344] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 270.186770][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1828'. [ 270.246225][T12366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1830'. [ 270.478993][T12351] bridge0: port 2(dummy0) entered disabled state [ 270.965127][ T1138] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.008547][ T1138] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.034786][ T1138] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.050852][ T1138] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.122034][ T1138] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.165486][ T1138] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.184146][ T1138] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.208189][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 271.215487][ T1138] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.420174][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1837'. [ 271.635692][T12414] netlink: 'syz.1.1842': attribute type 10 has an invalid length. [ 271.652346][T12414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1842'. [ 271.775496][T12422] veth0: entered promiscuous mode [ 271.788081][T12419] veth0: left promiscuous mode [ 271.914284][T12428] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 272.036648][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1847'. [ 272.105924][T12432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1848'. [ 272.193257][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 272.208993][T12432] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 272.489925][T12440] wg1: entered promiscuous mode [ 272.508494][T12440] wg1: entered allmulticast mode [ 273.195900][T12464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 273.209965][T12464] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 273.217927][T12464] gretap2: entered promiscuous mode [ 273.223537][T12464] gretap2: entered allmulticast mode [ 274.168023][T12531] netlink: 'syz.2.1880': attribute type 23 has an invalid length. [ 274.183855][T12523] wg1 speed is unknown, defaulting to 1000 [ 274.620682][T12550] netlink: 'syz.0.1886': attribute type 21 has an invalid length. [ 275.091761][T12579] __nla_validate_parse: 17 callbacks suppressed [ 275.091778][T12579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 275.404296][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 275.498720][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 275.505184][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 275.511751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.519602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.527542][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.535396][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.543342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.551192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.559143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.566973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.574926][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.582785][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.590767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.598615][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.606994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 275.614872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 275.690796][T12605] tipc: Enabling of bearer rejected, failed to enable media [ 275.986192][T12621] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1898'. [ 276.013253][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 276.057751][T12621] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1898'. [ 276.113192][T12621] netlink: 'syz.0.1898': attribute type 3 has an invalid length. [ 276.149658][T12621] netlink: 'syz.0.1898': attribute type 2 has an invalid length. [ 276.212949][T12621] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1898'. [ 276.310585][T12636] netlink: 'syz.1.1902': attribute type 83 has an invalid length. [ 276.604163][T12648] wg1 speed is unknown, defaulting to 1000 [ 276.671940][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 277.636800][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1925'. [ 277.662235][T12716] dvmrp1: entered allmulticast mode [ 277.726794][T12719] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1926'. [ 279.176659][T12761] netlink: 'syz.0.1939': attribute type 33 has an invalid length. [ 279.184907][T12761] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1939'. [ 279.463610][T12775] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 279.492915][T12775] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 279.507299][T12775] batadv0: entered promiscuous mode [ 279.513125][T12775] batadv0: entered allmulticast mode [ 279.519410][T12775] bridge0: port 3(batadv0) entered blocking state [ 279.526203][T12775] bridge0: port 3(batadv0) entered disabled state [ 279.748625][ T1138] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 279.757896][ T1138] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 280.026353][T12810] dvmrp0: entered allmulticast mode [ 280.077177][T12814] bond0: (slave rose0): Error: Device can not be enslaved while up [ 280.085675][T12810] dvmrp0: left allmulticast mode [ 280.427375][T12843] __nla_validate_parse: 5 callbacks suppressed [ 280.427393][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1961'. [ 280.614668][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 281.023769][T12872] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1972'. [ 281.038131][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'. [ 281.141029][T12877] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 281.172043][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 281.241000][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 281.433268][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 281.477409][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 281.512481][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 281.563466][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 281.784535][T12906] Bluetooth: MGMT ver 1.23 [ 281.988068][ T1151] tipc: Subscription rejected, illegal request [ 282.215059][T12923] ipvlan3: entered promiscuous mode [ 282.514808][T12942] dummy0: entered promiscuous mode [ 282.523332][T12942] batadv_slave_1: entered promiscuous mode [ 282.666590][T12953] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 282.931242][T12968] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 283.000898][T12973] sctp: [Deprecated]: syz.4.2006 (pid 12973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.000898][T12973] Use struct sctp_sack_info instead [ 283.094372][T12984] netlink: 'syz.2.2005': attribute type 32 has an invalid length. [ 283.104883][T12984] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 283.706392][T13021] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 283.953868][T13035] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 284.455703][T13064] gretap2: entered promiscuous mode [ 284.466452][T13064] gretap2: entered allmulticast mode [ 284.976707][T13107] batadv1: entered allmulticast mode [ 285.512214][T13141] ipvlan0: entered promiscuous mode [ 285.539917][T13141] ipvlan0: entered allmulticast mode [ 285.545270][T13141] veth0_vlan: entered allmulticast mode [ 285.817026][T13156] __nla_validate_parse: 86 callbacks suppressed [ 285.817063][T13156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2057'. [ 286.062404][T13173] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 286.091829][T13177] tipc: Enabled bearer , priority 0 [ 286.164663][T13179] netlink: 'syz.1.2062': attribute type 196 has an invalid length. [ 286.180716][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2061'. [ 286.304838][T13183] netlink: 'syz.4.2064': attribute type 3 has an invalid length. [ 286.405543][T13176] tipc: Disabling bearer [ 286.527421][T13199] sctp: [Deprecated]: syz.0.2066 (pid 13199) Use of int in max_burst socket option. [ 286.527421][T13199] Use struct sctp_assoc_value instead [ 286.724417][T13209] veth1_to_bond: entered allmulticast mode [ 286.844341][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2072'. [ 286.875973][T13221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.977970][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2073'. [ 287.026224][T13208] veth1_to_bond: left allmulticast mode [ 287.097328][T13234] netlink: 'syz.1.2075': attribute type 9 has an invalid length. [ 287.136783][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2077'. [ 287.356995][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 287.816213][T13291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2090'. [ 287.983596][T13299] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 288.110828][T13302] syzkaller1: entered promiscuous mode [ 288.111845][T13304] IPVS: sh: FWM 3 0x00000003 - no destination available [ 288.117301][T13302] syzkaller1: entered allmulticast mode [ 288.154976][T13302] netlink: 'syz.1.2094': attribute type 33 has an invalid length. [ 288.163014][T13302] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2094'. [ 288.277108][T13311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.289949][T13310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2096'. [ 288.300019][T13310] 8021q: VLANs not supported on sit0 [ 288.307291][T13310] netlink: 'syz.4.2096': attribute type 39 has an invalid length. [ 288.325969][T13311] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 288.402979][T13312] geneve2: entered promiscuous mode [ 288.418605][T13312] geneve2: entered allmulticast mode [ 288.432872][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2098'. [ 288.453561][ T1151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.471411][ T1151] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.505456][ T1151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.534516][ T1151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.171153][T13363] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 289.238514][T13363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.247687][T13363] bond7: (slave bond8): making interface the new active one [ 289.255954][T13363] bond7: (slave bond8): Enslaving as an active interface with an up link [ 290.137825][T13417] wg1 speed is unknown, defaulting to 1000 [ 290.375893][T13427] bond0: Error: Cannot enslave bond to itself. [ 290.583504][T13446] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 290.608912][T13443] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 290.793323][T13455] netlink: 'syz.2.2137': attribute type 3 has an invalid length. [ 290.832512][T13455] __nla_validate_parse: 13 callbacks suppressed [ 290.832533][T13455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2137'. [ 290.859410][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 290.880836][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 290.910781][T13455] 8021q: VLANs not supported on ip_vti0 [ 290.934625][T13417] netlink: 'syz.3.2125': attribute type 13 has an invalid length. [ 291.011481][T13417] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.043861][T13473] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.2141'. [ 291.072875][T13473] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 291.077102][T13475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2142'. [ 291.452260][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 291.469646][T13489] nbd0: detected capacity change from 0 to 127 [ 291.485961][ T5872] block nbd0: Receive control failed (result -32) [ 291.637351][T13500] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2149'. [ 291.673606][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2152'. [ 291.798703][T13511] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2153'. [ 291.825543][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 292.033076][T13525] validate_nla: 1 callbacks suppressed [ 292.033095][T13525] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 292.110752][T13525] netlink: 'syz.4.2157': attribute type 2 has an invalid length. [ 292.555460][T13559] tipc: Enabled bearer , priority 0 [ 292.606713][T13568] syzkaller0: entered promiscuous mode [ 292.638100][T13568] syzkaller0: entered allmulticast mode [ 292.672016][T13575] netlink: 'syz.3.2171': attribute type 2 has an invalid length. [ 292.800531][T13568] tipc: Resetting bearer [ 292.890469][T13558] tipc: Resetting bearer [ 292.979292][T13558] tipc: Disabling bearer [ 293.015016][T13593] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:0 [ 293.184115][T13598] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.399706][T13617] syzkaller1: entered promiscuous mode [ 293.405849][T13617] syzkaller1: entered allmulticast mode [ 293.427834][T13620] syz.4.2183: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 293.467755][T13620] CPU: 1 UID: 0 PID: 13620 Comm: syz.4.2183 Not tainted syzkaller #0 PREEMPT(full) [ 293.467783][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.467808][T13620] Call Trace: [ 293.467816][T13620] [ 293.467824][T13620] dump_stack_lvl+0x189/0x250 [ 293.467853][T13620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.467877][T13620] ? __pfx__printk+0x10/0x10 [ 293.467905][T13620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.467928][T13620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.467953][T13620] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 293.467980][T13620] warn_alloc+0x214/0x310 [ 293.468014][T13620] ? stack_depot_save_flags+0x40/0x860 [ 293.468047][T13620] ? __pfx_warn_alloc+0x10/0x10 [ 293.468078][T13620] ? kasan_save_track+0x4f/0x80 [ 293.468103][T13620] ? xskq_create+0x56/0x170 [ 293.468120][T13620] ? xsk_init_queue+0xb0/0x110 [ 293.468148][T13620] ? xsk_setsockopt+0x4dc/0x8d0 [ 293.468173][T13620] ? do_sock_setsockopt+0x179/0x1b0 [ 293.468195][T13620] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 293.468217][T13620] ? do_syscall_64+0xfa/0x3b0 [ 293.468235][T13620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.468262][T13620] __vmalloc_node_range_noprof+0x125/0x12f0 [ 293.468324][T13620] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 293.468359][T13620] ? __kasan_kmalloc+0x93/0xb0 [ 293.468389][T13620] vmalloc_user_noprof+0xad/0xf0 [ 293.468414][T13620] ? xskq_create+0xbf/0x170 [ 293.468431][T13620] xskq_create+0xbf/0x170 [ 293.468450][T13620] xsk_init_queue+0xb0/0x110 [ 293.468489][T13620] xsk_setsockopt+0x4dc/0x8d0 [ 293.468521][T13620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 293.468550][T13620] ? __pfx_aa_sk_perm+0x10/0x10 [ 293.468583][T13620] ? aa_sock_opt_perm+0xff/0x1b0 [ 293.468607][T13620] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 293.468628][T13620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 293.468656][T13620] do_sock_setsockopt+0x179/0x1b0 [ 293.468684][T13620] __x64_sys_setsockopt+0x13f/0x1b0 [ 293.468706][T13620] do_syscall_64+0xfa/0x3b0 [ 293.468722][T13620] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.468738][T13620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.468756][T13620] ? clear_bhb_loop+0x60/0xb0 [ 293.468779][T13620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.468798][T13620] RIP: 0033:0x7f57d5d8eba9 [ 293.468817][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.468832][T13620] RSP: 002b:00007f57d6be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.468850][T13620] RAX: ffffffffffffffda RBX: 00007f57d5fd5fa0 RCX: 00007f57d5d8eba9 [ 293.468864][T13620] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 293.468875][T13620] RBP: 00007f57d5e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 293.468887][T13620] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.468898][T13620] R13: 00007f57d5fd6038 R14: 00007f57d5fd5fa0 R15: 00007fff29bf5918 [ 293.468928][T13620] [ 293.483315][T13622] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001 [ 293.536533][T13620] Mem-Info: [ 293.791264][T13620] active_anon:3832 inactive_anon:0 isolated_anon:0 [ 293.791264][T13620] active_file:2696 inactive_file:39929 isolated_file:0 [ 293.791264][T13620] unevictable:768 dirty:84 writeback:0 [ 293.791264][T13620] slab_reclaimable:12670 slab_unreclaimable:103909 [ 293.791264][T13620] mapped:28898 shmem:1364 pagetables:1006 [ 293.791264][T13620] sec_pagetables:0 bounce:0 [ 293.791264][T13620] kernel_misc_reclaimable:0 [ 293.791264][T13620] free:1323830 free_pcp:15211 free_cma:0 [ 293.856265][T13620] Node 0 active_anon:15228kB inactive_anon:0kB active_file:10784kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115592kB dirty:336kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:3588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.900455][T13620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.933422][T13620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.963149][T13620] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 293.969058][T13620] Node 0 DMA32 free:1393676kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15280kB inactive_anon:0kB active_file:10784kB inactive_file:157936kB unevictable:1536kB writepending:336kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:44252kB local_pcp:25640kB free_cma:0kB [ 294.004542][T13620] lowmem_reserve[]: 0 0 1 1 1 [ 294.010322][T13620] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 294.053863][T13620] lowmem_reserve[]: 0 0 0 0 0 [ 294.063166][T13620] Node 1 Normal free:3886472kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17964kB local_pcp:11116kB free_cma:0kB [ 294.099527][T13620] lowmem_reserve[]: 0 0 0 0 0 [ 294.104303][T13620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.145388][T13620] Node 0 DMA32: 467*4kB (UME) 59*8kB (UME) 44*16kB (UM) 551*32kB (UME) 102*64kB (UME) 30*128kB (UME) 12*256kB (UM) 7*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 330*4096kB (M) = 1397572kB [ 294.165130][T13620] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 294.178634][T13620] Node 1 Normal: 178*4kB (UE) 48*8kB (UME) 44*16kB (UME) 64*32kB (UME) 26*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 946*4096kB (ME) = 3886472kB [ 294.218872][T13620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.242241][T13620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.255380][T13620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.265826][T13620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.294937][T13620] 43983 total pagecache pages [ 294.329515][T13620] 0 pages in swap cache [ 294.336057][T13620] Free swap = 124996kB [ 294.341359][T13620] Total swap = 124996kB [ 294.345727][T13620] 2097051 pages RAM [ 294.349772][T13620] 0 pages HighMem/MovableOnly [ 294.362872][T13620] 425670 pages reserved [ 294.367185][T13620] 0 pages cma reserved [ 295.298392][T13692] IPVS: Scheduler module ip_vs_sip not found [ 295.640637][T13708] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 295.981058][T13736] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 295.994046][T13736] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 296.032223][T13740] __nla_validate_parse: 8 callbacks suppressed [ 296.032243][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2220'. [ 296.060844][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2220'. [ 296.070268][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2220'. [ 296.079519][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2220'. [ 296.100530][T13744] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 296.147566][T13749] Bluetooth: MGMT ver 1.23 [ 296.167163][T13750] tipc: Enabled bearer , priority 0 [ 296.176081][T13744] syzkaller0: entered promiscuous mode [ 296.182295][T13744] syzkaller0: entered allmulticast mode [ 296.195270][T13747] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.267802][T13744] tipc: Resetting bearer [ 296.402447][T13744] tipc: Resetting bearer [ 296.470173][T13744] tipc: Disabling bearer [ 297.038372][T13815] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2238'. [ 297.111925][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'. [ 297.283343][T13833] netlink: 'syz.2.2243': attribute type 11 has an invalid length. [ 297.292416][T13833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2243'. [ 297.479258][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 297.617336][T13855] netlink: 'syz.4.2250': attribute type 15 has an invalid length. [ 297.634013][T13855] netlink: 'syz.4.2250': attribute type 1 has an invalid length. [ 297.640472][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 297.691944][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 297.806263][T13872] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 297.839844][T13872] block nbd1: not configured, cannot reconfigure [ 298.385612][T13899] team0 (unregistering): Port device team_slave_0 removed [ 298.407700][T13899] team0 (unregistering): Port device team_slave_1 removed [ 298.435612][T13900] bond0: Caught tx_queue_len zero misconfig [ 298.529650][T13913] netlink: 'syz.1.2265': attribute type 28 has an invalid length. [ 298.556710][T13913] netlink: 'syz.1.2265': attribute type 3 has an invalid length. [ 298.874351][T13943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.927051][T13945] netlink: 'syz.3.2274': attribute type 12 has an invalid length. [ 298.975336][T13949] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 299.072631][T13949] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.150047][T13952] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.157534][T13952] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.175448][T13952] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 299.210679][T13956] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 300.022952][T14020] wg1 speed is unknown, defaulting to 1000 [ 300.094286][T14014] wg1 speed is unknown, defaulting to 1000 [ 300.426444][T14034] vlan4: entered allmulticast mode [ 300.436463][T14034] veth0_to_bond: entered allmulticast mode [ 300.772300][T14048] netlink: 'syz.3.2304': attribute type 21 has an invalid length. [ 300.820305][T14050] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 301.086454][T14066] __nla_validate_parse: 12 callbacks suppressed [ 301.086474][T14066] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2312'. [ 301.148313][T14066] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 301.170425][T14066] bond0: (slave wlan1): Opening slave failed [ 301.353823][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 301.552247][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2322'. [ 301.571940][T14103] bond9: (slave gretap3): making interface the new active one [ 301.583538][T14103] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 302.023772][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2333'. [ 302.103711][T14144] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.2334'. [ 302.274937][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 302.293931][T14156] openvswitch: netlink: Actions may not be safe on all matching packets [ 302.530923][T14176] syzkaller0: entered allmulticast mode [ 302.693009][T14190] validate_nla: 3 callbacks suppressed [ 302.693030][T14190] netlink: 'syz.3.2349': attribute type 83 has an invalid length. [ 302.728227][T14190] tipc: Enabled bearer , priority 0 [ 302.777357][T14196] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 302.783405][T14194] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2351'. [ 302.796759][T14194] netlink: 'syz.0.2351': attribute type 12 has an invalid length. [ 302.809459][T14194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2351'. [ 302.835418][T14196] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2352'. [ 302.997300][T14186] tipc: Disabling bearer [ 303.034560][T14207] netlink: 'syz.0.2356': attribute type 11 has an invalid length. [ 303.051824][T14207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2356'. [ 303.393190][T14229] openvswitch: netlink: Message has 4 unknown bytes. [ 303.419844][T14229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.487159][T14234] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 303.568875][T14235] tipc: Enabled bearer , priority 0 [ 303.591886][T14235] syzkaller0: entered promiscuous mode [ 303.597400][T14235] syzkaller0: entered allmulticast mode [ 303.708781][T14244] tipc: Resetting bearer [ 303.731143][T14233] tipc: Resetting bearer [ 303.787227][T14233] tipc: Disabling bearer [ 303.839079][T14255] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 303.853097][ T5875] IPVS: starting estimator thread 0... [ 303.955556][T14256] IPVS: using max 28 ests per chain, 67200 per kthread [ 304.040785][T14267] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.142011][T14275] netlink: 'syz.0.2377': attribute type 8 has an invalid length. [ 304.626896][T14309] openvswitch: netlink: IPv4 tun info is not correct [ 304.904431][T14323] wg1 speed is unknown, defaulting to 1000 [ 304.974291][T14327] pim6reg527: entered allmulticast mode [ 305.063956][T14332] tipc: Enabled bearer , priority 0 [ 305.086872][T14330] tipc: Disabling bearer [ 305.166121][T14345] tunl0: entered promiscuous mode [ 305.176576][T14345] netlink: 'syz.3.2398': attribute type 3 has an invalid length. [ 305.408127][T14361] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.143991][T14412] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 306.167145][T14412] nbd: error processing sock list [ 306.182377][T14412] block nbd1: shutting down sockets [ 306.195163][T14409] syzkaller0: entered promiscuous mode [ 306.205734][T14409] syzkaller0: entered allmulticast mode [ 306.444492][T14442] __nla_validate_parse: 18 callbacks suppressed [ 306.444513][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 308.389891][T14452] netlink: 'syz.1.2431': attribute type 24 has an invalid length. [ 308.462315][T14454] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 308.469734][T14460] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2435'. [ 308.826826][T14481] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 308.851038][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 308.976349][T14494] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2446'. [ 309.062378][T14506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2446'. [ 309.097078][T14505] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 309.112977][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 309.236415][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'. [ 309.238867][T14512] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2452'. [ 309.287328][T14519] netlink: 'syz.2.2454': attribute type 12 has an invalid length. [ 309.341897][T14519] netlink: 'syz.2.2454': attribute type 10 has an invalid length. [ 309.364261][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 309.396379][T14519] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 309.445549][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 310.204375][T14596] bond0: entered promiscuous mode [ 310.214828][T14596] bridge_slave_1: entered promiscuous mode [ 310.534698][T14610] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 311.121892][T14633] wg1 speed is unknown, defaulting to 1000 [ 311.130547][ T5872] Bluetooth: hci0: command tx timeout [ 311.210809][T14650] netlink: 'syz.0.2486': attribute type 25 has an invalid length. [ 311.336001][T14656] netlink: 'syz.3.2489': attribute type 27 has an invalid length. [ 311.435122][T14663] bridge0: port 1(syz_tun) entered blocking state [ 311.452297][T14663] bridge0: port 1(syz_tun) entered disabled state [ 311.483379][T14663] syz_tun: entered allmulticast mode [ 311.500016][T14663] syz_tun: entered promiscuous mode [ 311.510850][T14663] bridge0: port 1(syz_tun) entered blocking state [ 311.517729][T14663] bridge0: port 1(syz_tun) entered forwarding state [ 311.657860][T14671] __nla_validate_parse: 11 callbacks suppressed [ 311.657877][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 311.756963][T14680] wg1 speed is unknown, defaulting to 1000 [ 311.865775][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 311.996075][T14695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.003809][T14695] IPv6: NLM_F_CREATE should be set when creating new route [ 312.011119][T14695] IPv6: NLM_F_CREATE should be set when creating new route [ 312.018353][T14695] IPv6: NLM_F_CREATE should be set when creating new route [ 312.047082][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 312.059241][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 312.073283][T14712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.090014][T14710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2501'. [ 312.370993][T14729] openvswitch: netlink: Flow actions attr not present in new flow. [ 312.413111][T14735] netlink: 'syz.3.2510': attribute type 32 has an invalid length. [ 312.428014][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 312.513532][T14735] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 312.651513][T14749] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2516'. [ 312.693622][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 312.694154][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 312.736683][T14755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2517'. [ 312.787955][T14755] geneve2: entered promiscuous mode [ 312.798332][T14755] geneve2: entered allmulticast mode [ 312.823001][ T73] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.864505][ T73] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.874209][ T73] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.892039][ T73] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.941410][T14772] hsr0 speed is unknown, defaulting to 1000 [ 312.947563][T14772] hsr0 speed is unknown, defaulting to 1000 [ 312.955804][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.000101][T14772] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 313.094542][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.103700][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.119086][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.129464][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.137651][T14772] hsr0 speed is unknown, defaulting to 1000 [ 313.398871][T14804] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 313.465057][T14808] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 313.765251][T14833] netlink: 'syz.0.2539': attribute type 16 has an invalid length. [ 313.778039][T14831] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 313.793633][T14833] netlink: 'syz.0.2539': attribute type 17 has an invalid length. [ 313.803598][T14834] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 313.984777][T14833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.047321][T14830] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.127971][T14843] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.167954][T14857] netlink: 'syz.3.2544': attribute type 1 has an invalid length. [ 314.185446][T14856] xfrm1: entered promiscuous mode [ 314.191113][T14856] xfrm1: entered allmulticast mode [ 314.222066][T14852] team1: entered promiscuous mode [ 314.227218][T14852] team1: entered allmulticast mode [ 314.307564][T14857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.129056][T14916] netlink: 'syz.4.2563': attribute type 2 has an invalid length. [ 315.637316][T14939] netlink: 'syz.1.2571': attribute type 2 has an invalid length. [ 315.654222][T14944] netlink: 'syz.3.2570': attribute type 11 has an invalid length. [ 315.656972][T14939] netlink: 'syz.1.2571': attribute type 8 has an invalid length. [ 315.805782][T14952] bond5: entered promiscuous mode [ 315.816591][T14952] bond5: entered allmulticast mode [ 315.827136][T14952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 315.977333][T14952] bond5 (unregistering): Released all slaves [ 316.427739][T14980] netlink: 'syz.1.2583': attribute type 8 has an invalid length. [ 316.551297][T14984] tipc: Enabled bearer , priority 0 [ 316.776057][T15004] __nla_validate_parse: 17 callbacks suppressed [ 316.776077][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2588'. [ 316.826864][T15004] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2588'. [ 316.988146][T15017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 316.997631][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 317.012483][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 317.047434][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 317.076966][T15021] tc_dump_action: action bad kind [ 317.454191][T15036] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2597'. [ 317.467286][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 317.476796][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2597'. [ 317.623812][T15045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.632870][T15045] bond10: (slave bond11): Enslaving as an active interface with a down link [ 317.668883][ T5875] tipc: Node number set to 2809614262 [ 317.834733][T15072] Unsupported ieee802154 address type: 0 [ 318.034063][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'. [ 318.059037][T15087] Dead loop on virtual device ip6_vti0, fix it urgently! [ 318.151654][T15086] xfrm1: entered promiscuous mode [ 318.175287][T15086] xfrm1: entered allmulticast mode [ 318.644515][T15138] tipc: Can't bind to reserved service type 0 [ 319.056499][T15163] validate_nla: 6 callbacks suppressed [ 319.056517][T15163] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 319.132988][T15166] nft_compat: unsupported protocol 0 [ 319.150250][T15163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.163376][T15169] bond0: (slave bridge0): Releasing backup interface [ 319.175458][T15169] dummy0: left allmulticast mode [ 319.188884][T15169] bridge0: port 2(dummy0) entered disabled state [ 319.221131][T15169] bond1: (slave gretap2): Releasing active interface [ 319.235307][T15169] bond2: (slave bond3): Releasing backup interface [ 319.241974][T15169] bond3: left promiscuous mode [ 319.252331][T15170] bond8: (slave wlan0): Opening slave failed [ 319.328380][T15163] vlan1: entered allmulticast mode [ 319.335409][T15163] veth1: entered allmulticast mode [ 319.607869][T15200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.615220][T15200] IPv6: NLM_F_CREATE should be set when creating new route [ 319.685179][T15207] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 319.694638][T15207] block nbd1: not configured, cannot reconfigure [ 319.716727][T15208] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 319.739523][T15208] block nbd1: not configured, cannot reconfigure [ 319.784971][T15212] pimreg3: entered allmulticast mode [ 319.800940][T15213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.819285][T15212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.417344][T15258] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.427379][T15258] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.488191][T15258] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.503865][T15258] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.566129][T15258] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.577360][T15258] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.623336][T15258] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.635685][T15258] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.652513][T15264] netlink: 'syz.0.2661': attribute type 2 has an invalid length. [ 320.702369][ T73] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.712386][ T73] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.740990][ T73] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.750020][ T73] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.774790][ T73] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.793756][ T73] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.823636][ T73] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.832229][ T73] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.884301][T15270] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 320.927155][T15272] netlink: 'syz.1.2665': attribute type 10 has an invalid length. [ 320.947356][T15270] bond4 (unregistering): Released all slaves [ 320.966070][T15272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.973785][T15272] IPv6: NLM_F_CREATE should be set when creating new route [ 321.014385][T15277] ip6tnl2: entered promiscuous mode [ 321.054607][T15277] ip6tnl2: entered allmulticast mode [ 321.685653][T15315] : renamed from hsr0 (while UP) [ 321.945226][T15332] pim6reg1: entered promiscuous mode [ 321.963572][T15332] pim6reg1: entered allmulticast mode [ 322.248899][T15348] syzkaller1: entered promiscuous mode [ 322.283428][T15348] syzkaller1: entered allmulticast mode [ 322.333084][T15359] tc_dump_action: action bad kind [ 322.396297][T15359] __nla_validate_parse: 20 callbacks suppressed [ 322.396320][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2692'. [ 322.683065][T15373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2699'. [ 322.740631][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'. [ 322.786366][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.142649][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.177750][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.198863][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.209502][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.219950][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.229268][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 323.375259][T15406] openvswitch: netlink: Missing key (keys=40, expected=80) [ 323.686042][T15422] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 323.711554][T15422] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 323.721158][T15422] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 323.744041][T15425] veth11: entered allmulticast mode [ 323.886539][T15438] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 323.914351][T15438] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 323.984883][T15444] tipc: Enabled bearer , priority 0 [ 323.999901][T15443] syzkaller0: entered promiscuous mode [ 324.005706][T15443] syzkaller0: entered allmulticast mode [ 324.046842][T15444] tipc: Resetting bearer [ 324.064241][T15442] tipc: Resetting bearer [ 324.097323][T15442] tipc: Disabling bearer [ 324.339992][T15458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.243037][T15513] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 325.274195][T15511] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 325.638958][T15540] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 325.655091][T15542] tc_dump_action: action bad kind [ 325.660313][T15540] nbd: error processing sock list [ 325.676652][T15540] block nbd1: shutting down sockets [ 325.957476][T15562] tipc: Enabled bearer , priority 0 [ 326.022386][T15562] tipc: Disabling bearer [ 326.682326][T15617] netlink: 'syz.1.2770': attribute type 2 has an invalid length. [ 326.685652][T15608] nbd1: detected capacity change from 0 to 127 [ 326.690204][T15617] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 326.720168][ T5872] block nbd1: Receive control failed (result -32) [ 326.828010][T15617] netlink: 'syz.1.2770': attribute type 30 has an invalid length. [ 327.057016][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.105610][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.288577][ T5872] Bluetooth: hci0: command tx timeout [ 327.307772][T15604] veth0_macvtap: left allmulticast mode [ 327.506595][T15617] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 327.521962][T15617] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 327.548757][T15633] erspan0: entered allmulticast mode [ 327.896098][T15653] netlink: 'syz.0.2781': attribute type 21 has an invalid length. [ 327.906476][T15653] __nla_validate_parse: 69 callbacks suppressed [ 327.906496][T15653] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2781'. [ 328.160258][T15664] netlink: 'syz.2.2787': attribute type 1 has an invalid length. [ 328.218764][T15664] netlink: 'syz.2.2787': attribute type 4 has an invalid length. [ 328.227249][T15664] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2787'. [ 328.329208][T15669] gtp1: entered promiscuous mode [ 328.334211][T15669] gtp1: entered allmulticast mode [ 328.492541][T15674] syzkaller1: entered promiscuous mode [ 328.498069][T15674] syzkaller1: entered allmulticast mode [ 328.924878][T15700] tipc: Enabling of bearer rejected, failed to enable media [ 329.264395][T15711] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.356166][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 329.382810][T15711] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.449418][T15711] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.554842][T15711] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.586580][T15736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.593917][T15736] IPv6: NLM_F_CREATE should be set when creating new route [ 329.616009][T15736] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2808'. [ 329.655717][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2810'. [ 329.665118][ T1151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.682173][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2810'. [ 329.823641][ T1151] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.836871][ T1151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.886276][ T1151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.920509][T15742] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 330.130509][T15773] netlink: 'syz.4.2819': attribute type 12 has an invalid length. [ 330.227462][T15772] netlink: 'syz.4.2819': attribute type 12 has an invalid length. [ 330.268922][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 330.277978][T15777] tipc: Enabling of bearer rejected, failed to enable media [ 330.865701][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 330.892618][T15803] netlink: 'syz.1.2830': attribute type 5 has an invalid length. [ 330.935206][T15803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2830'. [ 330.984334][T15803] geneve3: entered promiscuous mode [ 331.004192][T15803] geneve3: entered allmulticast mode [ 331.030685][ T49] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 331.058836][ T49] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 331.139706][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2832'. [ 331.236366][ T49] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 331.295409][ T49] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 331.838682][T15860] openvswitch: netlink: Flow key attr not present in new flow. [ 332.002696][T15872] netlink: 'syz.3.2852': attribute type 5 has an invalid length. [ 332.439589][T15904] delete_channel: no stack [ 332.574465][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.609436][T15911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.617881][T15911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.956411][T15926] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 332.990193][ T5871] bridge0: port 1(syz_tun) entered disabled state [ 333.025640][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.036929][ T5871] syz_tun (unregistering): left allmulticast mode [ 333.044097][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.044394][ T5871] syz_tun (unregistering): left promiscuous mode [ 333.063307][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.063337][ T5871] bridge0: port 1(syz_tun) entered disabled state [ 333.081063][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.090074][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.114583][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.122952][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.130687][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.134367][T15926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.140531][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.178996][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.244410][ T1151] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.255492][ T1151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.269422][ T1151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.310325][T15943] netlink: 'syz.4.2873': attribute type 14 has an invalid length. [ 333.368965][T15945] netlink: 'syz.4.2873': attribute type 14 has an invalid length. [ 333.390401][ T1151] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.406947][ T1151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.417739][ T1151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.443575][T15931] wg1 speed is unknown, defaulting to 1000 [ 333.467471][T15931] hsr0 speed is unknown, defaulting to 1000 [ 333.487427][ T1151] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.509588][ T1151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.525088][ T1151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.584927][T15956] __nla_validate_parse: 38 callbacks suppressed [ 333.584945][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 333.616326][ T1151] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.634172][ T1151] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.644317][ T1151] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 333.897558][T15976] tipc: Enabled bearer , priority 0 [ 333.923010][T15976] syzkaller0: entered promiscuous mode [ 333.930191][T15976] syzkaller0: entered allmulticast mode [ 334.060777][T15982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2881'. [ 334.166770][T15976] tipc: Resetting bearer [ 334.366841][T15975] tipc: Resetting bearer [ 334.416047][T15975] tipc: Disabling bearer [ 334.473720][T15931] chnl_net:caif_netlink_parms(): no params data found [ 334.864262][T16026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.884614][T16026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.214734][ T5878] Bluetooth: hci2: command tx timeout [ 336.000587][ T1151] bond9 (unregistering): (slave gretap3): Releasing active interface [ 336.051296][ T1151] dvmrp1 (unregistering): left allmulticast mode [ 336.735889][ T1151] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 336.745869][ T1151] bridge_slave_1: left promiscuous mode [ 336.752946][ T1151] bond0 (unregistering): Released all slaves [ 336.766878][ T1151] bond1 (unregistering): Released all slaves [ 336.877384][ T1151] bond2 (unregistering): Released all slaves [ 336.890474][ T1151] bond3 (unregistering): Released all slaves [ 336.903863][ T1151] bond4 (unregistering): Released all slaves [ 336.917220][ T1151] bond5 (unregistering): Released all slaves [ 336.934313][ T1151] bond6 (unregistering): Released all slaves [ 336.951612][ T1151] bond7 (unregistering): (slave bond8): Releasing backup interface [ 336.960515][ T1151] bond7 (unregistering): Released all slaves [ 337.076135][ T1151] bond8 (unregistering): Released all slaves [ 337.088679][ T1151] bond9 (unregistering): Released all slaves [ 337.104585][ T1151] bond10 (unregistering): (slave bond11): Releasing active interface [ 337.114050][ T1151] bond10 (unregistering): Released all slaves [ 337.230496][ T1151] bond11 (unregistering): Released all slaves [ 337.245476][ T1151] bond12 (unregistering): Released all slaves [ 337.258613][ T1151] bond13 (unregistering): Released all slaves [ 337.294057][ T5878] Bluetooth: hci2: command tx timeout [ 337.565298][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 337.623104][ T1151] : left promiscuous mode [ 337.699134][T16057] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 338.059533][ T1151] tipc: Left network mode [ 338.086749][T16072] tipc: Enabled bearer , priority 0 [ 338.112300][T15931] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.144839][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.166270][T15931] bridge_slave_0: entered allmulticast mode [ 338.182892][T15931] bridge_slave_0: entered promiscuous mode [ 338.219524][T16074] syzkaller0: entered promiscuous mode [ 338.225053][T16074] syzkaller0: entered allmulticast mode [ 338.280615][T16060] tipc: Resetting bearer [ 338.286730][T15931] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.294498][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.303293][T15931] bridge_slave_1: entered allmulticast mode [ 338.312155][T15931] bridge_slave_1: entered promiscuous mode [ 338.322889][T16079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2907'. [ 338.333096][T16082] tipc: Enabling of bearer rejected, already enabled [ 338.346775][T16054] tipc: Resetting bearer [ 338.388991][T16054] tipc: Disabling bearer [ 338.557235][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2910'. [ 338.596841][T15931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.622916][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2910'. [ 338.624181][T16092] xfrm1: entered promiscuous mode [ 338.637295][T16092] xfrm1: entered allmulticast mode [ 338.654710][T15931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.675185][T16100] netlink: 'syz.4.2913': attribute type 10 has an invalid length. [ 338.687326][T16100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2913'. [ 338.753673][T16098] netlink: 'syz.0.2910': attribute type 21 has an invalid length. [ 338.767378][T16100] bridge0: port 3(dummy0) entered blocking state [ 338.783539][T16100] bridge0: port 3(dummy0) entered disabled state [ 338.790555][T16100] dummy0: entered allmulticast mode [ 338.798572][T16100] dummy0: left allmulticast mode [ 338.803996][T16100] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 338.849510][T16102] batadv1: entered allmulticast mode [ 338.961213][T15931] team0: Port device team_slave_0 added [ 338.977198][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 339.057114][T15931] team0: Port device team_slave_1 added [ 339.211349][T15931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.218338][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.268116][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.315673][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.332912][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.359498][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.370605][ T5878] Bluetooth: hci2: command tx timeout [ 339.546441][ T1151] hsr_slave_1: left promiscuous mode [ 339.580366][ T1151] veth1_macvtap: left promiscuous mode [ 339.586602][ T1151] veth0_macvtap: left promiscuous mode [ 339.854908][ T1151] pim6reg527 (unregistering): left allmulticast mode [ 341.192993][T15931] hsr_slave_0: entered promiscuous mode [ 341.241371][T15931] hsr_slave_1: entered promiscuous mode [ 341.303725][T16180] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2931'. [ 341.304035][T16179] netlink: 'syz.0.2930': attribute type 2 has an invalid length. [ 341.338353][T16184] sctp: [Deprecated]: syz.2.2932 (pid 16184) Use of int in max_burst socket option. [ 341.338353][T16184] Use struct sctp_assoc_value instead [ 341.352284][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 341.359592][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 341.443460][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 341.454731][ T5878] Bluetooth: hci2: command tx timeout [ 341.472510][T16185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.689325][T16201] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2936'. [ 341.854408][T16211] netlink: 'syz.4.2937': attribute type 1 has an invalid length. [ 341.874518][T16212] netlink: 'syz.4.2937': attribute type 1 has an invalid length. [ 341.987101][ T1151] IPVS: stop unused estimator thread 0... [ 342.049818][T16222] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 342.136043][T16227] netlink: 'syz.4.2942': attribute type 4 has an invalid length. [ 342.172463][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2940'. [ 342.409591][T16241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.500475][T16245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 342.578338][T16247] !: renamed from dummy0 (while UP) [ 342.631625][T16249] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 342.723808][T15931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.745695][T15931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.778056][T15931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.814375][T15931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.828873][T16258] netlink: 'syz.2.2953': attribute type 7 has an invalid length. [ 342.829751][T16256] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 342.882331][T16256] openvswitch: netlink: Message has 6332 unknown bytes. [ 343.135279][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.183924][T16281] ip6gretap0: entered promiscuous mode [ 343.256942][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.357315][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.364725][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.387550][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.394780][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.521889][T16306] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.595870][T16309] netlink: 'syz.2.2966': attribute type 1 has an invalid length. [ 343.720286][T16306] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.808240][T16317] __nla_validate_parse: 12 callbacks suppressed [ 343.808262][T16317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 343.832287][T16313] bond6 (unregistering): Released all slaves [ 343.903594][T16306] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.921825][T16317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.996202][T16306] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.146246][ T1151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.238895][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.353459][ T7180] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.369883][ T7180] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.526799][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.557824][T16347] netlink: 'syz.2.2975': attribute type 11 has an invalid length. [ 344.591647][T16351] netlink: 'syz.0.2978': attribute type 1 has an invalid length. [ 344.600216][T16347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2975'. [ 344.665770][T16351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.708128][T16359] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.2980'. [ 344.724478][T15931] veth0_vlan: entered promiscuous mode [ 344.757222][T15931] veth1_vlan: entered promiscuous mode [ 344.895479][T15931] veth0_macvtap: entered promiscuous mode [ 344.913384][T15931] veth1_macvtap: entered promiscuous mode [ 344.966857][T15931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.046410][T15931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.095009][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.115074][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.147373][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.174716][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.277200][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 345.333089][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 345.383978][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.408364][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.436790][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'. [ 345.503290][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.519745][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.615442][T16407] netlink: 'syz.1.2856': attribute type 4 has an invalid length. [ 345.697109][T16416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2995'. [ 345.920738][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2999'. [ 346.601284][T16433] nbd3: detected capacity change from 0 to 63 [ 346.607639][T16430] block nbd3: NBD_DISCONNECT [ 346.669701][T16430] block nbd3: Disconnected due to user request. [ 346.705356][T16430] block nbd3: shutting down sockets [ 347.056025][T16454] tipc: MTU too low for tipc bearer [ 347.203111][T16461] veth0: entered promiscuous mode [ 347.257422][T16462] veth0: left promiscuous mode [ 347.392225][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 347.425718][T16472] hsr_slave_0: left promiscuous mode [ 347.440995][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.454859][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.469585][T16472] hsr_slave_1: left promiscuous mode [ 347.472517][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.484102][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.504793][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.592553][T16476] wg1 speed is unknown, defaulting to 1000 [ 347.600234][T16476] hsr0 speed is unknown, defaulting to 1000 [ 347.643222][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 347.847200][T16490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.997325][T16476] chnl_net:caif_netlink_parms(): no params data found [ 348.212348][T16476] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.220521][T16476] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.227960][T16476] bridge_slave_0: entered allmulticast mode [ 348.236467][T16476] bridge_slave_0: entered promiscuous mode [ 348.244879][T16515] syzkaller1: entered promiscuous mode [ 348.258519][T16515] syzkaller1: entered allmulticast mode [ 348.267110][T16476] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.274946][T16476] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.282703][T16476] bridge_slave_1: entered allmulticast mode [ 348.291808][T16476] bridge_slave_1: entered promiscuous mode [ 348.359434][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.374589][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.446316][T16476] team0: Port device team_slave_0 added [ 348.466459][T16476] team0: Port device team_slave_1 added [ 348.543771][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.563627][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.593091][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.619620][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.632427][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.661870][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.733347][T16529] netlink: 'syz.1.3029': attribute type 1 has an invalid length. [ 348.877823][T16476] hsr_slave_0: entered promiscuous mode [ 348.896846][T16476] hsr_slave_1: entered promiscuous mode [ 348.915854][T16476] debugfs: 'hsr0' already exists in 'hsr' [ 348.936028][T16476] Cannot create hsr debugfs directory [ 348.986875][T16545] C: renamed from lo (while UP) [ 349.001065][T16545] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 349.023453][T16545] __nla_validate_parse: 3 callbacks suppressed [ 349.023472][T16545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3035'. [ 349.060380][T16549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'. [ 349.299930][T16558] delete_channel: no stack [ 349.309224][T16557] delete_channel: no stack [ 349.528674][ T5878] Bluetooth: hci0: command tx timeout [ 349.634960][T16476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.700381][T16476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.764169][T16476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.788136][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3045'. [ 349.904505][T16476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.981018][T16604] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3046'. [ 350.065394][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 350.085099][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 350.178032][T16613] tipc: Enabling of bearer rejected, already enabled [ 350.216065][T16613] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 350.229613][T16613] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 350.277419][T16620] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3052'. [ 350.301414][T16613] tipc: Resetting bearer [ 350.350542][T16476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.394743][T16476] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.457348][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.464579][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.490796][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.497977][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.502432][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 350.642513][T16642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.666217][T16640] vlan2: entered allmulticast mode [ 350.673781][T16640] veth0_to_bond: entered allmulticast mode [ 350.688538][T16640] team0: Port device vlan2 added [ 350.884789][T16650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 350.900079][T16656] netlink: 'syz.3.3061': attribute type 58 has an invalid length. [ 350.908253][T16656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3061'. [ 351.056777][T16476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.113324][T16665] tipc: Enabling of bearer rejected, already enabled [ 351.195644][T16476] veth0_vlan: entered promiscuous mode [ 351.228690][T16667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3063'. [ 351.256532][T16476] veth1_vlan: entered promiscuous mode [ 351.439608][T16476] veth0_macvtap: entered promiscuous mode [ 351.526136][T16476] veth1_macvtap: entered promiscuous mode [ 351.604366][T16476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.616638][ T5878] Bluetooth: hci0: command tx timeout [ 351.631051][T16476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.666900][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.703359][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.734336][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.744628][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.121865][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.129898][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.179808][T16716] sctp: [Deprecated]: syz.4.3074 (pid 16716) Use of int in maxseg socket option. [ 352.179808][T16716] Use struct sctp_assoc_value instead [ 353.689012][ T5878] Bluetooth: hci0: command tx timeout [ 354.235591][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.254706][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.326901][T16752] tipc: Enabling of bearer rejected, already enabled [ 354.378945][T16751] tipc: Enabling of bearer rejected, already enabled [ 354.392594][T16751] __nla_validate_parse: 3 callbacks suppressed [ 354.392613][T16751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3082'. [ 354.959751][T16790] netlink: 'syz.0.3093': attribute type 7 has an invalid length. [ 355.188246][T16793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.316667][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.334644][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.344746][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.361330][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.370332][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.432128][T16793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.545847][T16793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.596236][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 355.621357][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 355.770843][ T5878] Bluetooth: hci0: command tx timeout [ 355.790124][T16802] wg1 speed is unknown, defaulting to 1000 [ 355.816801][T16793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.834815][T16802] hsr0 speed is unknown, defaulting to 1000 [ 355.946318][T16828] netlink: 'syz.3.3101': attribute type 1 has an invalid length. [ 356.036180][T16828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.155509][T16828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.164091][T16828] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.166592][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'. [ 356.185766][T16828] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 356.226785][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 356.294582][T16842] veth15: entered promiscuous mode [ 356.307651][T16842] bond5: (slave veth15): Enslaving as an active interface with a down link [ 356.316628][ T1138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.337029][T16847] vlan1: entered allmulticast mode [ 356.344130][T16847] bond5: entered allmulticast mode [ 356.516386][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.549345][T16862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.551408][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.709316][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3110'. [ 356.730073][T16874] netlink: 'syz.1.3113': attribute type 28 has an invalid length. [ 356.754847][T16875] sctp: [Deprecated]: syz.0.3112 (pid 16875) Use of int in max_burst socket option. [ 356.754847][T16875] Use struct sctp_assoc_value instead [ 356.787302][T16874] netlink: 'syz.1.3113': attribute type 3 has an invalid length. [ 356.795300][T16874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3113'. [ 356.823374][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.863539][T16879] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 3, id = 0 [ 356.984622][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 357.004807][T16802] chnl_net:caif_netlink_parms(): no params data found [ 357.030885][T16885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3116'. [ 357.048564][T16887] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3115'. [ 357.148041][T16898] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 357.192352][T16899] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 357.414627][T16909] netlink: 'syz.0.3123': attribute type 3 has an invalid length. [ 357.448823][ T5878] Bluetooth: hci1: command tx timeout [ 357.624014][T16909] IPv6: sit1: Disabled Multicast RS [ 357.702784][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.725069][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.756321][T16802] bridge_slave_0: entered allmulticast mode [ 357.783183][T16802] bridge_slave_0: entered promiscuous mode [ 357.805421][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.805564][T16920] netlink: 'syz.3.3125': attribute type 10 has an invalid length. [ 357.818112][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.851548][T16802] bridge_slave_1: entered allmulticast mode [ 357.857651][T16926] netlink: 'syz.3.3125': attribute type 10 has an invalid length. [ 357.869837][T16802] bridge_slave_1: entered promiscuous mode [ 357.917097][T16920] batadv0: left allmulticast mode [ 357.925035][T16920] batadv0: left promiscuous mode [ 357.948781][T16920] bridge0: port 3(batadv0) entered disabled state [ 357.977867][T16926] batadv0: entered promiscuous mode [ 358.003876][T16926] batadv0: entered allmulticast mode [ 358.031858][T16926] bridge0: port 3(batadv0) entered blocking state [ 358.075706][T16926] bridge0: port 3(batadv0) entered disabled state [ 358.254241][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.297433][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.541077][T16802] team0: Port device team_slave_0 added [ 358.556795][T16802] team0: Port device team_slave_1 added [ 358.712145][T16802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.730067][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.818454][T16802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.911938][T16802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.938559][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.012314][T16802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.047936][T16963] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 359.051075][T16957] vxlan0: entered promiscuous mode [ 359.079270][T16957] vxlan0: entered allmulticast mode [ 359.223185][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.238774][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.273852][T16802] hsr_slave_0: entered promiscuous mode [ 359.298229][T16802] hsr_slave_1: entered promiscuous mode [ 359.323544][T16802] debugfs: 'hsr0' already exists in 'hsr' [ 359.348229][T16802] Cannot create hsr debugfs directory [ 359.384212][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.441254][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.530137][ T5878] Bluetooth: hci1: command tx timeout [ 359.809723][T16994] netlink: 'syz.1.3146': attribute type 3 has an invalid length. [ 359.819008][T16994] netlink: 'syz.1.3146': attribute type 30 has an invalid length. [ 359.863228][T16994] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 359.879748][T16994] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 359.989622][T17000] sit0: entered promiscuous mode [ 360.007785][T17000] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 360.037998][T17000] __nla_validate_parse: 5 callbacks suppressed [ 360.038018][T17000] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3144'. [ 360.116352][T16802] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.129385][T17000] sctp: [Deprecated]: syz.0.3144 (pid 17000) Use of int in maxseg socket option. [ 360.129385][T17000] Use struct sctp_assoc_value instead [ 360.238026][T16802] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.295594][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3154'. [ 360.331100][T16802] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.397419][T17022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3155'. [ 360.451198][T16802] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.877631][T16802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.925060][T16802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.978853][T16802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.045890][T17051] tipc: Started in network mode [ 361.056705][T17051] tipc: Node identity cabaee6f4d9a, cluster identity 4711 [ 361.074391][T17051] tipc: Enabled bearer , priority 0 [ 361.099760][T16802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.129947][T17051] syzkaller0: entered promiscuous mode [ 361.145727][T17051] syzkaller0: entered allmulticast mode [ 361.216631][T17060] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 361.217308][T17051] tipc: Resetting bearer [ 361.361752][T17050] tipc: Resetting bearer [ 361.407367][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3166'. [ 361.426766][T17050] tipc: Disabling bearer [ 361.466891][T17060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.552131][T17081] xt_limit: Overflow, try lower: 604147548/4200216962 [ 361.609567][ T5878] Bluetooth: hci1: command tx timeout [ 361.645595][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.724277][T17085] wg2: entered promiscuous mode [ 361.746614][T17085] wg2: entered allmulticast mode [ 361.777002][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.806227][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.813430][ T7180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.856347][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.863594][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.332722][T17108] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 362.362921][T17108] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.376800][T17108] gretap3: entered promiscuous mode [ 362.389195][T17108] gretap3: entered allmulticast mode [ 362.456025][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.596114][T16802] veth0_vlan: entered promiscuous mode [ 362.638892][T17118] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20003 [ 362.655224][T17118] netlink: 'syz.3.3180': attribute type 23 has an invalid length. [ 362.656994][T16802] veth1_vlan: entered promiscuous mode [ 362.678945][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d12800: rx timeout, send abort [ 362.755286][T16802] veth0_macvtap: entered promiscuous mode [ 362.820504][T16802] veth1_macvtap: entered promiscuous mode [ 362.862588][T16802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.883838][T16802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.906795][ T7180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.923426][ T7180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.957383][ T7180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.967220][ T7180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.175688][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.188984][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d12800: abort rx timeout. Force session deactivation [ 363.196339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.271099][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 363.305219][T17139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.323669][T17139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.366049][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 363.381624][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3188'. [ 363.402243][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 363.487192][T10681] IPVS: starting estimator thread 0... [ 363.496694][T17162] netlink: 'syz.1.3192': attribute type 21 has an invalid length. [ 363.526477][T17162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3192'. [ 363.567238][T17168] netlink: 'syz.2.3087': attribute type 1 has an invalid length. [ 363.609401][T17165] IPVS: using max 32 ests per chain, 76800 per kthread [ 363.698824][ T5878] Bluetooth: hci1: command tx timeout [ 363.778607][T17174] IPVS: set_ctl: invalid protocol: 48255 172.20.20.187:20001 [ 363.876031][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 364.051924][T17185] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 364.339539][T17190] netlink: 'syz.2.3198': attribute type 10 has an invalid length. [ 364.366032][T17190] team0: Port device dummy0 added [ 364.459578][T17196] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 364.497235][T17190] syzkaller0: entered promiscuous mode [ 364.502901][T17190] syzkaller0: entered allmulticast mode [ 364.686555][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.709252][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.732700][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.749317][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.758751][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.955288][T17214] netlink: 'syz.4.3204': attribute type 3 has an invalid length. [ 366.492523][T17198] wg1 speed is unknown, defaulting to 1000 [ 366.522614][T17198] hsr0 speed is unknown, defaulting to 1000 [ 366.579754][T17229] __nla_validate_parse: 7 callbacks suppressed [ 366.579772][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 366.603749][T17226] netlink: 'syz.2.3206': attribute type 4 has an invalid length. [ 366.612008][T17225] netlink: 'syz.2.3206': attribute type 4 has an invalid length. [ 366.626491][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 366.645424][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 366.665112][T17226] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3206'. [ 366.675252][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.675454][T17225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3206'. [ 366.688652][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.701553][T12374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.711649][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 366.732047][T17225] `: renamed from bond0 (while UP) [ 366.746368][T17227] 8021q: VLANs not supported on lo [ 366.762610][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 366.766435][T17234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3209'. [ 366.781151][T17234] netlink: 'syz.0.3209': attribute type 7 has an invalid length. [ 366.789133][T17234] netlink: 'syz.0.3209': attribute type 8 has an invalid length. [ 366.796210][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3207'. [ 366.797064][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 366.819180][T12374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.826925][ T5872] Bluetooth: hci3: command tx timeout [ 366.858620][T12374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.976585][T17198] chnl_net:caif_netlink_parms(): no params data found [ 367.229468][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.239125][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.257875][T17198] bridge_slave_0: entered allmulticast mode [ 367.269698][T17198] bridge_slave_0: entered promiscuous mode [ 367.290977][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.306458][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.315027][T17198] bridge_slave_1: entered allmulticast mode [ 367.323969][T17198] bridge_slave_1: entered promiscuous mode [ 367.355258][T17252] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 367.514019][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.553012][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.687234][T17198] team0: Port device team_slave_0 added [ 367.721422][T17198] team0: Port device team_slave_1 added [ 367.808774][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.816143][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.845089][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.864620][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.872268][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.900285][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.075263][T17198] hsr_slave_0: entered promiscuous mode [ 368.091232][T17198] hsr_slave_1: entered promiscuous mode [ 368.097720][T17198] debugfs: 'hsr0' already exists in 'hsr' [ 368.103696][T17198] Cannot create hsr debugfs directory [ 368.126265][T17285] unsupported nlmsg_type 40 [ 368.337912][T17293] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 368.346228][T17293] netlink: 'syz.2.3228': attribute type 2 has an invalid length. [ 368.528649][T17301] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 368.625280][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.674053][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.837360][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.855763][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.900004][ T5872] Bluetooth: hci3: command tx timeout [ 368.992997][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.003585][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.030095][T17320] tipc: Started in network mode [ 369.035106][T17320] tipc: Node identity 92efca1925fa, cluster identity 4711 [ 369.042691][T17320] tipc: Enabled bearer , priority 0 [ 369.051451][T17320] syzkaller0: entered promiscuous mode [ 369.057069][T17320] syzkaller0: entered allmulticast mode [ 369.101572][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.124322][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.180903][T17320] tipc: Resetting bearer [ 369.213862][T17319] tipc: Resetting bearer [ 369.247570][T17319] tipc: Disabling bearer [ 369.329024][T17334] openvswitch: netlink: Missing key (keys=40, expected=80) [ 369.439242][T17338] openvswitch: netlink: EtherType 0 is less than min 600 [ 369.446576][T17338] openvswitch: netlink: EtherType 0 is less than min 600 [ 369.492983][T17338] openvswitch: netlink: EtherType 0 is less than min 600 [ 369.502286][T17198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.580017][T17198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.634260][T17198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.689337][T17198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.772932][T17355] bridge_slave_0: left allmulticast mode [ 369.779543][T17355] bridge_slave_0: left promiscuous mode [ 369.793757][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.815347][T17355] bridge_slave_1: left allmulticast mode [ 369.827513][T17355] bridge_slave_1: left promiscuous mode [ 369.837132][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.862148][T17355] bond0: (slave bond_slave_0): Releasing backup interface [ 369.878219][T17355] bond0: (slave bond_slave_1): Releasing backup interface [ 369.905242][T17355] team0: Port device team_slave_0 removed [ 369.929749][T17355] team0: Port device team_slave_1 removed [ 369.936177][T17355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.945412][T17355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.958246][T17355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.967119][T17355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.993353][T17366] team0: Mode changed to "broadcast" [ 370.117205][T17377] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 370.185600][T17377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.222674][T17377] vlan1: entered promiscuous mode [ 370.227940][T17377] bond7: entered promiscuous mode [ 370.233937][T17377] vlan1: entered allmulticast mode [ 370.239312][T17377] bond7: entered allmulticast mode [ 370.281983][T17377] bond7: (slave gretap2): making interface the new active one [ 370.290102][T17377] gretap2: entered promiscuous mode [ 370.295415][T17377] gretap2: entered allmulticast mode [ 370.307969][T17377] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 370.474159][T17198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.500642][T17390] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.633609][T17198] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.676628][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.683876][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.750335][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.757530][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.808614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.952283][T17198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.969211][ T5872] Bluetooth: hci3: command tx timeout [ 371.269629][T17420] syzkaller1: entered promiscuous mode [ 371.292869][T17420] syzkaller1: entered allmulticast mode [ 371.353160][T17420] netlink: 'syz.2.3264': attribute type 4 has an invalid length. [ 371.385729][T17420] netlink: 'syz.2.3264': attribute type 33 has an invalid length. [ 371.423878][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.633407][T17430] netlink: 'syz.1.3265': attribute type 13 has an invalid length. [ 371.669454][T17430] netlink: 'syz.1.3265': attribute type 58 has an invalid length. [ 371.695650][T17198] veth0_vlan: entered promiscuous mode [ 371.722558][T17198] veth1_vlan: entered promiscuous mode [ 371.768914][T17430] __nla_validate_parse: 75 callbacks suppressed [ 371.768935][T17430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3265'. [ 371.806605][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 371.907594][T17198] veth0_macvtap: entered promiscuous mode [ 371.936918][T17198] veth1_macvtap: entered promiscuous mode [ 372.023679][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.083303][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.139801][ T7177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.158558][ T7177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.172601][T17436] wg1: entered promiscuous mode [ 372.195806][T17436] wg1: entered allmulticast mode [ 372.234778][T17445] bridge8: entered promiscuous mode [ 372.240570][T17445] bridge8: entered allmulticast mode [ 372.256637][ T7177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.276358][ T7177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.541370][T17139] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 372.632246][T17451] netlink: 'syz.0.3270': attribute type 16 has an invalid length. [ 372.640246][T17451] netlink: 'syz.0.3270': attribute type 17 has an invalid length. [ 372.666019][T17451] sit0: left promiscuous mode [ 372.677567][T17464] netlink: 'syz.1.3271': attribute type 39 has an invalid length. [ 372.862960][T17451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.886556][T17459] lo speed is unknown, defaulting to 1000 [ 372.972298][T17459] lo speed is unknown, defaulting to 1000 [ 373.005866][T17459] lo speed is unknown, defaulting to 1000 [ 373.048740][ T5872] Bluetooth: hci3: command tx timeout [ 373.193189][T17459] infiniband syz0: set active [ 373.197939][T10678] lo speed is unknown, defaulting to 1000 [ 373.198257][T17459] infiniband syz0: added lo [ 373.242628][T17459] RDS/IB: syz0: added [ 373.246677][T17459] smc: adding ib device syz0 with port count 1 [ 373.253081][T17459] smc: ib device syz0 port 1 has pnetid [ 373.259675][T10685] lo speed is unknown, defaulting to 1000 [ 373.266599][T17459] lo speed is unknown, defaulting to 1000 [ 373.434512][T17477] netlink: 'syz.2.3276': attribute type 1 has an invalid length. [ 373.468669][T17477] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3276'. [ 373.480594][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.496247][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.592964][T17145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.630066][T17145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.753358][T17459] lo speed is unknown, defaulting to 1000 [ 374.106773][T17510] netlink: 'syz.1.3286': attribute type 11 has an invalid length. [ 374.126071][T17510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3286'. [ 374.462361][T17524] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3290'. [ 374.616888][T17459] lo speed is unknown, defaulting to 1000 [ 375.113948][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.125612][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.132751][ T5869] Bluetooth: hci3: command tx timeout [ 375.140802][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.177830][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.190085][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.330572][ T3509] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.588318][T17459] lo speed is unknown, defaulting to 1000 [ 377.212770][ T5872] Bluetooth: hci4: command tx timeout [ 377.481332][T17544] wg1 speed is unknown, defaulting to 1000 [ 377.492199][ T3509] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.516730][T17459] lo speed is unknown, defaulting to 1000 [ 377.524237][T17544] hsr0 speed is unknown, defaulting to 1000 [ 377.630741][ T3509] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.745156][ T3509] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.029654][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 378.103018][T17544] lo speed is unknown, defaulting to 1000 [ 378.125206][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 378.134730][ T3509] bridge_slave_1: left allmulticast mode [ 378.156057][ T3509] bridge_slave_1: left promiscuous mode [ 378.176363][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.176991][T17598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3313'. [ 378.227273][ T3509] bridge_slave_0: left allmulticast mode [ 378.250272][ T3509] bridge_slave_0: left promiscuous mode [ 378.257835][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.777956][ T3509] bond7 (unregistering): (slave gretap2): Releasing active interface [ 378.788113][ T3509] gretap2 (unregistering): left promiscuous mode [ 378.797021][ T3509] gretap2 (unregistering): left allmulticast mode [ 379.289564][ T5872] Bluetooth: hci4: command tx timeout [ 379.474456][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.484457][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.494531][ T3509] bond0 (unregistering): Released all slaves [ 379.605556][ T3509] bond1 (unregistering): Released all slaves [ 379.621664][ T3509] bond2 (unregistering): Released all slaves [ 379.736022][ T3509] bond3 (unregistering): Released all slaves [ 379.847174][ T3509] bond4 (unregistering): Released all slaves [ 379.866063][ T3509] bond5 (unregistering): Released all slaves [ 379.879941][ T3509] bond6 (unregistering): Released all slaves [ 380.031637][ T3509] bond7 (unregistering): Released all slaves [ 380.047162][T17594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.055237][T17594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.064573][T17594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.072088][T17594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.160280][ T3509] : left promiscuous mode [ 380.255910][T17459] lo speed is unknown, defaulting to 1000 [ 380.341022][ T3509] tipc: Disabling bearer [ 380.389075][ T3509] tipc: Left network mode [ 380.429217][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3320'. [ 380.642449][T17631] Bluetooth: MGMT ver 1.23 [ 381.012553][T17648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3327'. [ 381.028786][T17646] geneve2: entered promiscuous mode [ 381.034244][T17646] geneve2: entered allmulticast mode [ 381.052575][T17459] lo speed is unknown, defaulting to 1000 [ 381.173968][T17651] openvswitch: netlink: IP tunnel dst address not specified [ 381.258788][T17544] chnl_net:caif_netlink_parms(): no params data found [ 381.368878][ T5872] Bluetooth: hci4: command tx timeout [ 381.635454][T17459] lo speed is unknown, defaulting to 1000 [ 381.635617][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.655699][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.663252][T17544] bridge_slave_0: entered allmulticast mode [ 381.672624][T17544] bridge_slave_0: entered promiscuous mode [ 381.695645][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.705109][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.713983][T17544] bridge_slave_1: entered allmulticast mode [ 381.723524][T17544] bridge_slave_1: entered promiscuous mode [ 381.812951][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.831961][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.896863][T17544] team0: Port device team_slave_0 added [ 381.910091][T17544] team0: Port device team_slave_1 added [ 381.974907][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.982181][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.019861][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.047183][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.067461][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.115904][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.344094][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 382.365475][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3336'. [ 382.431503][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 382.500482][T17687] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3337'. [ 382.594970][ T3509] batadv_slave_1: left promiscuous mode [ 382.604982][ T3509] hsr_slave_0: left promiscuous mode [ 382.611704][ T3509] hsr_slave_1: left promiscuous mode [ 382.617539][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.625512][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.375313][T17685] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 383.385926][T17544] hsr_slave_0: entered promiscuous mode [ 383.426255][T17544] hsr_slave_1: entered promiscuous mode [ 383.433395][T17544] debugfs: 'hsr0' already exists in 'hsr' [ 383.439296][T17544] Cannot create hsr debugfs directory [ 383.455919][ T5872] Bluetooth: hci4: command tx timeout [ 383.775565][T17711] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 383.803108][T17713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3345'. [ 383.964815][T17717] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.982084][T17717] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 383.993513][T17717] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 384.149685][T17728] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 384.167337][T17730] netlink: 'syz.1.3349': attribute type 7 has an invalid length. [ 384.188810][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 384.207386][T17730] netlink: 'syz.1.3349': attribute type 8 has an invalid length. [ 384.259306][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 384.380850][T17737] netlink: 'syz.1.3351': attribute type 1 has an invalid length. [ 384.393367][ T3509] IPVS: stop unused estimator thread 0... [ 384.402183][T17740] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3353'. [ 384.462368][T17737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.473054][T17746] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 384.576233][T17736] bond1: (slave geneve2): making interface the new active one [ 384.592791][T17736] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 384.642412][ T3509] ------------[ cut here ]------------ [ 384.647927][ T3509] WARNING: CPU: 0 PID: 3509 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0 [ 384.657893][ T3509] Modules linked in: [ 384.662419][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 384.672184][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.682754][ T3509] Workqueue: netns cleanup_net [ 384.687560][ T3509] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 384.693449][ T3509] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 31 e1 f7 e8 a4 04 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 04 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 384.713368][ T3509] RSP: 0018:ffffc9000c097898 EFLAGS: 00010293 [ 384.720046][ T3509] RAX: ffffffff8a22ba5c RBX: ffff88806ac12440 RCX: ffff888030768000 [ 384.728299][ T3509] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888030768000 [ 384.736684][ T3509] RBP: ffffc9000c0979b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 384.745474][ T3509] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d40 [ 384.754587][ T3509] R13: 1ffff92001812f40 R14: ffff88806ac138c0 R15: dffffc0000000000 [ 384.762665][ T3509] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 384.771956][ T3509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.778663][ T3509] CR2: 0000000000000000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 384.786848][ T3509] Call Trace: [ 384.790202][ T3509] [ 384.793157][ T3509] xfrm_net_exit+0x2d/0x70 [ 384.797587][ T3509] ops_undo_list+0x49a/0x990 [ 384.802276][ T3509] ? __pfx_ops_undo_list+0x10/0x10 [ 384.807411][ T3509] ? do_raw_spin_unlock+0x122/0x240 [ 384.813274][ T3509] cleanup_net+0x4c5/0x800 [ 384.817720][ T3509] ? __pfx_cleanup_net+0x10/0x10 [ 384.822778][ T3509] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.828005][ T3509] ? process_scheduled_works+0x9ef/0x17b0 [ 384.833815][ T3509] ? process_scheduled_works+0x9ef/0x17b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.840170][ T3509] process_scheduled_works+0xae1/0x17b0 [ 384.847389][ T3509] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.853677][ T3509] worker_thread+0x8a0/0xda0 [ 384.858294][ T3509] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.864733][ T3509] ? __kthread_parkme+0x7b/0x200 [ 384.869826][ T3509] kthread+0x70e/0x8a0 [ 384.873969][ T3509] ? __pfx_worker_thread+0x10/0x10 [ 384.879164][ T3509] ? __pfx_kthread+0x10/0x10 [ 384.883781][ T3509] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.889176][ T3509] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.894394][ T3509] ? __pfx_kthread+0x10/0x10 [ 384.899172][ T3509] ret_from_fork+0x436/0x7d0 [ 384.903795][ T3509] ? __pfx_ret_from_fork+0x10/0x10 [ 384.909025][ T3509] ? __switch_to_asm+0x39/0x70 [ 384.913900][ T3509] ? __switch_to_asm+0x33/0x70 [ 384.918769][ T3509] ? __pfx_kthread+0x10/0x10 [ 384.923404][ T3509] ret_from_fork_asm+0x1a/0x30 [ 384.928220][ T3509] [ 384.931429][ T3509] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.938729][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 384.948200][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.958269][ T3509] Workqueue: netns cleanup_net [ 384.963055][ T3509] Call Trace: [ 384.966339][ T3509] [ 384.969271][ T3509] dump_stack_lvl+0x99/0x250 [ 384.973861][ T3509] ? __asan_memcpy+0x40/0x70 [ 384.978445][ T3509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.983641][ T3509] ? __pfx__printk+0x10/0x10 [ 384.988237][ T3509] vpanic+0x281/0x750 [ 384.992210][ T3509] ? __pfx__printk+0x10/0x10 [ 384.996795][ T3509] ? __pfx_vpanic+0x10/0x10 [ 385.001287][ T3509] ? is_bpf_text_address+0x292/0x2b0 [ 385.006581][ T3509] panic+0xb9/0xc0 [ 385.010296][ T3509] ? __pfx_panic+0x10/0x10 [ 385.014719][ T3509] __warn+0x31b/0x4b0 [ 385.018691][ T3509] ? xfrm_state_fini+0x26d/0x2f0 [ 385.024058][ T3509] ? xfrm_state_fini+0x26d/0x2f0 [ 385.028991][ T3509] report_bug+0x2be/0x4f0 [ 385.033317][ T3509] ? xfrm_state_fini+0x26d/0x2f0 [ 385.038249][ T3509] ? xfrm_state_fini+0x26d/0x2f0 [ 385.043180][ T3509] ? xfrm_state_fini+0x26f/0x2f0 [ 385.048116][ T3509] handle_bug+0x84/0x160 [ 385.052353][ T3509] exc_invalid_op+0x1a/0x50 [ 385.056856][ T3509] asm_exc_invalid_op+0x1a/0x20 [ 385.061692][ T3509] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 385.067235][ T3509] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 31 e1 f7 e8 a4 04 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 04 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 385.086832][ T3509] RSP: 0018:ffffc9000c097898 EFLAGS: 00010293 [ 385.092899][ T3509] RAX: ffffffff8a22ba5c RBX: ffff88806ac12440 RCX: ffff888030768000 [ 385.100864][ T3509] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888030768000 [ 385.108835][ T3509] RBP: ffffc9000c0979b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 385.116800][ T3509] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d40 [ 385.124759][ T3509] R13: 1ffff92001812f40 R14: ffff88806ac138c0 R15: dffffc0000000000 [ 385.132730][ T3509] ? xfrm_state_fini+0x26c/0x2f0 [ 385.137674][ T3509] ? xfrm_state_fini+0x26c/0x2f0 [ 385.142615][ T3509] xfrm_net_exit+0x2d/0x70 [ 385.147033][ T3509] ops_undo_list+0x49a/0x990 [ 385.151634][ T3509] ? __pfx_ops_undo_list+0x10/0x10 [ 385.157089][ T3509] ? do_raw_spin_unlock+0x122/0x240 [ 385.162283][ T3509] cleanup_net+0x4c5/0x800 [ 385.166692][ T3509] ? __pfx_cleanup_net+0x10/0x10 [ 385.171619][ T3509] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.176822][ T3509] ? process_scheduled_works+0x9ef/0x17b0 [ 385.182531][ T3509] ? process_scheduled_works+0x9ef/0x17b0 [ 385.188247][ T3509] process_scheduled_works+0xae1/0x17b0 [ 385.193806][ T3509] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.199790][ T3509] worker_thread+0x8a0/0xda0 [ 385.204374][ T3509] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 385.210708][ T3509] ? __kthread_parkme+0x7b/0x200 [ 385.215649][ T3509] kthread+0x70e/0x8a0 [ 385.219715][ T3509] ? __pfx_worker_thread+0x10/0x10 [ 385.224824][ T3509] ? __pfx_kthread+0x10/0x10 [ 385.229405][ T3509] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.234609][ T3509] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.239798][ T3509] ? __pfx_kthread+0x10/0x10 [ 385.244386][ T3509] ret_from_fork+0x436/0x7d0 [ 385.248971][ T3509] ? __pfx_ret_from_fork+0x10/0x10 [ 385.254085][ T3509] ? __switch_to_asm+0x39/0x70 [ 385.258849][ T3509] ? __switch_to_asm+0x33/0x70 [ 385.263615][ T3509] ? __pfx_kthread+0x10/0x10 [ 385.268203][ T3509] ret_from_fork_asm+0x1a/0x30 [ 385.272988][ T3509] [ 385.276370][ T3509] Kernel Offset: disabled [ 385.280707][ T3509] Rebooting in 86400 seconds..