last executing test programs: 3.04404128s ago: executing program 1 (id=2817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)={r0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000001000000000000000000006f8e09", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000300003fd31340e92c4bb8"], 0x48}, 0x300}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r1], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x4048890) 2.899847909s ago: executing program 0 (id=2818): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440), 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x4, 0x8, 0x2, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x7800, 0x2, 0x3}}) connect$packet(r6, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) getsockopt$inet6_int(r5, 0x29, 0x48, 0x0, &(0x7f00000002c0)) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102355000000000000002040000"], 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0xa0) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.827983177s ago: executing program 1 (id=2821): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) 2.679079288s ago: executing program 1 (id=2822): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800) 2.415203738s ago: executing program 3 (id=2825): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf082}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x5, 0x0, 0xd, 0x400, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1a8c1, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x5, 0xa, 0xb}, {0x3, 0x3, 0x10, 0x6}, {0x2, 0x3, 0x1, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xbf, 0x30, &(0x7f0000000900)="289f8cdfea6f0d426bc69a2572352469cabadc456adfa353e45ad8a2f16635002a903019c0563cc12d0ecf133b1416515a5d8a91e4ab5447c7ec22951a5bea278374c0fb98c115b640ee81d0921315fa5eeb7e00c5d53f6af95b390265903de214aa809e777b84110c8c1103373bcbaa5acbad69565887f00f03afe3aa3c0eb83963b472d9ea7cdc70cb414209dd77c6c35fefa248740290c877f36af26e35a1a4b2ea0f66693dc4a372d626de04a041284c22ad4679b27be6e57e44f374b1", &(0x7f00000003c0)=""/48, 0x10000, 0x0, 0x15, 0x1000, &(0x7f0000000400)="b55f9bd7f91ba67d087fb7ecf3d779e324f9a08a5f", &(0x7f0000001840)="7549624afbe1be37034aecf35e812b395b2d7654258ba97593f3737730692c65f17b9737d66b2e8b69519f206c4b6b4dfaa0f9f056d34bb70b7e3af539501212ee6f7803c186e7c9428a339eb5c47a1365aa9445c1902a8de680ddf9b6501e4facf1232475afecfad466138cf79c15568832975a6f9e5a6e49e025ef1f0a6984a220035bb7cd60a30f042fd2fc368488871cf63b3374cb8b8d0bc9e3f1e5125c03c47598fe3a902f4edf4b38be42b018f65ca9d18a3ee6e75f560e341525868773f101b7e62c22ef2756fe81b2c5f8cb0b33fef4ee10bf2a63f6aacd0a070cb8175c2f4a8e614f3a5f3dae12966e3bc70bdb5ee597d127a5075b9a3e21a2ff89d86eb35f35798a936025f2f633c903abf5642083898b11134b9203cd3c1ff8923312f6781e142ec1b8740596c39790f5b069aa2e4e0093cc1c3ca6b725181e777d2c517c6d3fd9f0a568a810ab1ee8a352d20045c2635b7856437fad94cbae9f875ea591c4db62644ad8b0eda065f78fb142c4248d17fd6183d488d3b59628f540f740d9c5363880e07f048fbadae6aeef81c4573f12a60395763a2ffd8c669d48de58b8684144dec6a2211a3e4f6fa340ae18bc60eb5c264aaac972bc3302abb0b8725f1178bfb67a726c099201a4864d49316cb141662454b793e0955d45974287b80f017a21c2629ec25427d6b4760e70e31f5a921033e59c4b674bf923ada1f6583b56621269afe5d261018191a2d14d704427ad6df585cf5a949be5b412125ea2e427fb6237f14f3345f58841a5d9adc4715f049273b42d25276df4886a6af686d8f8fe15482bb814a0d2cb9626f734184553e623feea45f30829ff5f5dedb41cfc26809a5ec34236de2ebf0409ccfdb3cb1d6e50f558be4fe156cccbe90a497a9a8fbca266b323f4f51e20e423963ae897ad11ee44ff1a753de0cdecd51e688486de27dbe98ec815f0f477a0cc47dd23194992cf2b5fa49bd86b5c9f1b9563d38e6c4ce6318d5e36c00ed2898ade4812e1fe6ce60996a0628b13fb8646a751a4e83911e47529848990171ae5ccb339c2eb84cd05afcd2b81b43a3932b83b8309e15aeac15f1230d40aa9fb111a0a4ac7e27a3c4a71c0bd19e88687090494d30556714a9d944b84500d5993b1bf46105390f4e626c52e9b1c3e4c0140590208f853d3af3ff1b0623fbb96a8bb9446c8db1da91fa41ca4c6f63642d2556e95aa944ebfdd7a8323dd3c26d12caa54c10e38a5873793e6f1c70f72fd2751381bc276d2df4b2f096a5d551378e7c27b52b577c99a2388bfa35ada1a0e3c97614fe7b655d6860293ada72b215cc8713fa81ead47e939a0312c0d75a9bba217272bed6ee8f5abf719030f923b3e62eb505e598761a56aae69051531eb5736c7ca821e22d81837ecc7899b2f1c65faaa75c76ca9e4fae01579ec63b3861d7db72eab0bf22a2dc8accc51ef46c004a9dd7266534069ccb7110c09dca3913daca7c2d27caad95b3af2c5e42cc6abea2a0e564ec53fb698d76ef14cdf65e66a9f2af346fe20550b16a98864f0f0431401784fcae52852e5e3e3248dfcca8bb5ba565c8a9e043180bb8953027728f8b7d47526bc05efbcfc2dd300527d71d70c853fbdb264f25fa1ea6f8535250c04fb3fcd2ae5e034d6d671bfe3368f85c20701522c71d88d6fc7b06cb478b8fbade6a4638e95682d093cfa85ecd9a1af5420bb255ef3c51ad3c78498647463eba468bface325deb88b5646a150d853f1e908094cf69ad8f4171d48d0628dfa0b500b3b595d046ab5cfe9077bece1fed810ea52cfc8dd4cf2870bd5c9a3410153a7febd4aff0bce253bbdfcf30b71edc8b11ca3c572d53ae2adb6b2e89e6b409cb163c737850be55ea8454144896546b8daa77071b5a8f2ad79c87c4d9875d66f7c00506cdd2d09e9a42210c677b4e5a52a7d47b9b3d3d3c7823da743f65462067486c7d461a752817f6ecb2d49111b60ae80c0d909fac15c600699c21e84a38bcb6bbd4586cd06f4e746c7b09d21526459063c98cf32dd33078615626f46764b1c6bc29598f54df6368e6ccd107a6fee3d803b12f8392ab7ede7b67da8c915c88181cb0fe76c2b6ba20b5b6b892b83d6e9cbbaf8c7a69bb097d7864f0cad2d6669d0ca859eac11a28f3aa50874bc6814198da39ca945bac08c56ec9b29930c1f34d85b9178e78b93dcc0ab07f6b0b7aa0f4915e575ec7ab61ae7b416f71a0328061408f324cc5d9b8717641ceeb49c2bf4e82a91baa32ebd77df3208cd2495631ed451e6382151d7a859ddf539fc295d8cfab87e17e91f34176dcedd1766faa5a9d45ab92007133d94394eb34dd2f7f444202e8aa7dd522bdcb961901276d8c74ad98e1727ce3a77f437758b0efee989f66a96b18c84ed5bfffeef50148d1295785b7f8c63b45b2f18eb693af06b110100d7c11f2036fa7f77f218bfcf88a267a612f562cffe28e6b31abab6d0263bedd407c188c24b5f8b0c8c7ae0a0af3888d22898e5dda8db728708966a859c33f06d6b22f7f7773980693fa659802cb715fabdf132321272c4fc86dbd974ca436140f0feb9853d025f5b61590f7b599c5b13cff6f90a54a5060d608904ee4a0bec310f60ff8dfdc074b8d0e8c6aae8bfed372f4288952559fda77e5b1feacbfda54d70a31ac48514d9e37e2380373b50d15b4a44b88ae50e5bf11361da4e052eacc24c9acc8f5ae9c1f44622ed1e8d6fa9570b58b3958c3cfb711efdeaf5582eb26ebb4a43c01a7cb44071840d00e46e658a46d773df956e917e10c46604fa333d13c014325f367bdd6dc02e5f8e53728588c8ac23c772b879ee422061d1ebe951e767ecff5c905b89ec4ddcd93a74b10758924c4756c94047d1d43d1802f213928f0fc16818bbdce2f89d6b06b1fbe7505c3000baed446e700fd50db7d4ef1bf59635d0e96b5cca5fabb30484a38a92c4e20cffe526b0a9a46ab6cce23bff308527cec7bea0a6053cdd93af95b21cb075bcfc94ffab9f9f4faf5ed85c8312fdd87adbcceccd50e5e654931984b2f7eb327da8021c014f19f19a8f851931eee65f1b7130b9a5059c2842a52958f5522d35c0cb3fbe98edf671d8596310a1bbb96392829c1257c34ab3daa427cb0f8abc4c86c0a1836511f2250e1d67be0a2a42fb5f43c5ee5dfec985ff4deedccdffa0dc126d7a353973740f17bb737b328647b6a6b6525400199e94334fd232d8a9b2342a757f13ce97084fc061d8ebd724fea772ee43d8cc43244045c02551a514888ced0e9b241c73ebf4cd61d75b72c2fce8281e4f21f1e7c4e5622795dc3f7656c1088c979fe894427e7a6669d4aade7867cca494c231863cb631e5966d92748802adc0b3a5667b188c4574fd3531e60d1ee1dff38c77e41f098f55b858893b28f7966c0dfeff4015e26c306c8d4ff6582c227c62875903ae7453f39e0173cd4af92e116b3a0e4a0baa89cbaa18a2013e5f4421cacdbb5962ae41c0200ef961a8f193d40a3237b0c1f13136c311970d3009bd2ada65087aebd5a3319e9ef95afb9d45a4fb50d36b59ba9960273de1fcac6228ac3a0a902334685639a89209a1309ec1fe69e7e03d1410b3313ac88b065c20ef75b93f2e4a4b48c0456fd8d0458988ee4962226e3bd5a2500927294bd9519b4c0241fa5b985058b5fcc166afe44785b0d4411793aa61b227828967c728c73e28f48bf42f431d2fcb563fa4495ce6d0f919ecea8b72cd0d8a6efd9860a50618116e28cb60425e1029b07bae311937694ee199e1d0e5552fdf9c0d8c48a430bf2d6655785bc99fc09670b41018e1bb3b382262893803a8192a20d6da01a35371c7f6cf0ce11386e93d39615c355376fb5bd921766c5aa8110d1a1ca321f63a23cc5fc1d7831d9616844bbb7609823faeb2bf46dcb5226c8564284bd08ddfba160f755ea05570949c60c3b81c8f0f316d2e686ad3f786940cc1ba4a4a4ec205c2205e10c1ab2af1efb4dafc49534753e2e091f91e51206f5966270479031240e9ccb337c02137c1d4ef3fe6f429ebb56309c6377b6ecfa868142878f3ecf69bee3b02284230323e9502fab561117a5cf2b4a7085a8b3893de90a34217c9470358bf3df1b82eb0b212ceafc0a3ade831f327ac93443e4c372c72010ced712e025f879e038bc895cab75775784c039f65394bc5053e0d9d481a2700455eee904887e0cce5930f74b9daffc18d684e89a500317a9b3587f99fcb5e3b6e9342427158da4f65985b8c643767c573a5de4aeed090d95dc01798000346f1d80a6c61ae622a1547a0e06396bf79032abe9ed8d9e8277ab06cea601a1e680adb5a1dcd6e768ef936262c5935d6cde1c943acf7b398962b9048726d1c222678ec93568351100cbaf602993cf6128b04c6fdd4feb0868ec8040b2c7af25a34177cc7f0d64edd0f44d1c89ea237ffa1bdbb81951c955ceca5ea097f4542f2c63cc340686d9a4c686de636a4d7815424007c125d53d0f2a1225f60f40353021cf5d90b7cfe847df668a7eedd8fa5ec283367bbd2b8b3b333c8b596352a48f23ae1dc4075cbdd8e2dd7b935812acc137066a48ebbd46142a0ccb77105dc814349fc5aed0d54a1b76f5946fc78e60ac97cd9eaa0ac7aacbf3a7430367db0bc43d37452bb4a0f091b37e552b88ab7599674fb01f1ec279de6848c9e7fa3897dc0df4fdd2b61f14aa1def786917f71495857c96711ae94c8ca4faf6fa281d46b42f0e985ea3ae61b7ff7580213660983a06ee1eef516963104cf5397ac2405c25a3bd6d554dd8e15bffcec68597cc017531ded330bd622437d457a17c84e32aff9baeb0709449adeb6bbfd6696347035f7ccc3851688bb4f7add618c37571431e77c287a7f259e3c9ca6d9e38198b5d8434102ea03f732628e442de315bd85f7b915a02753b26da6eeb65c0be6c974bf4aedef43edbad2be92353531456d14095db7b37e6ed6be2d217f9285e521b7ef50f309a007d63e48c864039e8448b0127dca88c65bceafd9345d3dfff9cc486714b84cc1565aaf4855e13c245f56d2d18096ba59f08134af7db36a1fadf35c637c816db72bb407f17c1c7a2c0e8b1f3da894c55caa541feca219b548cb2fe50cd308638f643428b7ab5955181aac660cca9246eb5b57c5f85b1917f37710bac43b5d6594732cb7773c3aac5853b996de7f5df94850d84598d2767ca1432283097cda832fb300f83275e14c46d80350935b70b956dc9adacb5c35d46326744d27bcec42264f7ed524cb64aae40ffb8b100c5abecadbd9460f72d215f681b8f5859976d022bc7047ca9394a0658a2b0c668686b030ab5a551e26ff1c6cd61cee682d5e33c6dbc1a6b1cf43def279e975ba0c46cd151d065bbc3e310cf17b13ee9c3ab03144991481620dfd12d33523143ba2f6948d3721383d752d9a72a58a23e642e73b4815c5e276504a6bdb258a75a0ac79db5bc48056be61d56276a5f596e8b9817e65092400de261649ecc57bec28e0475b1fd9733e44ee91ab0da2d205fd80c59438d783f5ab7de8b79696008d7ba48a3b90f66477585633c13ed7c503ef3648c50af6e5a10fe881e61f22188dc6fa66606e699a1c7829cde460ace187f1013c5faf6d73ccde9bafcd80872b36a76393c19704dd939520b7cd0360cf13de2efa8dc9a1fd1dc355ede9de44b467ee3f847eda66564ffe8590fa3799fb610433490cc7b967aad0fb878c54c3eb4dd6e455d8b3eb79fe4257a8275f8b2ec1b8fc0e30d10c4f68ea016c1421af010aa8b2dbd885f606bb70186908f89da9", 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40080}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3fe}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, 0x1405, 0x200, 0x70bd29, 0x25dfdbfb, "", [{{0x8, 0x1, 0x6}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) 2.393543345s ago: executing program 1 (id=2826): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0), 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x20) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x4040000, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) (async) close(0x3) (async) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0x80000000) 2.236351289s ago: executing program 2 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x822000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="04002dbd7000fddbdf257f0000000c00990001040000400000000a00f500b352fd0fb202000014005500beb310577a12fee999f1224ae724fbd40a003400f80102020202000014005500b1f16737ccebfebb027df9ed3994ba21060048000e000000140055002eb383ab0f378212e948b84bd3c988a314005500effe3c2565db1a694dfd79e5b7b6b4f30a00f500d4dc791197cf0000"], 0x9c}, 0x1, 0x0, 0x0, 0x8000844}, 0x4000) (async) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 2.123178731s ago: executing program 1 (id=2829): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaa5aaaaaaaaaabb86dd60cedd0000103afffee00000000000000000000002000000000000000000018900907800"/62], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000480)=0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010025bd7000fddbdf255d00000008000300", @ANYRES32=r10, @ANYBLOB="1bda3944414b8c89974ce841ed31ef088474"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) (async) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) syz_emit_ethernet(0xf8f, &(0x7f0000003100)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf59, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@hopopts={0x32, 0x0, '\x00', [@padn={0x1, 0x57}]}], "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"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r13, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r13, @in6={{0xa, 0x4e23, 0x2c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}}}, &(0x7f0000000100)=0x84) (async) r14 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r14, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x1, @null, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7f, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) shutdown(r14, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r14, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.065059979s ago: executing program 2 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x400, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0xfff3}}}, 0x24}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0xb0, 0x65, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {0xb, 0x8}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x1fe, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff000000}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x7}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8001}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @private=0xa010100}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x37, 0x6}}, @TCA_RATE={0x6, 0x5, {0x38, 0x60}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004015}, 0x24000040) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@ipv6_newnexthop={0xe0, 0x68, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x4, 0x0, 0x15}, [@NHA_GROUP={0x2c, 0x2, [{0x2, 0xf7}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x2, 0x9}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x5}}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x101}, @NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}]}, @NHA_ENCAP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x1, 0x5}, {0x0, 0xb}, {0x2, 0x74}, {0x1, 0x9}, {0x0, 0xfa}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}]}, 0xe0}}, 0x0) 1.873318545s ago: executing program 3 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(r0, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f00000004c0)=""/56, 0x38}], 0x2, &(0x7f0000000980)=""/159, 0x9f}, 0xa6}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000b40)=""/141, 0x8d}, {&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000ec0)=""/181, 0xb5}, {&(0x7f0000007c00)=""/248, 0xf8}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x8}}, {{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000001180)=""/127, 0x7f}, {&(0x7f0000001200)=""/99, 0x63}, {&(0x7f0000001300)=""/176, 0xb0}], 0x4, &(0x7f00000013c0)=""/10, 0xa}, 0x3}, {{&(0x7f0000001400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001540)=""/53, 0x35}], 0x3, &(0x7f0000000f80)=""/219, 0xdb}, 0x5}, {{&(0x7f00000015c0)=@can, 0x80, &(0x7f0000002080)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/24, 0x18}, {&(0x7f0000001d80)=""/193, 0xc1}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000001f00)=""/68, 0x44}, {&(0x7f0000001f80)=""/87, 0x57}, {&(0x7f0000002000)=""/101, 0x65}], 0x7, &(0x7f00000062c0)=""/4096, 0x1000}, 0xffffff9c}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002100)=""/22, 0x16}, {&(0x7f0000002140)=""/241, 0xf1}, {&(0x7f00000072c0)=""/87, 0x57}, {&(0x7f0000007340)=""/218, 0xda}], 0x4, &(0x7f0000007440)=""/185, 0xb9}, 0x101}, {{&(0x7f0000007500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007580)=""/60, 0x3c}, {&(0x7f00000075c0)=""/151, 0x97}, {&(0x7f0000007680)=""/27, 0x1b}, {&(0x7f00000076c0)=""/171, 0xab}, {&(0x7f0000007780)=""/37, 0x25}, {&(0x7f00000077c0)=""/190, 0xbe}, {&(0x7f0000007880)=""/212, 0xd4}], 0x7}, 0x4}], 0x8, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="4c050000400007012bbd7000fedbdf25037c00000400c2807a0409801ebadb1f5e1767cc1c73a4f1fb4d3a2f92f1c8c85386e65f5d1509beda4227d7808a232a3ed3649821be63f2c4acefcf3a5da64c6dd1bfc274a25fa6d4fc143890848ca343fce350a9b562a87a6dc841fdf6910415513d15a94a25dd50a1c557cfe8ce25a53aaaaf134236d0c136b68d55aa7a55e2b0ffea4e3def3d81d2d30a87c78e5582d0053c470936caa835b4fa6501f4a2d13de2d985fbbd06fba3ef64f6b3849345d8f62e378c77fab8a8cd601ba8ecf37756a3082e9469e7d310ac01d4f47c3513285a0646471bd077144a35ab66761a9f789ffad8081a82b765ca58324d0b781868e8bd881f12b9c6cb9dfaa9720ae8d3a5e08372bf48a1aacdab604bffd3c82d9e31a5beacfb4da29d8eea488a5e4d80bae7af59bbb2295a0a46666978d201ec534cbae78ec4defff0a70f4e65e3a0318558d0e1ef79af04e8b9651da885ab2efeeb640473f70a5698270301806801278008005e00e000000104003a8004001f8004004180997260d6f4beace057bbee0e98d4c92b7afec2a04508ab64539d94068622b1e40a16bc53c5fce8ea147b429e90feb4bb0800cf000a010101040040801400eb00fc02000000000000000000000000000004009c8040aa7db8155869ceaf1743f6894ba2616d96df83ce63cb605f803f66e158d5250ad2f9abbc800d88066c4dbea3f69b46fc297c1857971990e5e6f4ad8999ffa1fe5c92753fa8d2efca164c39b6cb0a65bbba12388b2e06a83657437d1e90ace05aef6ebef24a441d4903660c59b20b07dd9b34b8c9a8ae4508fef3d1c73ccf67423c763de7ac2f518ff884dee686c0d1a9ec22e9d014f3d19c12c16c9a4b242a6beb110d2eaf7b0476045b7a06767ce706b129215305704a28e5a80cd2bb422cc95034e68c425392885af1a70ed7d9ee75dd874cd763663b4fefc043b6bff66e98fb988c218666350db60292bf89d403bb3470f129b0b483f0b6e06208002f00", @ANYRES32=r5, @ANYBLOB="0c000300e98d000000000000db1ed315252b15adffc2f51a12010a2478b88bd431fc594842a9293ed68aa7a5b728f398a46b33f2a7fefaf8b47ddf747806b35e58a123d3b864f6b7112b2c774c5f0ab5f9b5255cc2171f3556b2c74140cfe6dd8cdcc8180e91e639834ba2a82b4916472530a20455b5fdbdf76f43ebf9b7db008431fd2d2f0a354866712f448107a4e405798a21ddbbf1ea3f4e4de8c46212aa5c1b246cdf3c257e5444d650b0fcff6c81cedb7427b16b85027b9c8be51338bc46b8e64ac33c2f0d9ba09b71ae05066cc5c3061f493718501b81a6b8f23876a9697b0ac5b6aaef63e9025c5c8fff5aa616ccd91b604ff07935ecc09c19f1187af3738124bf0ad68f68dc6344248bb300395a6d8a94edf1f97186ba8ee929ab7a6e894e7fc93a74a1f6ecc0d2cb81d66f370dc90c3a6e952e3786aff3f83c319cb2f4db5e6f9957209e8514db17cd2f96066cede54aedac835787f4e887c6a5f98a16c38534ad5400f0b907b3b294d3d2423ddb305bc65317f2b5089d9bd509a57516bca54a2a1e41df0931998d704f3fb60db0f2c0e757831a25be118700ed7d08e57e0621ac02af18093e12a98959e793ef801aab187fc6d623b35305000000ab2d2d32187b59a005e94d82a49ab5123a69aa9baae13efbcc559bb2d8a267e30000000020000000cd6f7cdc793965840005b46416715a11294a71aaa3ffa12066346b92e310e9d02eb186b2a4e7d78705ad0ab0f9768c843be418bd93e3709a164a62b4db5aa58e5aecaffa1b41808503a09b8c3e0731149eed7549473d6712b677ecfad51d9109970bcda81f5f4862c4a35e28510979c4d732bcb9359529e8eb8632c07fd80cecf5796483d533520eb2216280203a766f960ce7c7dc7309cb48940ed69478f7c17fc061f15478fb6ca1e327354144c39e310e93f85722e5c7645db7767929ee03ff13f660a767aa"], 0x54c}, 0x1, 0x0, 0x0, 0x1004c091}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1000008, 0x4}}]}}]}, 0x48}}, 0x20040084) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000cc0)) 1.867632225s ago: executing program 0 (id=2833): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000080), 0x4) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="181000002e00090027bd70000000000004000000041018"], 0x1018}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1.867062315s ago: executing program 2 (id=2834): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x52, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES8=r1], 0x40}, 0x1, 0x2000000000000000}, 0x0) 1.784629807s ago: executing program 1 (id=2835): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) syz_emit_ethernet(0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa884760c9ca5800a62100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e334e2004a19078d0387849cc2fdb5aa477356d15e2092dba36b4fd600eab63a26fc0bea8ccd8b92ba44bc716d1f37cbda224188fb15c03fce2983f7693031ac7a6572b77476c8f7f54822192311c04cd4c5db2c08cf78dedfa72de6764397c4a379e10a663842e3ad9c82b608c24500b6e90ee2090078d89071a878dbf48483692b4a6f230236bae2c1c0a6e675be42fb1a52df366374fb2862e542a39343e7773435a7298"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x48004) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x48004) 1.713217053s ago: executing program 2 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff20", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x4, 0xc}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd9d}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b30, &(0x7f0000000240)="949bbd55197d565132db7ba848bb6d9a1452278853702a2f5ad8071a6e0199a0fc6b988a8f1eb59fe56c5322312d0450b375eb18f58512eb83220cffc6ba98daa45909e0ba9d7f08cd75c661340ed2439d19ba67e4509701377938b1d9c8ddfd5b0da36c985d43b3aeaa2679dc60680f415738d9838ccd93fafd5a2ef6a4bcb21597bacc") r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) 1.666753918s ago: executing program 4 (id=2837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r2, &(0x7f0000000080)=""/22, 0x16) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) 1.533154109s ago: executing program 4 (id=2839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000e0000002017a50000000040bc421276936cb8e5f3a2aefba3d78bfe31baa66db24c9aa06ab859b62b9e8195c73439ed3a223ba0b8fffffffffffe4c7819f4c116ae8c560268834dd11bdd82b974eaf00e63abd7820ab3d271b0d6a007b5eede2c64d5bd547425ee00"/132], &(0x7f0000000480)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0xd7, 0x80000000, 0x1, 0x10, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x13, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000280)='GPL\x00', 0x1ef, 0xfb, &(0x7f00000002c0)=""/251, 0x41000, 0x2, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, r6, r7], 0x0, 0x10, 0x10}, 0x94) 1.431165343s ago: executing program 3 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sendmsg$netlink(r0, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000000240)={0x224, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @nested={0x20c, 0x12a, 0x0, 0x1, [@nested={0x205, 0xd1, 0x0, 0x1, [@generic="35e794ae21cebdedf16989d24e35eeb6de8aaf3d2e346b59f95bbdf196f745d219e95cd6c1b25f5aa40979601a6e2f49f3ec7ae60a4bd9baa0da25f6613ff667ea29c3682f8c189f052ee7dd022bd8026385959712786fcbb63b84e140ed9bf8d6e1e0eb3bc0eed48a2124d0445071837a20a5e059bff43b142f936f361c165c1cbf72301bb5f15a9ac1e17b9281425a5c93bdd22696591f13c027fdf05b8974ed38430878b2ee771e6f5fe5596dd54d0e9b0d725aaf59", @typed={0x8, 0x9f, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x69}, @generic="1710e7200565db6f46132ee8acc16b4771a0f83a5fefe89bace243f01f8577a45b2fbabe1da18d7852bcf0d0d039c4c19d61b913514b3c5c5ed5a61fa7f3ded265fd44c11360db17e3991f70a3bfc4ab0e0662271262560dcc735e3c1489e82e7410ac1cf3ce0690de9bf528696fd21a12ffb7f2af5d2b6aa3a7dcd9f6460f718ce8bab8c4938f0df952b2a0c527d3", @nested={0x4, 0x132}, @nested={0x4, 0x117}, @nested={0x4, 0x106}, @generic="a14a4fd0fc08987a59f002f462caa1a4bfc743bfb545094a8c4bc76db52954bfc8b93b030dc475fd58e9547897113348c48d7e491739f06881c7239c35ba2b325e5fd25e9ca3001af31d679a5f223b2ceb87aa9401e5f154db615579e9eebc75496b5587156e4817aab229a970ffd162eb1217fbbde032366be9b2ed", @generic="8da09b5f09e1eb75978ac93bf2d6379670c7945ce02cb3315e028ae1bb5a962eab861cd1671fda"]}]}]}, 0x224}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) 1.293999344s ago: executing program 3 (id=2841): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r7, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xb0, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0xf9}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc054}, 0x4c880) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 1.173756861s ago: executing program 4 (id=2842): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xf, @remote, 0x2}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f00000013c0)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x2, 0xf7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2}, @loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x36}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @tclass={{0x14, 0x29, 0x43, 0x100}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x2c, 0xa, '\x00', [@jumbo, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0xc, [0x2, 0x10]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xcf, 0x1dde, [0x3c1442af, 0x5, 0x6, 0x9000000000000000, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x158}}], 0x1, 0x884) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104fcffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="3f000000000000001c0012800b00010062726964676500000c0002800500170000000000d28e1e4c7ca06c9115620f85d80e34862bfe9873b5ad7ecfb7e8b94c4fec05c3b15561f77a74194df607e17e0d0c8ac8875a0ed467ce8b1c976c03a64b867e3ec19c6545b53a9b85a1dca7453c917f3daad0466f1ed53d0c1122bc0d4672f7d11dee"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.140046305s ago: executing program 0 (id=2843): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x9, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 1.006181112s ago: executing program 3 (id=2844): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x11, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x1200, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = socket$inet(0xa, 0x5, 0x84) listen(r6, 0x8) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0xb8, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x399}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4040010) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25070000000a0004007770616e310000000a0004007370616e310000000a0004007770616e34000000080001000100000008e60100010000000c0017000200aaaaaaaaaaaa0800050002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 789.563089ms ago: executing program 4 (id=2845): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x43800498}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048089}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711007000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f68700", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068988a80300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5002800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x10) 774.939011ms ago: executing program 0 (id=2846): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e4ff000000000079100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6}, 0x1a) 684.241266ms ago: executing program 2 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002800c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xac, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x9, 0x102, "480afc8cc24a3a9a81dbd8ca3aff1ae9"}, @NL80211_ATTR_PMK={0x0, 0xfe, "999576f6eab1edbd5d12045b0337fa81"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "feab7ad8464fa05962b8528b0627e79c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c385aab7c8419a3acfa3a11515bae73"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xac}, 0x1, 0x0, 0x0, 0x48004}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000019580)={'ip6gre0\x00', r8, 0x4, 0xf, 0xea, 0xf, 0x20, @mcast2, @mcast1, 0x8, 0x40, 0xfffff704, 0x8}}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x14, 0x2f, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x4, 0x10f3}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd4, 0x10, 0x403, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x36, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x25c}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0xfa2e}, {0x8, 0x12, 0x0, 0x0, 0x4d6}, {0x8, 0x15, 0x0, 0x0, 0x9}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0x1ff}, {0x8, 0x14, 0x0, 0x0, 0x2}, {0x8, 0x17, 0x0, 0x0, 0x6}, {0x8, 0x6, 0x0, 0x0, 0x4}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0x5}, {0x8, 0x13, 0x0, 0x0, 0x101}, {0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0xa, 0x0, 0x0, 0x9}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) 589.724502ms ago: executing program 4 (id=2848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="408052"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1f8, 0x15, 0x400, 0x70bd2b, 0x25dfdbfc, {0x13}, [@generic="1d0927db6bd7c11b750b654d196ecbd6bd1722a99b514492294c9da85cad1191c1909c838c60949ede0551a025d19a79865fe3f0c62a30b69dd7f33b4903eaffe5b6bc20b5a844c61d54d68cf192376baf6ba68098190bd4eafa537750f778c80b520213624f78cf84304a9ac60bb3be7a0179ffe9561bdc5721bbb03681c76b663ea5df9f10e59bc33dd78d74a88a91be316537dcc0dde85af16a72459e3bab68f1", @nested={0x13f, 0x23, 0x0, 0x1, [@typed={0x4, 0x39}, @generic="b268a2c2aa6c9de47ccff3556b4f9fb06a054c92a09d7722ae30cca7b7bd431dc944e36ce761d8cdd021163cf1e99ecf8a3f0ee571a98ad6fbd4d407a61455e6405e4d", @nested={0x4, 0x62}, @generic="1ac9ee495209fce550225d11bceb62a6eb5eef676c74dfee03e6bac177caa98bf3ae0717167a27e03ef56d901bc2eec923a1e8f34e038f2ab0d6a402fe2cb02a92dbd7bb6fa715b0fb9072198c02e45562cbc33e338adfc03ab35ae56c5100779adfc9fa42f1e598f696ab8f65610559d52222aa2c8da7219e2ea940415a7dfd5646904e6a95828353a3d24e81aeb33f5757cc54953b23be3067b033d5450be3c8a7c14a5c504ab509a22dc7999658c4baaa566200602ab3f03762f288468811edf59c7dc55460e1d37c53edc7a14299c89f9d88be839684af70381be4383a03468ed7b968c59501fcff71818714b5b7"]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1f8, 0x15, 0x400, 0x70bd2b, 0x25dfdbfc, {0x13}, [@generic="1d0927db6bd7c11b750b654d196ecbd6bd1722a99b514492294c9da85cad1191c1909c838c60949ede0551a025d19a79865fe3f0c62a30b69dd7f33b4903eaffe5b6bc20b5a844c61d54d68cf192376baf6ba68098190bd4eafa537750f778c80b520213624f78cf84304a9ac60bb3be7a0179ffe9561bdc5721bbb03681c76b663ea5df9f10e59bc33dd78d74a88a91be316537dcc0dde85af16a72459e3bab68f1", @nested={0x13f, 0x23, 0x0, 0x1, [@typed={0x4, 0x39}, @generic="b268a2c2aa6c9de47ccff3556b4f9fb06a054c92a09d7722ae30cca7b7bd431dc944e36ce761d8cdd021163cf1e99ecf8a3f0ee571a98ad6fbd4d407a61455e6405e4d", @nested={0x4, 0x62}, @generic="1ac9ee495209fce550225d11bceb62a6eb5eef676c74dfee03e6bac177caa98bf3ae0717167a27e03ef56d901bc2eec923a1e8f34e038f2ab0d6a402fe2cb02a92dbd7bb6fa715b0fb9072198c02e45562cbc33e338adfc03ab35ae56c5100779adfc9fa42f1e598f696ab8f65610559d52222aa2c8da7219e2ea940415a7dfd5646904e6a95828353a3d24e81aeb33f5757cc54953b23be3067b033d5450be3c8a7c14a5c504ab509a22dc7999658c4baaa566200602ab3f03762f288468811edf59c7dc55460e1d37c53edc7a14299c89f9d88be839684af70381be4383a03468ed7b968c59501fcff71818714b5b7"]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 313.631547ms ago: executing program 2 (id=2849): socket$inet6(0xa, 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x35, &(0x7f0000000040)={0x0, 0x7c}}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000040a01000100730000000087a16b"], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x100000d1) 283.956727ms ago: executing program 0 (id=2850): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 54.86872ms ago: executing program 4 (id=2851): socket$nl_xfrm(0x10, 0x3, 0x6) 1.513854ms ago: executing program 0 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000400)=""/40, 0x28, 0x0, &(0x7f0000000440)=""/16, 0x10}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000500)={'gre0\x00', r6, 0x80, 0x7, 0x6, 0x5, {{0x6, 0x4, 0x1, 0xe, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1, {[@end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r8, 0x25, 0x4, @val=@tracing={r7, 0x3}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=r10, @ANYRESHEX=r1], 0x4c}}, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000040)=0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 0s ago: executing program 3 (id=2853): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x178, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c94203437588644217016a0064000047029078ac1e0101e000000200441888900000000500000003000000070000000500000002442ccc03e000000100000003ac1e010100000010e0000001fffffff8e00000020000000fac1e01010000007f865100000002071285256c5486825ee611e630f55740ad79020b97aeeb6de14ace1e4802020204bb96010410e3000b0335e89faa0ec286140603100006364495cb070eab8ff94883a57af37db897a30602891b080a010102e00000010a010100e000000264010101e0000002000000150390786401010041dc734f682ccdf22aa6968fc3588cc3331315831a965d7edcecfcdfb57fe376ff4a884eae0fc5ecce28de7f43f41cc9241b4fc3856a74afd06306812c3332a4b156349f7ac3cf5410a77c2aefc414222aa694b81971ce5c7677d366e1bdc267b20f4a558c6a2846114844ffca3a86ad7d94c8b0249b0c4e62db3f6067145c34a1f7b1d9e49269abb7ab7db27037f78357cdac27f28582f01053"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a31000000002c000000030a010200000000000000000100ffff0900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000040c00024000000000000000010900010073797a310000000014000000020a01"], 0x65d4}}, 0x200000d4) kernel console output (not intermixed with test programs): 184.568385][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.219381][ T8446] tipc: Disabling bearer [ 185.229117][ T8458] veth0: left promiscuous mode [ 185.277888][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 185.305648][ T8475] netlink: 'syz.2.699': attribute type 11 has an invalid length. [ 185.339869][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 185.366732][ T8475] netlink: 'syz.2.699': attribute type 11 has an invalid length. [ 185.497187][ T8482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 185.520809][ T8483] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 185.560710][ T8485] ip6t_REJECT: ECHOREPLY is not supported [ 185.592858][ T8492] ip6t_REJECT: ECHOREPLY is not supported [ 185.623890][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 185.664208][ T8487] can: request_module (can-proto-0) failed. [ 185.690199][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 185.725561][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 185.748595][ T8498] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 185.891111][ T8512] sctp: [Deprecated]: syz.2.709 (pid 8512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.891111][ T8512] Use struct sctp_sack_info instead [ 185.901250][ T8498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.127285][ T8498] syzkaller0: entered promiscuous mode [ 186.133048][ T8498] syzkaller0: entered allmulticast mode [ 186.144644][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 186.160785][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 186.169944][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 186.188624][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 186.652254][ T6702] net_ratelimit: 4 callbacks suppressed [ 186.652270][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.493334][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.508954][ T8517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.522441][ T8539] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 187.529542][ T8517] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 187.572185][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.636502][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.644543][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.676654][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.684891][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.687739][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.753272][ T8517] wlan0 speed is unknown, defaulting to 1000 [ 187.842519][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.975001][ T8554] bond2: ARP target 1.0.0.0 is already present [ 187.998215][ T8554] bond2: option arp_ip_target: invalid value (1) [ 188.010442][ T8554] bond2 (unregistering): Released all slaves [ 188.242380][ T8554] bond2: ARP target 1.0.0.0 is already present [ 188.252823][ T8554] bond2: option arp_ip_target: invalid value (1) [ 188.274859][ T8554] bond2 (unregistering): Released all slaves [ 188.415578][ T8554] bond2: ARP target 1.0.0.0 is already present [ 188.435517][ T8554] bond2: option arp_ip_target: invalid value (1) [ 188.450490][ T8554] bond2 (unregistering): Released all slaves [ 188.562910][ T8554] bond2: ARP target 1.0.0.0 is already present [ 188.570656][ T8550] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 188.596638][ T8554] bond2: option arp_ip_target: invalid value (1) [ 188.637367][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.645627][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.699672][ T8554] bond2 (unregistering): Released all slaves [ 188.717552][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.725791][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.745954][ T8601] sock: sock_set_timeout: `syz.3.725' (pid 8601) tries to set negative timeout [ 188.781732][ T8598] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 189.141620][ T8624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'. [ 189.345420][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'. [ 189.363154][ T8633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.729'. [ 189.757912][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.077347][ T5151] Bluetooth: hci0: command 0x0401 tx timeout [ 190.615407][ T8618] netlink: 60 bytes leftover after parsing attributes in process `syz.4.729'. [ 190.648339][ T8633] bridge0: port 3(team0) entered disabled state [ 190.655665][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.663568][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.001931][ T8656] netlink: 340 bytes leftover after parsing attributes in process `syz.2.736'. [ 191.021401][ T8655] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 191.273972][ T8679] SET target dimension over the limit! [ 191.329864][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.556512][ T1117] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.565454][ T1117] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.637856][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.662181][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.738622][ T8686] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.797281][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 191.807862][ T8686] gretap1: entered promiscuous mode [ 191.818892][ T8686] gretap1: entered allmulticast mode [ 191.838230][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.860823][ T8698] xt_connbytes: Forcing CT accounting to be enabled [ 191.876840][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.040213][ T8699] IPVS: Scheduler module ip_vs_sip not found [ 192.051133][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.061382][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.219629][ T8708] bridge1: entered promiscuous mode [ 192.235914][ T8708] bridge1: entered allmulticast mode [ 192.260926][ T8720] tipc: Enabling of bearer rejected, media not registered [ 192.300034][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 192.513906][ T8731] netlink: 80 bytes leftover after parsing attributes in process `syz.0.759'. [ 192.573008][ T8731] netlink: 80 bytes leftover after parsing attributes in process `syz.0.759'. [ 192.606979][ T8735] netlink: 'syz.4.761': attribute type 14 has an invalid length. [ 192.608862][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 192.735799][ T8743] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 192.806572][ T8745] xt_hashlimit: max too large, truncated to 1048576 [ 193.219889][ T8723] wlan0 speed is unknown, defaulting to 1000 [ 193.604250][ T8770] dvmrp0: left allmulticast mode [ 193.974574][ T8787] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.998960][ T8733] wlan0 speed is unknown, defaulting to 1000 [ 194.330427][ T8808] __nla_validate_parse: 1 callbacks suppressed [ 194.330447][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 194.355290][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 194.383478][ T8808] netlink: 'syz.1.780': attribute type 15 has an invalid length. [ 194.473782][ T8811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.780'. [ 194.515131][ T8811] vlan2: entered allmulticast mode [ 194.946485][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 195.285779][ T8840] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.527156][ T8846] only policy match revision 0 supported [ 195.527198][ T8846] unable to load match [ 195.547941][ T8846] netlink: 'syz.3.792': attribute type 11 has an invalid length. [ 195.555763][ T8846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.792'. [ 196.005335][ T8866] syzkaller0: entered promiscuous mode [ 196.012487][ T8866] syzkaller0: entered allmulticast mode [ 196.053492][ T8868] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 196.104358][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 196.189082][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 196.663618][ T8890] ip6gre1: entered promiscuous mode [ 197.107595][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.819'. [ 197.121781][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 197.321420][ T8931] gtp0: entered promiscuous mode [ 197.327732][ T8934] xt_TCPMSS: Only works on TCP SYN packets [ 197.399171][ T8936] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 197.411549][ T8942] netlink: 'syz.3.821': attribute type 33 has an invalid length. [ 197.418737][ T8936] team0: Device macvtap1 is already an upper device of the team interface [ 197.466650][ T8935] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 197.715577][ T8954] netlink: 'syz.3.829': attribute type 3 has an invalid length. [ 197.723753][ T8954] netlink: 'syz.3.829': attribute type 3 has an invalid length. [ 197.733232][ T8954] netlink: 'syz.3.829': attribute type 5 has an invalid length. [ 197.752088][ T8950] bridge1: entered promiscuous mode [ 197.768516][ T8950] bridge1: entered allmulticast mode [ 197.779194][ T8950] team0: Port device bridge1 added [ 197.971254][ T8966] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.831'. [ 198.059555][ T8968] batadv1: entered allmulticast mode [ 198.370567][ T7836] IPVS: starting estimator thread 0... [ 198.468739][ T8985] IPVS: using max 25 ests per chain, 60000 per kthread [ 198.957747][ T8998] sctp: [Deprecated]: syz.2.839 (pid 8998) Use of int in maxseg socket option. [ 198.957747][ T8998] Use struct sctp_assoc_value instead [ 199.359002][ T9021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.848'. [ 199.391518][ T9021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.848'. [ 199.432162][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 199.450237][ T9024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.847'. [ 199.489885][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.847'. [ 199.522837][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.529357][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.624341][ T9032] x_tables: unsorted underflow at hook 1 [ 199.772920][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 200.053565][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.853'. [ 200.074993][ T9046] pim6reg: entered allmulticast mode [ 200.081906][ T9046] pim6reg: left allmulticast mode [ 200.141324][ T9052] net_ratelimit: 3 callbacks suppressed [ 200.141344][ T9052] openvswitch: netlink: Key type 31 is not supported [ 200.403390][ T9061] netlink: 232 bytes leftover after parsing attributes in process `syz.2.859'. [ 200.461347][ T9059] syzkaller1: entered promiscuous mode [ 200.469448][ T9059] syzkaller1: entered allmulticast mode [ 200.631833][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'. [ 200.799626][ T9082] IPv6: sit1: Disabled Multicast RS [ 200.813946][ T9082] sit1: entered allmulticast mode [ 200.934717][ T9078] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 201.081094][ T9087] syzkaller1: entered promiscuous mode [ 201.096406][ T9087] syzkaller1: entered allmulticast mode [ 201.382580][ T9109] tipc: Enabled bearer , priority 0 [ 201.405506][ T9110] tipc: Enabling of bearer rejected, already enabled [ 201.410880][ T9117] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 201.424405][ T9117] netlink: 244 bytes leftover after parsing attributes in process `syz.1.876'. [ 201.449594][ T9109] syzkaller0: entered promiscuous mode [ 201.455491][ T9109] syzkaller0: entered allmulticast mode [ 201.501085][ T9109] tipc: Resetting bearer [ 201.526681][ T9108] tipc: Resetting bearer [ 201.549615][ T9108] tipc: Disabling bearer [ 202.883780][ T9179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.075434][ T9184] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 203.258566][ T9184] bond2: entered promiscuous mode [ 203.265560][ T9184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.343807][ T5151] block nbd0: Receive control failed (result -1) [ 203.805751][ T9225] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 204.251633][ T9245] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 204.288000][ T9237] can: request_module (can-proto-4) failed. [ 204.499254][ T9254] __nla_validate_parse: 8 callbacks suppressed [ 204.499277][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 204.552353][ T9257] Set syz1 is full, maxelem 8 reached [ 204.569371][ T9256] netlink: 52 bytes leftover after parsing attributes in process `syz.0.918'. [ 204.579082][ T9257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.918'. [ 204.600376][ T9258] netlink: 104 bytes leftover after parsing attributes in process `syz.1.917'. [ 204.617435][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 204.756733][ T9267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 205.242708][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 205.258860][ T9298] netlink: 'syz.4.931': attribute type 7 has an invalid length. [ 205.272765][ T9298] netlink: 'syz.4.931': attribute type 8 has an invalid length. [ 205.284065][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 205.488216][ T9314] sctp: [Deprecated]: syz.1.937 (pid 9314) Use of int in max_burst socket option. [ 205.488216][ T9314] Use struct sctp_assoc_value instead [ 205.957936][ T9331] netlink: 596 bytes leftover after parsing attributes in process `syz.1.940'. [ 206.042329][ T9333] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 206.242117][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 206.278739][ T9333] bond3: entered promiscuous mode [ 206.320160][ T9333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.166594][ T9389] netlink: 'syz.2.956': attribute type 7 has an invalid length. [ 208.621365][ T9467] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 208.671971][ T9467] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 208.708541][ T9467] NCSI netlink: No device for ifindex 813332851 [ 208.844046][ T9484] openvswitch: netlink: EtherType 50a is less than min 600 [ 208.948805][ T9486] netlink: 'syz.3.978': attribute type 33 has an invalid length. [ 209.588509][ T9526] netlink: 'syz.0.992': attribute type 2 has an invalid length. [ 209.624219][ T9526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.634219][ T9531] openvswitch: netlink: EtherType 50a is less than min 600 [ 209.892232][ T9546] sock: sock_timestamping_bind_phc: sock not bind to device [ 210.190982][ T9559] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 210.279279][ T9559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.304785][ T9560] macvlan3: entered promiscuous mode [ 210.332269][ T9560] macvlan3: entered allmulticast mode [ 210.367518][ T9560] bond3: entered allmulticast mode [ 210.372839][ T9560] bond3: entered promiscuous mode [ 210.380339][ T9560] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 210.389687][ T9560] team0: Port device macvlan3 added [ 210.464244][ T9566] __nla_validate_parse: 20 callbacks suppressed [ 210.464267][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'. [ 210.526798][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'. [ 210.579038][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 210.594671][ T9566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 210.614272][ T9576] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 210.658935][ T9566] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 210.681198][ T9566] gretap1: entered promiscuous mode [ 210.697468][ T9566] gretap1: entered allmulticast mode [ 210.876823][ T5840] Bluetooth: hci1: command tx timeout [ 210.931501][ T9594] vlan3: entered allmulticast mode [ 211.237215][ T9618] bridge0: port 4(batadv1) entered blocking state [ 211.255137][ T9618] bridge0: port 4(batadv1) entered disabled state [ 211.281225][ T9618] batadv1: entered allmulticast mode [ 211.289521][ T9618] batadv1: entered promiscuous mode [ 211.727450][ T13] batman_adv: batadv1: IGMP Querier appeared [ 211.733819][ T13] batman_adv: batadv1: MLD Querier appeared [ 211.836452][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.842836][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.849964][ T5840] Bluetooth: hci0: command 0x0401 tx timeout [ 211.858051][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 212.097762][ T9661] Bluetooth: MGMT ver 1.23 [ 212.116609][ T9665] netlink: 'syz.0.1033': attribute type 29 has an invalid length. [ 212.180911][ T9665] netlink: 'syz.0.1033': attribute type 29 has an invalid length. [ 212.224735][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 212.298653][ T9665] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 212.348054][ T9681] x_tables: duplicate underflow at hook 1 [ 212.494083][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 212.596442][ T9691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 212.697438][ T9691] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1040'. [ 212.731782][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 212.935793][ T9719] xt_hashlimit: size too large, truncated to 1048576 [ 212.958755][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 213.349320][ T9742] pim6reg1: entered promiscuous mode [ 213.359227][ T9742] pim6reg1: entered allmulticast mode [ 213.382939][ T9749] policy can only be matched on NF_INET_PRE_ROUTING [ 213.382961][ T9749] unable to load match [ 213.558340][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1058'. [ 213.583324][ T9751] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 213.828540][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1065'. [ 213.881229][ T9770] macvtap1: entered allmulticast mode [ 213.890830][ T9770] veth0_macvtap: entered allmulticast mode [ 214.826900][ T9818] xt_hashlimit: max too large, truncated to 1048576 [ 214.836835][ T9816] ip6t_REJECT: ECHOREPLY is not supported [ 214.963556][ T9824] pimreg: entered allmulticast mode [ 215.162864][ T9834] xt_hashlimit: size too large, truncated to 1048576 [ 215.300046][ T9841] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 215.316589][ T9841] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 215.697210][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.236805][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.756410][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 218.571262][ T9864] __nla_validate_parse: 4 callbacks suppressed [ 218.571283][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 218.786230][ T9873] can: request_module (can-proto-0) failed. [ 218.898038][ T9882] netlink: 'syz.0.1096': attribute type 8 has an invalid length. [ 218.991427][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 219.057151][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 219.154898][ T9860] wlan0 speed is unknown, defaulting to 1000 [ 219.262914][ T9902] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 219.317972][ T9900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1103'. [ 219.710237][ T9923] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1112'. [ 219.732812][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 219.923573][ T9929] macvtap1: entered promiscuous mode [ 219.929466][ T9929] vlan0: entered promiscuous mode [ 219.935136][ T9929] macvtap1: entered allmulticast mode [ 219.941278][ T9929] vlan0: entered allmulticast mode [ 219.948304][ T9929] veth0_vlan: entered allmulticast mode [ 220.325120][ T9948] netlink: zone id is out of range [ 220.336804][ T9949] netlink: zone id is out of range [ 220.343408][ T9948] netlink: zone id is out of range [ 220.349377][ T9949] netlink: zone id is out of range [ 220.354949][ T9948] netlink: zone id is out of range [ 220.361048][ T9949] netlink: zone id is out of range [ 220.366412][ T9948] netlink: get zone limit has 4 unknown bytes [ 220.375869][ T9949] netlink: get zone limit has 4 unknown bytes [ 220.385690][ T9951] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1124'. [ 220.419267][ T9953] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1121'. [ 220.542917][ T9960] bridge0: port 3(batadv0) entered blocking state [ 220.558316][ T9960] bridge0: port 3(batadv0) entered disabled state [ 220.565376][ T9960] batadv0: entered allmulticast mode [ 220.572113][ T9963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1127'. [ 220.607079][ T9960] batadv0: entered promiscuous mode [ 220.794630][ T9972] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1130'. [ 220.992916][ T9987] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 221.040584][ T3516] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 221.049984][ T3516] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 222.047278][T10032] netlink: 'syz.1.1147': attribute type 11 has an invalid length. [ 222.523146][T10047] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:21 [ 223.290715][T10083] netlink: 'syz.4.1163': attribute type 30 has an invalid length. [ 223.319218][T10083] netlink: 'syz.4.1163': attribute type 30 has an invalid length. [ 223.388297][T10083] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 223.402132][T10083] bond4: entered promiscuous mode [ 223.408118][T10083] bond4: entered allmulticast mode [ 223.413875][T10083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.817597][T10110] __nla_validate_parse: 13 callbacks suppressed [ 223.817616][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 223.937053][T10113] netlink: 'syz.2.1173': attribute type 13 has an invalid length. [ 223.956269][T10113] netlink: 'syz.2.1173': attribute type 58 has an invalid length. [ 223.969046][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1173'. [ 223.997024][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 224.006727][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 224.015827][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 224.026487][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 224.245295][T10132] netlink: 'syz.2.1180': attribute type 7 has an invalid length. [ 224.271219][T10124] IPVS: persistence engine module ip_vs_pe_ not found [ 224.271296][T10132] netlink: 'syz.2.1180': attribute type 8 has an invalid length. [ 224.381394][T10132] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 224.389950][T10132] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 224.419276][T10142] netlink: 'syz.0.1182': attribute type 32 has an invalid length. [ 224.994877][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 225.028631][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 225.360096][T10173] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 225.432577][T10180] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1191'. [ 225.542669][T10171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.676809][T10185] xt_hashlimit: max too large, truncated to 1048576 [ 226.037433][T10199] validate_nla: 3 callbacks suppressed [ 226.037454][T10199] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.073939][T10199] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.097440][T10205] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.098582][T10199] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.138179][T10207] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.143889][T10199] netlink: 'syz.3.1199': attribute type 2 has an invalid length. [ 226.151966][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 226.202144][ T1149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.247745][ T1149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.267678][T10205] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.284495][ T1149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.300227][T10205] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.303368][ T1149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.345227][T10205] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 226.407112][T10205] netlink: 'syz.3.1199': attribute type 2 has an invalid length. [ 226.444553][T10219] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 226.478313][T10222] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 226.641470][T10232] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 227.260252][T10273] FAULT_INJECTION: forcing a failure. [ 227.260252][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 227.288029][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.0.1222 Not tainted syzkaller #0 PREEMPT(full) [ 227.288058][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.288078][T10273] Call Trace: [ 227.288087][T10273] [ 227.288096][T10273] dump_stack_lvl+0x189/0x250 [ 227.288130][T10273] ? __pfx____ratelimit+0x10/0x10 [ 227.288161][T10273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.288189][T10273] ? __pfx__printk+0x10/0x10 [ 227.288211][T10273] ? __might_fault+0xb0/0x130 [ 227.288272][T10273] should_fail_ex+0x414/0x560 [ 227.288311][T10273] _copy_from_user+0x2d/0xb0 [ 227.288340][T10273] ___sys_sendmsg+0x158/0x2a0 [ 227.288364][T10273] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.288424][T10273] ? __fget_files+0x2a/0x420 [ 227.288444][T10273] ? __fget_files+0x3a0/0x420 [ 227.288475][T10273] __x64_sys_sendmsg+0x19b/0x260 [ 227.288502][T10273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.288536][T10273] ? __pfx_ksys_write+0x10/0x10 [ 227.288570][T10273] ? do_syscall_64+0xbe/0xfa0 [ 227.288606][T10273] do_syscall_64+0xfa/0xfa0 [ 227.288635][T10273] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.288663][T10273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.288681][T10273] ? clear_bhb_loop+0x60/0xb0 [ 227.288704][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.288723][T10273] RIP: 0033:0x7fd68078f749 [ 227.288742][T10273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.288760][T10273] RSP: 002b:00007fd6816de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.288791][T10273] RAX: ffffffffffffffda RBX: 00007fd6809e5fa0 RCX: 00007fd68078f749 [ 227.288806][T10273] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 227.288818][T10273] RBP: 00007fd6816de090 R08: 0000000000000000 R09: 0000000000000000 [ 227.288830][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.288842][T10273] R13: 00007fd6809e6038 R14: 00007fd6809e5fa0 R15: 00007ffc1a5e9d88 [ 227.288877][T10273] [ 228.464369][T10332] FAULT_INJECTION: forcing a failure. [ 228.464369][T10332] name failslab, interval 1, probability 0, space 0, times 1 [ 228.490884][T10332] CPU: 1 UID: 0 PID: 10332 Comm: syz.0.1238 Not tainted syzkaller #0 PREEMPT(full) [ 228.490913][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.490925][T10332] Call Trace: [ 228.490934][T10332] [ 228.490943][T10332] dump_stack_lvl+0x189/0x250 [ 228.490976][T10332] ? __pfx____ratelimit+0x10/0x10 [ 228.491005][T10332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.491033][T10332] ? __pfx__printk+0x10/0x10 [ 228.491062][T10332] ? __pfx___might_resched+0x10/0x10 [ 228.491085][T10332] ? fs_reclaim_acquire+0x7d/0x100 [ 228.491121][T10332] should_fail_ex+0x414/0x560 [ 228.491157][T10332] should_failslab+0xa8/0x100 [ 228.491180][T10332] kmem_cache_alloc_node_noprof+0x77/0x710 [ 228.491209][T10332] ? __alloc_skb+0x112/0x2d0 [ 228.491227][T10332] ? netlink_autobind+0xdb/0x300 [ 228.491256][T10332] __alloc_skb+0x112/0x2d0 [ 228.491281][T10332] netlink_sendmsg+0x5c6/0xb30 [ 228.491314][T10332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.491339][T10332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.491374][T10332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.491394][T10332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.491417][T10332] __sock_sendmsg+0x21c/0x270 [ 228.491451][T10332] ____sys_sendmsg+0x505/0x830 [ 228.491478][T10332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.491510][T10332] ? import_iovec+0x74/0xa0 [ 228.491542][T10332] ___sys_sendmsg+0x21f/0x2a0 [ 228.491569][T10332] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.491635][T10332] ? __fget_files+0x2a/0x420 [ 228.491654][T10332] ? __fget_files+0x3a0/0x420 [ 228.491687][T10332] __x64_sys_sendmsg+0x19b/0x260 [ 228.491715][T10332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.491767][T10332] ? __pfx_ksys_write+0x10/0x10 [ 228.491804][T10332] ? do_syscall_64+0xbe/0xfa0 [ 228.491842][T10332] do_syscall_64+0xfa/0xfa0 [ 228.491872][T10332] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.491913][T10332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.491935][T10332] ? clear_bhb_loop+0x60/0xb0 [ 228.491963][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.491984][T10332] RIP: 0033:0x7fd68078f749 [ 228.492003][T10332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.492022][T10332] RSP: 002b:00007fd6816de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.492045][T10332] RAX: ffffffffffffffda RBX: 00007fd6809e5fa0 RCX: 00007fd68078f749 [ 228.492061][T10332] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 228.492075][T10332] RBP: 00007fd6816de090 R08: 0000000000000000 R09: 0000000000000000 [ 228.492087][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.492100][T10332] R13: 00007fd6809e6038 R14: 00007fd6809e5fa0 R15: 00007ffc1a5e9d88 [ 228.492137][T10332] [ 228.805989][T10331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.094881][T10342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.136363][T10342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.165894][T10342] bond0 (unregistering): Released all slaves [ 229.282333][T10360] bond5: (slave geneve2): making interface the new active one [ 229.293420][T10360] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 229.393234][T10366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.403441][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.413880][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.430714][T10369] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.478764][T10372] bond5: Unable to set down delay as MII monitoring is disabled [ 229.491013][T10372] bond5 (unregistering): Released all slaves [ 229.521384][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.530548][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.574249][T10381] 0: reclassify loop, rule prio 0, protocol 800 [ 230.479488][T10383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.484867][T10433] __nla_validate_parse: 9 callbacks suppressed [ 230.484893][T10433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1262'. [ 230.485736][T10383] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 230.599817][T10383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.623532][T10383] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 230.657490][T10383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.701402][T10383] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 230.772610][T10383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.789171][T10440] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1264'. [ 230.806543][T10383] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 230.817743][T10440] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1264'. [ 230.829769][T10440] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1264'. [ 230.863121][T10383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.889652][T10383] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 231.112767][T10452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.146206][T10452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 231.285141][T10463] validate_nla: 1 callbacks suppressed [ 231.285164][T10463] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 231.305301][T10452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.324387][T10452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 231.462179][ T6693] wlan0 speed is unknown, defaulting to 1000 [ 231.477950][ T6693] syz0: Port: 1 Link DOWN [ 231.498162][T10452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.519827][T10452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 231.701932][T10452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.743923][T10452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 231.904445][ T3557] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.939688][ T3557] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 232.001051][ T3557] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.021267][ T3557] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 232.060207][ T3557] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.089286][ T3557] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 232.152176][ T3516] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.172932][ T3516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 232.609338][T10526] netlink: 'syz.1.1286': attribute type 10 has an invalid length. [ 232.622626][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1286'. [ 232.637512][T10520] syzkaller0: entered promiscuous mode [ 232.643139][T10520] syzkaller0: entered allmulticast mode [ 232.650858][T10526] dummy0: entered promiscuous mode [ 232.675548][T10526] bridge0: port 4(dummy0) entered blocking state [ 232.717322][T10526] bridge0: port 4(dummy0) entered disabled state [ 232.723948][T10526] dummy0: entered allmulticast mode [ 232.769527][T10526] bridge0: port 4(dummy0) entered blocking state [ 232.776134][T10526] bridge0: port 4(dummy0) entered forwarding state [ 233.065359][T10551] sctp: [Deprecated]: syz.1.1290 (pid 10551) Use of int in max_burst socket option. [ 233.065359][T10551] Use struct sctp_assoc_value instead [ 234.952482][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1284'. [ 234.986904][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1284'. [ 235.180037][T10581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1292'. [ 235.224442][T10581] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1292'. [ 235.244459][T10585] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1293'. [ 235.275522][T10581] netlink: 'syz.0.1292': attribute type 5 has an invalid length. [ 235.631701][T10599] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 235.714020][T10607] __nla_validate_parse: 1 callbacks suppressed [ 235.714042][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 235.745047][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 235.755002][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 235.929733][T10620] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 235.940032][T10620] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 236.177010][T10631] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 236.272053][T10638] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 237.058966][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 237.140114][T10684] vxcan0: entered allmulticast mode [ 237.288739][T10695] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 237.376215][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 237.385626][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 237.399992][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 237.662848][T10703] bridge0: port 3(batadv1) entered blocking state [ 237.679745][T10703] bridge0: port 3(batadv1) entered disabled state [ 237.722039][T10703] batadv1: entered allmulticast mode [ 237.754577][T10703] batadv1: entered promiscuous mode [ 237.812886][T10725] bond0: (slave rose0): Error: Device can not be enslaved while up [ 237.841725][T10726] bond0: (slave rose0): Error: Device can not be enslaved while up [ 238.146928][ T3459] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 238.156513][ T3459] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 238.219660][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 238.242367][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 238.290829][T10741] gretap0: entered promiscuous mode [ 238.316476][T10741] gretap0: left promiscuous mode [ 238.399029][T10709] wlan0 speed is unknown, defaulting to 1000 [ 238.562098][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'. [ 238.579689][T10759] netlink: 'syz.1.1336': attribute type 13 has an invalid length. [ 238.588546][T10759] netlink: 'syz.1.1336': attribute type 17 has an invalid length. [ 238.602602][T10759] lo: left promiscuous mode [ 238.607298][T10758] x_tables: duplicate underflow at hook 2 [ 238.698120][T10759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.708901][T10759] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.727657][T10759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.903793][T10772] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.581123][T10800] batadv_slave_1: entered promiscuous mode [ 240.343536][T10794] batadv_slave_1: left promiscuous mode [ 241.069068][T10846] netlink: 'syz.1.1366': attribute type 7 has an invalid length. [ 241.119698][T10846] __nla_validate_parse: 2 callbacks suppressed [ 241.119719][T10846] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1366'. [ 241.138312][T10847] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1366'. [ 241.580082][T10841] wlan0 speed is unknown, defaulting to 1000 [ 241.900048][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 242.000426][T10868] netlink: 'syz.1.1374': attribute type 7 has an invalid length. [ 242.169545][T10876] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 242.188274][T10868] netlink: 'syz.1.1374': attribute type 7 has an invalid length. [ 242.196253][T10877] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 242.235079][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1375'. [ 242.292987][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.333852][T10876] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 242.371650][T10877] batadv0: entered promiscuous mode [ 242.381501][T10877] batadv0: entered allmulticast mode [ 242.438643][T10877] bond0: (slave batadv0): Releasing backup interface [ 242.491309][T10877] bridge0: port 4(batadv0) entered blocking state [ 242.511378][T10877] bridge0: port 4(batadv0) entered disabled state [ 242.766290][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 242.772540][T10886] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1378'. [ 242.775619][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 242.798006][T10888] tipc: Enabled bearer , priority 0 [ 242.805699][T10888] syzkaller0: entered promiscuous mode [ 242.811792][T10888] syzkaller0: entered allmulticast mode [ 242.822046][T10888] tipc: Resetting bearer [ 242.840513][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 242.881963][T10888] bond6: option xmit_hash_policy: invalid value (64) [ 242.893389][T10888] bond6 (unregistering): Released all slaves [ 243.036674][T10887] tipc: Resetting bearer [ 243.088548][T10887] tipc: Disabling bearer [ 243.208375][T10901] syzkaller1: entered promiscuous mode [ 243.213939][T10901] syzkaller1: entered allmulticast mode [ 243.331451][T10910] netlink: 'syz.1.1386': attribute type 5 has an invalid length. [ 243.379708][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 243.536336][T10916] veth0: entered promiscuous mode [ 243.596615][T10916] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 243.605504][T10916] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 243.627938][T10916] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.1387'. [ 243.810338][T10913] veth0: left promiscuous mode [ 244.177266][T10943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1398'. [ 245.447529][T11011] openvswitch: netlink: Message has 592 unknown bytes. [ 245.477241][T11011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.838684][T11030] x_tables: duplicate underflow at hook 3 [ 246.279310][T11042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1421'. [ 246.303677][ T6702] IPVS: starting estimator thread 0... [ 246.394130][T11054] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 246.402209][T11053] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 246.410424][T11044] IPVS: using max 27 ests per chain, 64800 per kthread [ 246.435432][T11053] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 246.453933][T11054] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 246.488673][T11054] netlink: 'syz.1.1424': attribute type 11 has an invalid length. [ 246.506913][T11053] netlink: 'syz.1.1424': attribute type 11 has an invalid length. [ 246.534936][T11053] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1424'. [ 246.550745][T11054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1424'. [ 246.595238][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 246.814237][T11069] tipc: Can't bind to reserved service type 0 [ 246.983596][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1429'. [ 246.993685][T11069] tipc: Invalid UDP bearer configuration [ 246.993751][T11069] tipc: Enabling of bearer rejected, failed to enable media [ 247.703943][T11108] tipc: Enabling of bearer rejected, failed to enable media [ 248.119117][T11129] netlink: 'syz.0.1444': attribute type 2 has an invalid length. [ 248.220427][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 248.235594][T11131] chnl_net:caif_netlink_parms(): no params data found [ 248.878292][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 248.985674][T11159] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1454'. [ 249.019888][T11159] netlink: 'syz.0.1454': attribute type 235 has an invalid length. [ 249.031034][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 249.459486][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'. [ 249.470067][T11177] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 249.505901][T11177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.534881][T11177] gretap3: entered promiscuous mode [ 249.546404][T11177] bond4: (slave gretap3): making interface the new active one [ 249.555389][T11177] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 249.919478][T11197] netlink: 'syz.1.1464': attribute type 16 has an invalid length. [ 249.936304][T11197] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 251.241376][T11244] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.250564][T11244] team0: left allmulticast mode [ 251.260818][T11244] team_slave_0: left allmulticast mode [ 251.267634][T11244] team_slave_1: left allmulticast mode [ 251.273307][T11244] team0: left promiscuous mode [ 251.279520][T11244] team_slave_0: left promiscuous mode [ 251.285370][T11244] team_slave_1: left promiscuous mode [ 251.292264][T11244] bridge0: port 3(team0) entered disabled state [ 251.303177][T11244] team0: Cannot enslave team device to itself [ 251.700305][T11254] __nla_validate_parse: 3 callbacks suppressed [ 251.700338][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 251.939550][T11259] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 251.993131][T11259] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 252.074399][T11265] FAULT_INJECTION: forcing a failure. [ 252.074399][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 252.087687][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.0.1485 Not tainted syzkaller #0 PREEMPT(full) [ 252.087715][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.087728][T11265] Call Trace: [ 252.087737][T11265] [ 252.087746][T11265] dump_stack_lvl+0x189/0x250 [ 252.087781][T11265] ? __pfx____ratelimit+0x10/0x10 [ 252.087812][T11265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.087841][T11265] ? __pfx__printk+0x10/0x10 [ 252.087859][T11265] ? ip6_pol_route+0x547/0x1180 [ 252.087893][T11265] ? fib6_rule_saddr+0xc0/0x420 [ 252.087923][T11265] ? __pfx_ip6_pol_route+0x10/0x10 [ 252.087957][T11265] should_fail_ex+0x414/0x560 [ 252.087994][T11265] should_failslab+0xa8/0x100 [ 252.088018][T11265] kmem_cache_alloc_node_noprof+0x77/0x710 [ 252.088050][T11265] ? __alloc_skb+0x112/0x2d0 [ 252.088078][T11265] __alloc_skb+0x112/0x2d0 [ 252.088103][T11265] alloc_skb_with_frags+0xca/0x890 [ 252.088125][T11265] ? fib_rules_lookup+0x96/0xe90 [ 252.088150][T11265] ? __pfx_fib_rules_lookup+0x10/0x10 [ 252.088172][T11265] ? l3mdev_update_flow+0x29/0x640 [ 252.088201][T11265] sock_alloc_send_pskb+0x84d/0x980 [ 252.088252][T11265] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 252.088310][T11265] ? rcuref_put+0x1b7/0x210 [ 252.088337][T11265] ? __pfx_rcuref_put+0x10/0x10 [ 252.088365][T11265] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 252.088415][T11265] __ip6_append_data+0x2b43/0x3f30 [ 252.088478][T11265] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 252.088529][T11265] ? __pfx___ip6_append_data+0x10/0x10 [ 252.088578][T11265] ? __pfx_ip6_mtu+0x10/0x10 [ 252.088622][T11265] ip6_append_data+0x1c1/0x380 [ 252.088660][T11265] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 252.088690][T11265] icmp6_send+0x1205/0x1940 [ 252.088719][T11265] ? icmp6_send+0x1e9/0x1940 [ 252.088767][T11265] ? __pfx_icmp6_send+0x10/0x10 [ 252.088791][T11265] ? __lock_acquire+0xab9/0xd20 [ 252.088840][T11265] ? ip6_neigh_lookup+0x14e/0x470 [ 252.088871][T11265] ? ip6_neigh_lookup+0x14e/0x470 [ 252.088893][T11265] ? ip6_neigh_lookup+0x397/0x470 [ 252.088918][T11265] ? ip6_neigh_lookup+0x14e/0x470 [ 252.088944][T11265] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 252.088977][T11265] ip6_link_failure+0x3b/0x4c0 [ 252.089008][T11265] ip_tunnel_xmit+0x175b/0x2390 [ 252.089049][T11265] ? ip_tunnel_xmit+0x90/0x2390 [ 252.089103][T11265] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 252.089135][T11265] ? gre_build_header+0x31c/0xa40 [ 252.089179][T11265] ? __pfx_gre_build_header+0x10/0x10 [ 252.089211][T11265] ? iptunnel_handle_offloads+0x249/0x630 [ 252.089248][T11265] gre_tap_xmit+0x590/0x7a0 [ 252.089295][T11265] ? __pfx_gre_tap_xmit+0x10/0x10 [ 252.089322][T11265] ? validate_xmit_skb+0xbc1/0x1270 [ 252.089362][T11265] dev_hard_start_xmit+0x2d7/0x830 [ 252.089412][T11265] sch_direct_xmit+0x241/0x4b0 [ 252.089453][T11265] ? __pfx_sch_direct_xmit+0x10/0x10 [ 252.089500][T11265] __dev_queue_xmit+0x1857/0x3b50 [ 252.089542][T11265] ? __dev_queue_xmit+0x27b/0x3b50 [ 252.089574][T11265] ? ip6t_do_table+0x1db/0x1560 [ 252.089611][T11265] ? __pfx_ip6t_do_table+0x10/0x10 [ 252.089641][T11265] ? ip6t_do_table+0x1376/0x1560 [ 252.089678][T11265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.089708][T11265] ? look_up_lock_class+0x74/0x170 [ 252.089744][T11265] ? register_lock_class+0x51/0x320 [ 252.089774][T11265] ? __lock_acquire+0xab9/0xd20 [ 252.089822][T11265] ? ip6_finish_output2+0xd4c/0x1480 [ 252.089864][T11265] ip6_finish_output2+0xf70/0x1480 [ 252.089928][T11265] ? __pfx_ip6_finish_output2+0x10/0x10 [ 252.089962][T11265] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 252.089994][T11265] ? ip6_finish_output+0x1e5/0x4e0 [ 252.090025][T11265] ? ip6_output+0x126/0x550 [ 252.090055][T11265] ip6_output+0x340/0x550 [ 252.090084][T11265] ? ip6_send_skb+0x10f/0x390 [ 252.090118][T11265] ip6_send_skb+0x1d5/0x390 [ 252.090156][T11265] udp_v6_send_skb+0xc17/0x1830 [ 252.090212][T11265] udp_v6_push_pending_frames+0x130/0x220 [ 252.090249][T11265] udpv6_sendmsg+0xf2e/0x2510 [ 252.090319][T11265] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 252.090361][T11265] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 252.090402][T11265] ? __pfx___might_resched+0x10/0x10 [ 252.090450][T11265] ? aa_sk_perm+0x81e/0x950 [ 252.090481][T11265] ? __lock_acquire+0xab9/0xd20 [ 252.090518][T11265] ? inet_send_prepare+0x5c/0x270 [ 252.090545][T11265] ? inet6_sendmsg+0xe4/0x120 [ 252.090573][T11265] __sock_sendmsg+0xe5/0x270 [ 252.090609][T11265] ____sys_sendmsg+0x52d/0x830 [ 252.090642][T11265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.090680][T11265] ? import_iovec+0x74/0xa0 [ 252.090714][T11265] ___sys_sendmsg+0x21f/0x2a0 [ 252.090743][T11265] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.090817][T11265] ? __fget_files+0x2a/0x420 [ 252.090838][T11265] ? __fget_files+0x3a0/0x420 [ 252.090874][T11265] __sys_sendmmsg+0x227/0x430 [ 252.090907][T11265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 252.090945][T11265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.091004][T11265] ? ksys_write+0x22a/0x250 [ 252.091040][T11265] ? __pfx_ksys_write+0x10/0x10 [ 252.091079][T11265] __x64_sys_sendmmsg+0xa0/0xc0 [ 252.091108][T11265] do_syscall_64+0xfa/0xfa0 [ 252.091139][T11265] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.091170][T11265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.091192][T11265] ? clear_bhb_loop+0x60/0xb0 [ 252.091220][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.091241][T11265] RIP: 0033:0x7fd68078f749 [ 252.091268][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.091286][T11265] RSP: 002b:00007fd6816de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.091310][T11265] RAX: ffffffffffffffda RBX: 00007fd6809e5fa0 RCX: 00007fd68078f749 [ 252.091326][T11265] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 252.091339][T11265] RBP: 00007fd6816de090 R08: 0000000000000000 R09: 0000000000000000 [ 252.091353][T11265] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 252.091366][T11265] R13: 00007fd6809e6038 R14: 00007fd6809e5fa0 R15: 00007ffc1a5e9d88 [ 252.091407][T11265] [ 252.101449][T11259] bond6: entered promiscuous mode [ 252.121012][T11264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'. [ 252.359418][T11259] bond6: entered allmulticast mode [ 252.756733][T11259] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.845140][T11264] bond6 (unregistering): Released all slaves [ 253.022801][T11289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1488'. [ 253.092024][T11284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 253.122910][T11284] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 253.135001][T11284] gretap4: entered promiscuous mode [ 253.140895][T11305] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1491'. [ 253.147817][T11284] gretap4: entered allmulticast mode [ 253.179937][T11305] netlink: 'syz.4.1491': attribute type 2 has an invalid length. [ 253.288599][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 253.435891][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1493'. [ 253.599166][T11322] team0: Device ipvlan1 failed to register rx_handler [ 253.873287][ T1149] tipc: Subscription rejected, illegal request [ 254.408089][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 254.437519][T11367] tc_dump_action: action bad kind [ 254.511330][T11372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1512'. [ 254.709769][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1515'. [ 254.768307][T11390] sch_fq: defrate 0 ignored. [ 255.065595][T11407] syzkaller1: entered promiscuous mode [ 255.087814][T11407] syzkaller1: entered allmulticast mode [ 255.652363][T11447] syzkaller0: entered promiscuous mode [ 255.670492][T11447] syzkaller0: entered allmulticast mode [ 255.765235][T11447] tipc: Enabled bearer , priority 0 [ 255.819277][T11443] tipc: Resetting bearer [ 255.872565][T11443] tipc: Disabling bearer [ 255.894897][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'. [ 255.905395][T11456] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 255.997793][T11456] bond6: entered promiscuous mode [ 256.010614][T11456] bond6: entered allmulticast mode [ 256.024347][T11456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.428035][T11478] syzkaller0: entered promiscuous mode [ 256.433583][T11478] syzkaller0: entered allmulticast mode [ 256.792951][T11501] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 256.832607][T11505] __nla_validate_parse: 3 callbacks suppressed [ 256.832627][T11505] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1553'. [ 256.887814][ T30] audit: type=1800 audit(1763720452.360:5): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1553" name="memory.events" dev="tmpfs" ino=1553 res=0 errno=0 [ 257.021686][T11510] veth7: entered promiscuous mode [ 257.026999][T11510] veth7: entered allmulticast mode [ 257.248413][T11526] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1560'. [ 257.315576][T11531] netlink: 'syz.3.1563': attribute type 11 has an invalid length. [ 257.325574][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 257.326353][T11531] netlink: 'syz.3.1563': attribute type 11 has an invalid length. [ 257.343245][T11531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1563'. [ 257.407204][T11532] netlink: 'syz.3.1563': attribute type 11 has an invalid length. [ 257.421562][T11534] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 257.421603][T11532] netlink: 'syz.3.1563': attribute type 11 has an invalid length. [ 257.439257][T11532] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1563'. [ 257.735061][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1566'. [ 258.164865][T11570] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1568'. [ 258.179605][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1569'. [ 258.339284][T11578] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1572'. [ 258.371682][T11578] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1572'. [ 258.649337][T11591] syzkaller0: entered promiscuous mode [ 258.655078][T11591] syzkaller0: entered allmulticast mode [ 258.929745][T11599] netlink: 'syz.2.1577': attribute type 29 has an invalid length. [ 258.953905][T11599] netlink: 'syz.2.1577': attribute type 29 has an invalid length. [ 259.213637][T11616] hsr_slave_0: left promiscuous mode [ 259.250598][T11616] hsr_slave_1: left promiscuous mode [ 260.095880][T11676] netlink: 'syz.0.1594': attribute type 21 has an invalid length. [ 260.365293][T11687] gre1: entered promiscuous mode [ 260.373003][T11687] gre1: entered allmulticast mode [ 260.523021][T11697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.649031][T11702] macvtap2: entered allmulticast mode [ 260.683708][T11702] veth0_macvtap: entered allmulticast mode [ 260.698993][T11705] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 260.962654][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.266812][T11702] wlan0 speed is unknown, defaulting to 1000 [ 261.467125][T11745] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 261.519328][T11745] `: renamed from bond0 (while UP) [ 261.849146][T11757] __nla_validate_parse: 15 callbacks suppressed [ 261.849168][T11757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1617'. [ 262.510378][T11787] tc_dump_action: action bad kind [ 262.806922][T11805] ip6t_srh: unknown srh invflags 4000 [ 262.915835][T11811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1635'. [ 263.081493][T11818] netlink: 'syz.3.1639': attribute type 13 has an invalid length. [ 263.113118][T11822] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1638'. [ 263.220151][T11830] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 263.239148][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 263.438110][T11837] netlink: 'syz.2.1642': attribute type 18 has an invalid length. [ 263.470484][T11837] netlink: 'syz.2.1642': attribute type 5 has an invalid length. [ 263.486478][T11837] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1642'. [ 263.609647][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 263.739999][T11852] x_tables: duplicate underflow at hook 2 [ 263.770760][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 265.170661][T11859] geneve2: entered promiscuous mode [ 265.189116][T11859] geneve2: entered allmulticast mode [ 265.211458][ T3557] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.231853][ T3557] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.274175][ T3557] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.343181][ T3557] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.375226][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 265.385317][T11871] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1651'. [ 265.565135][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 265.915799][T11908] SET target dimension over the limit! [ 265.968191][T11895] tipc: Enabled bearer , priority 0 [ 266.007413][T11892] syzkaller0: entered promiscuous mode [ 266.012957][T11892] syzkaller0: entered allmulticast mode [ 266.058266][T11891] tipc: Resetting bearer [ 266.113475][T11891] tipc: Disabling bearer [ 266.212531][T11926] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20001 [ 266.227806][T11928] netlink: 'syz.2.1667': attribute type 28 has an invalid length. [ 266.237184][T11928] netlink: 'syz.2.1667': attribute type 3 has an invalid length. [ 266.263307][T11926] netlink: 'syz.1.1665': attribute type 5 has an invalid length. [ 266.669513][T11956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.906739][T11965] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 266.920308][T11970] __nla_validate_parse: 11 callbacks suppressed [ 266.920334][T11970] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1679'. [ 266.958263][T11972] x_tables: duplicate underflow at hook 1 [ 266.985681][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'. [ 266.999977][T11970] netlink: 'syz.0.1679': attribute type 5 has an invalid length. [ 267.011170][T11970] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1679'. [ 267.054266][T11975] Bluetooth: MGMT ver 1.23 [ 267.184272][T11985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1686'. [ 267.197357][T11985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1686'. [ 267.267441][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 267.421894][T11992] tipc: Enabling of bearer rejected, failed to enable media [ 267.443352][T11977] wlan0 speed is unknown, defaulting to 1000 [ 267.613271][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 267.853825][T12020] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 267.864105][T12015] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 267.864992][T12020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1696'. [ 268.029799][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 268.191836][T12029] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1699'. [ 268.501958][T12050] C: renamed from lo (while UP) [ 268.515252][T12050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 268.530840][T12047] syzkaller0: entered promiscuous mode [ 268.539005][T12047] syzkaller0: entered allmulticast mode [ 268.678689][T12056] xfrm1: entered promiscuous mode [ 268.683877][T12056] xfrm1: entered allmulticast mode [ 268.720866][T12054] openvswitch: netlink: Key type 144 is out of range max 32 [ 268.891009][T12059] netlink: 'syz.0.1708': attribute type 25 has an invalid length. [ 268.988978][T12065] SET target dimension over the limit! [ 269.086540][T12074] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 269.105177][T12073] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 269.115064][T12069] "syz.3.1712" (12069) uses obsolete ecb(arc4) skcipher [ 269.115512][T12076] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 269.264484][T12083] syzkaller1: entered promiscuous mode [ 269.281560][T12083] syzkaller1: entered allmulticast mode [ 269.487747][T12092] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 269.502260][T12092] bond5 (unregistering): Released all slaves [ 269.711392][T12106] dvmrp6: entered allmulticast mode [ 270.068701][T12127] syzkaller1: entered promiscuous mode [ 270.074458][T12127] syzkaller1: entered allmulticast mode [ 270.110382][T12137] sctp: [Deprecated]: syz.0.1726 (pid 12137) Use of int in max_burst socket option. [ 270.110382][T12137] Use struct sctp_assoc_value instead [ 271.010499][T12183] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 271.056590][T12183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.120535][T12180] bond7: entered promiscuous mode [ 271.126352][T12180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.147669][T12186] vlan0: entered promiscuous mode [ 271.173230][T12186] bridge0: entered promiscuous mode [ 271.686048][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.056867][T12214] validate_nla: 3 callbacks suppressed [ 272.056893][T12214] netlink: 'syz.3.1746': attribute type 15 has an invalid length. [ 272.093953][T12217] __nla_validate_parse: 11 callbacks suppressed [ 272.093974][T12217] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1743'. [ 272.118618][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 272.235895][T12222] netlink: 'syz.2.1748': attribute type 30 has an invalid length. [ 272.302033][T12222] bond0: option arp_missed_max: invalid value (0) [ 272.308753][T12222] bond0: option arp_missed_max: allowed values 1 - 255 [ 272.309400][T12226] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 272.327873][T12222] bond0 (unregistering): Released all slaves [ 272.359305][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1749'. [ 272.551121][T12240] SET target dimension over the limit! [ 272.615311][T12242] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 273.016487][T12259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1760'. [ 273.027673][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1762'. [ 273.211275][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 273.317068][T12287] netlink: 'syz.1.1769': attribute type 2 has an invalid length. [ 273.761873][T12303] veth7: entered allmulticast mode [ 273.814985][T12308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1776'. [ 274.000281][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 274.164328][T12324] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 274.350961][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 274.384583][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 274.437293][T12337] ip6t_srh: unknown srh invflags 4000 [ 274.594018][T12345] tipc: Started in network mode [ 274.606863][T12349] netlink: 'syz.1.1790': attribute type 33 has an invalid length. [ 274.617186][T12345] tipc: Node identity ac14140f, cluster identity 4711 [ 274.624297][T12345] tipc: New replicast peer: 255.255.255.255 [ 274.633123][T12345] tipc: Enabled bearer , priority 10 [ 274.641070][ T5843] Bluetooth: hci0: command tx timeout [ 274.719735][T12349] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 274.742494][T12349] bond8 (unregistering): Released all slaves [ 274.843856][T12344] tipc: Enabling of bearer rejected, already enabled [ 275.033409][T12371] !: renamed from dummy0 [ 275.047986][T12378] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 275.077759][T12379] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 275.395495][T12398] netlink: 'syz.0.1805': attribute type 32 has an invalid length. [ 275.480899][T12398] bond5: option coupled_control: invalid value (24) [ 275.508261][T12398] bond5 (unregistering): Released all slaves [ 275.599493][T12411] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.756516][ T6684] tipc: Node number set to 2886997007 [ 275.878284][T12424] tipc: New replicast peer: 255.255.255.255 [ 275.885260][T12424] tipc: Enabled bearer , priority 10 [ 275.892092][T12426] lo: Caught tx_queue_len zero misconfig [ 276.324904][T12443] x_tables: duplicate entry at hook 2 [ 276.352970][T12447] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 276.359893][T12443] netlink: 'syz.0.1820': attribute type 3 has an invalid length. [ 276.485028][T12447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.543991][T12453] bond5: (slave veth9): Enslaving as an active interface with a down link [ 276.558012][T12455] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 276.572761][T12454] netlink: 'syz.4.1823': attribute type 12 has an invalid length. [ 276.622169][T12464] tipc: Enabling of bearer rejected, failed to enable media [ 276.810635][T12453] bond5: (slave veth11): Enslaving as an active interface with a down link [ 277.008857][ T6684] tipc: Node number set to 4210991060 [ 277.536359][T12504] __nla_validate_parse: 10 callbacks suppressed [ 277.536381][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1838'. [ 277.923546][T12525] xt_hashlimit: max too large, truncated to 1048576 [ 277.961620][T12528] validate_nla: 1 callbacks suppressed [ 277.961642][T12528] netlink: 'syz.3.1848': attribute type 6 has an invalid length. [ 278.118328][T12539] : entered promiscuous mode [ 278.424940][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 278.643624][T12569] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 278.649019][T12565] gtp0: entered promiscuous mode [ 278.660603][T12565] gtp0: entered allmulticast mode [ 278.739374][T12567] block nbd1: server does not support multiple connections per device. [ 278.757390][T12567] block nbd1: shutting down sockets [ 279.233269][T12606] xt_recent: Unsupported userspace flags (000000b1) [ 279.253707][T12610] netlink: 'syz.2.1872': attribute type 2 has an invalid length. [ 279.268595][T12612] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.280366][T12611] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1874'. [ 279.286466][T12610] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1872'. [ 279.305206][T12612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1875'. [ 279.322821][T12616] netlink: 'syz.0.1876': attribute type 83 has an invalid length. [ 279.499633][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 279.571527][T12630] bond0: Caught tx_queue_len zero misconfig [ 279.640762][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 279.653981][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1881'. [ 279.696536][T12632] : renamed from hsr0 [ 279.732564][T12635] bridge0: entered allmulticast mode [ 280.000655][T12657] tap0: tun_chr_ioctl cmd 1074025677 [ 280.008483][T12657] tap0: linktype set to 65534 [ 280.310928][T12675] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 280.320680][T12675] team0: Device macvtap2 is already an upper device of the team interface [ 280.400635][T12676] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 280.419166][T12676] team0: Device macvtap2 is already an upper device of the team interface [ 280.472796][T12682] tipc: Enabled bearer , priority 0 [ 280.481575][T12683] tipc: Enabling of bearer rejected, already enabled [ 280.490914][T12681] syzkaller0: entered promiscuous mode [ 280.497082][T12681] syzkaller0: entered allmulticast mode [ 280.640198][T12680] tipc: Resetting bearer [ 280.680530][T12680] tipc: Disabling bearer [ 280.743694][T12689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.763592][T12689] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 280.933751][T12693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.518419][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 281.567836][T12733] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1908'. [ 282.097680][T12763] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 282.707062][T12797] __nla_validate_parse: 6 callbacks suppressed [ 282.707082][T12797] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1930'. [ 282.750605][T12802] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 282.801314][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 282.843976][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.874847][T12803] bond6: (slave gretap1): making interface the new active one [ 282.897112][T12803] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 282.906103][T12806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1932'. [ 283.281034][T12833] syzkaller0: entered promiscuous mode [ 283.287428][T12833] syzkaller0: entered allmulticast mode [ 283.337314][T12840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1941'. [ 283.432797][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1944'. [ 283.464755][T12843] ip6gre1: entered promiscuous mode [ 283.489979][T12845] veth0: entered promiscuous mode [ 283.510343][T12844] veth0: left promiscuous mode [ 283.723586][T12863] batadv1: left allmulticast mode [ 283.730528][T12863] batadv1: left promiscuous mode [ 283.738218][T12863] bridge0: port 4(batadv1) entered disabled state [ 283.745502][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 283.763257][T12863] team0: left allmulticast mode [ 283.768578][T12863] team_slave_0: left allmulticast mode [ 283.776608][T12863] team_slave_1: left allmulticast mode [ 283.783513][T12863] team0: left promiscuous mode [ 283.790548][T12863] team_slave_0: left promiscuous mode [ 283.798472][T12863] team_slave_1: left promiscuous mode [ 283.804750][T12863] bridge0: port 3(team0) entered disabled state [ 283.815908][T12863] bridge_slave_1: left allmulticast mode [ 283.822279][T12863] bridge_slave_1: left promiscuous mode [ 283.828606][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.840393][T12863] bridge_slave_0: left promiscuous mode [ 283.846825][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.112667][T12884] syz.4.1956: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.179237][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.4.1956 Not tainted syzkaller #0 PREEMPT(full) [ 284.179273][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.179288][T12884] Call Trace: [ 284.179297][T12884] [ 284.179308][T12884] dump_stack_lvl+0x189/0x250 [ 284.179351][T12884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.179384][T12884] ? __pfx__printk+0x10/0x10 [ 284.179409][T12884] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.179443][T12884] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.179477][T12884] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 284.179513][T12884] warn_alloc+0x214/0x310 [ 284.179549][T12884] ? stack_depot_save_flags+0x40/0x860 [ 284.179592][T12884] ? __pfx_warn_alloc+0x10/0x10 [ 284.179629][T12884] ? kasan_save_track+0x3e/0x80 [ 284.179661][T12884] ? __kasan_kmalloc+0x93/0xb0 [ 284.179697][T12884] ? xsk_setsockopt+0x4dc/0x8d0 [ 284.179733][T12884] ? do_sock_setsockopt+0x17c/0x1b0 [ 284.179755][T12884] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 284.179777][T12884] ? do_syscall_64+0xfa/0xfa0 [ 284.179810][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.179845][T12884] __vmalloc_node_range_noprof+0x125/0x12d0 [ 284.179916][T12884] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.179956][T12884] ? __kasan_kmalloc+0x93/0xb0 [ 284.179998][T12884] vmalloc_user_noprof+0xad/0xf0 [ 284.180032][T12884] ? xskq_create+0xbf/0x170 [ 284.180064][T12884] xskq_create+0xbf/0x170 [ 284.180099][T12884] xsk_init_queue+0xb0/0x110 [ 284.180133][T12884] xsk_setsockopt+0x4dc/0x8d0 [ 284.180165][T12884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.180199][T12884] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.180234][T12884] ? aa_sock_opt_perm+0xff/0x1b0 [ 284.180274][T12884] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.180296][T12884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.180328][T12884] do_sock_setsockopt+0x17c/0x1b0 [ 284.180357][T12884] __x64_sys_setsockopt+0x13f/0x1b0 [ 284.180387][T12884] do_syscall_64+0xfa/0xfa0 [ 284.180420][T12884] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.180453][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.180477][T12884] ? clear_bhb_loop+0x60/0xb0 [ 284.180505][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.180527][T12884] RIP: 0033:0x7f714998f749 [ 284.180549][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.180570][T12884] RSP: 002b:00007f714a769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.180595][T12884] RAX: ffffffffffffffda RBX: 00007f7149be5fa0 RCX: 00007f714998f749 [ 284.180612][T12884] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 284.180626][T12884] RBP: 00007f7149a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 284.180640][T12884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.180655][T12884] R13: 00007f7149be6038 R14: 00007f7149be5fa0 R15: 00007ffc5f8bcf48 [ 284.180695][T12884] [ 284.180725][T12884] Mem-Info: [ 284.482349][T12884] active_anon:5870 inactive_anon:0 isolated_anon:0 [ 284.482349][T12884] active_file:3077 inactive_file:39952 isolated_file:0 [ 284.482349][T12884] unevictable:768 dirty:67 writeback:0 [ 284.482349][T12884] slab_reclaimable:11701 slab_unreclaimable:137371 [ 284.482349][T12884] mapped:31382 shmem:1362 pagetables:1288 [ 284.482349][T12884] sec_pagetables:0 bounce:0 [ 284.482349][T12884] kernel_misc_reclaimable:0 [ 284.482349][T12884] free:1293849 free_pcp:14064 free_cma:0 [ 284.533258][T12884] Node 0 active_anon:23480kB inactive_anon:0kB active_file:12308kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125528kB dirty:268kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13668kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.537523][T12896] pimreg: left allmulticast mode [ 284.573261][T12884] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.618323][T12884] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.653736][T12884] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 284.660319][T12884] Node 0 DMA32 free:1268608kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23380kB inactive_anon:0kB active_file:12308kB inactive_file:159604kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:38300kB local_pcp:17244kB free_cma:0kB [ 284.696584][T12884] lowmem_reserve[]: 0 0 0 0 0 [ 284.702627][T12884] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.771240][T12884] lowmem_reserve[]: 0 0 0 0 0 [ 284.786583][T12884] Node 1 Normal free:3891428kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17988kB local_pcp:10240kB free_cma:0kB [ 284.829189][T12884] lowmem_reserve[]: 0 0 0 0 0 [ 284.840462][T12884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.895430][T12884] Node 0 DMA32: 388*4kB (ME) 300*8kB (ME) 228*16kB (UME) 219*32kB (UME) 224*64kB (UME) 62*128kB (UME) 37*256kB (UME) 19*512kB (UME) 17*1024kB (UM) 8*2048kB (UM) 287*4096kB (UM) = 1265424kB [ 284.997555][T12884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.039515][T12884] Node 1 Normal: 209*4kB (UM) 54*8kB (UME) 47*16kB (UME) 140*32kB (UME) 36*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891428kB [ 285.091641][T12884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.119837][T12884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.143107][T12914] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 285.162365][T12884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.182587][T12884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.216631][T12884] 44387 total pagecache pages [ 285.221404][T12884] 0 pages in swap cache [ 285.246226][T12884] Free swap = 124996kB [ 285.261025][T12884] Total swap = 124996kB [ 285.265267][T12884] 2097051 pages RAM [ 285.299480][T12884] 0 pages HighMem/MovableOnly [ 285.304231][T12884] 424122 pages reserved [ 285.319080][T12884] 0 pages cma reserved [ 285.383384][T12933] veth11: entered promiscuous mode [ 285.631016][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 285.770420][ T30] audit: type=1107 audit(1763720481.230:6): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 285.810635][T12959] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 286.030505][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 286.056315][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 286.065379][T12976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1979'. [ 286.167194][T12984] gre0: entered promiscuous mode [ 286.176304][T12984] gre0: entered allmulticast mode [ 286.218466][T12987] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 286.234511][T12987] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 286.937726][T13032] tipc: Enabling of bearer rejected, failed to enable media [ 288.067209][T13094] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 288.092400][T13094] bond0: (slave team0): Releasing backup interface [ 288.129754][T13094] bridge0: port 5(team0) entered blocking state [ 288.136469][T13094] bridge0: port 5(team0) entered disabled state [ 288.143246][T13094] team0: entered allmulticast mode [ 288.153263][T13094] team_slave_0: entered allmulticast mode [ 288.160830][T13094] team_slave_1: entered allmulticast mode [ 288.169898][T13094] team0: entered promiscuous mode [ 288.175097][T13094] team_slave_0: entered promiscuous mode [ 288.192883][T13094] team_slave_1: entered promiscuous mode [ 288.223154][T13096] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 288.243234][T13097] __nla_validate_parse: 5 callbacks suppressed [ 288.243252][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2020'. [ 288.266933][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 288.276297][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 288.303734][T13107] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 289.041710][T13147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.370067][T13167] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2045'. [ 289.502934][T13172] syzkaller0: entered promiscuous mode [ 289.526212][T13172] syzkaller0: entered allmulticast mode [ 289.919148][T13192] erspan0: entered promiscuous mode [ 289.931553][T13192] erspan0: entered allmulticast mode [ 290.312317][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 290.341448][ T1149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.341594][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 290.366714][ T1149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.379161][T13225] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 290.392461][ T1149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.413430][ T1149] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.461299][T13216] tipc: Enabled bearer , priority 0 [ 290.481586][T13216] syzkaller0: entered promiscuous mode [ 290.487668][T13216] syzkaller0: entered allmulticast mode [ 290.500058][T13216] tipc: Resetting bearer [ 290.512071][T13214] tipc: Resetting bearer [ 290.550569][T13214] tipc: Disabling bearer [ 290.610803][T13238] netlink: 'syz.2.2068': attribute type 10 has an invalid length. [ 290.640176][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.657378][T13238] bridge_slave_1: left allmulticast mode [ 290.663776][T13238] bridge_slave_1: left promiscuous mode [ 290.670343][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.725495][T13240] tipc: Enabled bearer , priority 0 [ 290.733693][T13242] IPVS: set_ctl: invalid protocol: 103 172.30.0.5:20002 [ 290.742657][T13240] syzkaller0: entered promiscuous mode [ 290.757312][T13240] syzkaller0: entered allmulticast mode [ 290.779437][T13239] tipc: Resetting bearer [ 290.801098][T13239] tipc: Disabling bearer [ 290.828960][T13244] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2071'. [ 290.843888][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'. [ 290.851684][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 290.869185][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'. [ 291.150798][T13262] netlink: 'syz.1.2078': attribute type 11 has an invalid length. [ 291.180848][T13259] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 291.193898][T13259] bond8 (unregistering): Released all slaves [ 291.234201][T13262] bridge3: entered promiscuous mode [ 291.241433][T13262] bridge3: entered allmulticast mode [ 291.525266][T13264] veth0_macvtap (unregistering): left allmulticast mode [ 291.689126][T13294] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 291.697065][T13294] netlink: 'syz.1.2084': attribute type 2 has an invalid length. [ 292.436766][T13322] bond8: option all_slaves_active: invalid value (222) [ 292.451820][T13322] bond8 (unregistering): Released all slaves [ 293.011445][T13362] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 293.216564][T13369] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 293.221661][T13370] x_tables: duplicate underflow at hook 2 [ 293.463288][T13388] netlink: 'syz.0.2108': attribute type 5 has an invalid length. [ 293.767123][T13403] __nla_validate_parse: 13 callbacks suppressed [ 293.767145][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.831298][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.846954][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.950942][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 294.090272][T13422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2118'. [ 294.132447][T13420] bond0: entered promiscuous mode [ 294.139502][T13420] bond0: entered allmulticast mode [ 294.148870][T13420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.180693][T13426] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2122'. [ 294.207761][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 294.454992][T13448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2126'. [ 294.643501][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 294.661825][T13454] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 294.743261][T13442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.971342][T13471] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 294.987031][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 294.990462][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.005892][T13471] `: (slave batadv0): Enslaving as an active interface with an up link [ 295.033872][T13471] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 295.056160][T13471] batadv0: entered promiscuous mode [ 295.071137][T13471] batadv0: entered allmulticast mode [ 295.105159][T13471] `: (slave batadv0): Releasing backup interface [ 295.148286][T13471] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 297.921285][T13545] bond4: option all_slaves_active: invalid value (222) [ 297.932615][T13545] bond4 (unregistering): Released all slaves [ 297.941012][T13555] raw_sendmsg: syz.0.2153 forgot to set AF_INET. Fix it! [ 298.199438][T13568] syzkaller0: entered promiscuous mode [ 298.207701][T13568] syzkaller0: entered allmulticast mode [ 298.360862][T13582] netlink: 'syz.2.2163': attribute type 11 has an invalid length. [ 298.550990][T13592] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 298.651802][T13598] netlink: 'syz.0.2167': attribute type 10 has an invalid length. [ 298.902096][T13608] bond8: option lp_interval: invalid value (0) [ 298.916219][T13608] bond8: option lp_interval: allowed values 1 - 2147483647 [ 298.937865][T13608] bond8 (unregistering): Released all slaves [ 299.774836][T13619] netlink: 'syz.0.2173': attribute type 23 has an invalid length. [ 299.859181][T13619] __nla_validate_parse: 42 callbacks suppressed [ 299.859211][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 300.253767][T13649] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 300.323717][T13649] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 300.334454][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 300.357373][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 300.369733][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 300.378710][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 300.388468][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 300.520514][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2188'. [ 300.542366][T13669] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 300.621496][T13677] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2188'. [ 300.648065][T13676] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2189'. [ 300.734624][T13669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.754240][T13677] bond8: (slave gretap1): making interface the new active one [ 300.766719][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2190'. [ 300.778236][T13677] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 300.845543][T13685] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 300.901550][T13685] netlink: 'syz.3.2191': attribute type 3 has an invalid length. [ 300.961467][T13685] NCSI netlink: No device for ifindex 813332851 [ 301.058162][T13692] syzkaller0: entered promiscuous mode [ 301.063707][T13692] syzkaller0: entered allmulticast mode [ 301.184151][T13692] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 301.220381][T13692] bond9 (unregistering): Released all slaves [ 301.487108][T13721] syzkaller1: entered promiscuous mode [ 301.492650][T13721] syzkaller1: entered allmulticast mode [ 301.825190][T13739] xt_l2tp: v2 doesn't support IP mode [ 301.853410][T13743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.910404][T13749] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 302.842520][T13780] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 303.145136][T13790] bond4: option xmit_hash_policy: invalid value (64) [ 303.175856][T13790] bond4 (unregistering): Released all slaves [ 303.418942][T13812] wlan0: mtu less than device minimum [ 303.748789][T13838] vlan0: entered allmulticast mode [ 303.753997][T13838] gretap0: entered allmulticast mode [ 303.921019][T13846] netlink: 'syz.1.2234': attribute type 2 has an invalid length. [ 303.937633][T13849] sctp: [Deprecated]: syz.4.2235 (pid 13849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.937633][T13849] Use struct sctp_sack_info instead [ 303.964202][T13848] sctp: [Deprecated]: syz.4.2235 (pid 13848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.964202][T13848] Use struct sctp_sack_info instead [ 303.965108][T13846] : entered promiscuous mode [ 304.040348][T13860] netlink: 'syz.0.2236': attribute type 4 has an invalid length. [ 304.186598][T13866] sctp: [Deprecated]: syz.0.2239 (pid 13866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.186598][T13866] Use struct sctp_sack_info instead [ 304.189078][T13864] tipc: Enabled bearer , priority 0 [ 304.234330][T13864] syzkaller0: entered promiscuous mode [ 304.244491][T13864] syzkaller0: entered allmulticast mode [ 304.305555][T13864] tipc: Resetting bearer [ 304.730747][T13863] tipc: Resetting bearer [ 304.788537][T13863] tipc: Disabling bearer [ 304.909163][T13887] syzkaller0: entered promiscuous mode [ 304.914803][T13887] syzkaller0: entered allmulticast mode [ 305.412199][T13914] __nla_validate_parse: 14 callbacks suppressed [ 305.412221][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2252'. [ 306.795166][T13897] netlink: 'syz.0.2247': attribute type 9 has an invalid length. [ 306.803841][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 306.922634][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 306.946847][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'. [ 306.955808][T13916] netlink: 'syz.1.2253': attribute type 12 has an invalid length. [ 306.987767][T13916] netlink: 'syz.1.2253': attribute type 11 has an invalid length. [ 307.311785][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 307.521302][T13951] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 307.572302][T13951] netlink: 'syz.4.2264': attribute type 12 has an invalid length. [ 307.723458][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 307.754699][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 307.764974][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 307.778784][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 308.168080][T13984] x_tables: duplicate underflow at hook 1 [ 308.872184][T14003] wlan0 speed is unknown, defaulting to 1000 [ 308.967118][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 309.249160][T14023] netlink: 'syz.2.2286': attribute type 7 has an invalid length. [ 309.278231][T14023] netlink: 'syz.2.2286': attribute type 8 has an invalid length. [ 309.328031][T14005] bridge: RTM_NEWNEIGH with invalid ether address [ 309.352917][T14025] netlink: 'syz.3.2287': attribute type 9 has an invalid length. [ 309.370602][T14031] "syz.1.2289" (14031) uses obsolete ecb(arc4) skcipher [ 309.397770][T14025] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 309.527769][T14028] 8021q: adding VLAN 0 to HW filter on device bond9 [ 309.550294][T14028] bond8: (slave bond9): making interface the new active one [ 309.598911][T14028] bond8: (slave bond9): Enslaving as an active interface with an up link [ 309.710186][T14036] netlink: 'syz.1.2292': attribute type 27 has an invalid length. [ 309.715052][T14045] x_tables: duplicate underflow at hook 1 [ 309.756434][T14036] netlink: 'syz.1.2292': attribute type 4 has an invalid length. [ 309.861480][T14050] tipc: Enabling of bearer rejected, already enabled [ 309.861829][T14047] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 309.944438][T14047] bond0: (slave wlan1): Opening slave failed [ 309.970956][T14054] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 309.972324][T14046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.152582][T14067] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 310.510480][T14081] xt_hashlimit: size too large, truncated to 1048576 [ 311.016979][T14105] xt_limit: Overflow, try lower: 604147548/4200216962 [ 311.109428][T14113] __nla_validate_parse: 8 callbacks suppressed [ 311.109447][T14113] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2313'. [ 311.295036][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2314'. [ 311.580442][T14132] IPv6: sit1: Disabled Multicast RS [ 312.054438][T14162] netlink: 'syz.4.2324': attribute type 5 has an invalid length. [ 312.084160][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 313.104439][T14216] 8021q: VLANs not supported on sit0 [ 313.112311][T14217] 8021q: VLANs not supported on sit0 [ 313.443671][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 313.520454][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 313.641542][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.813971][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.832405][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.089695][T14251] : entered promiscuous mode [ 314.229220][ T50] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.278281][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.311924][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.348078][ T50] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.375774][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.401018][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.492857][ T50] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.533418][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.543125][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.581047][ T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.601956][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.644586][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.899892][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 315.031057][T14308] netlink: 'syz.0.2359': attribute type 25 has an invalid length. [ 315.032198][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'. [ 315.052291][T14308] netlink: 'syz.0.2359': attribute type 7 has an invalid length. [ 315.127454][T14314] syzkaller1: entered allmulticast mode [ 315.177984][T14311] erspan0: entered promiscuous mode [ 315.278595][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 315.935942][T14364] 8021q: VLANs not supported on sit0 [ 316.105821][T14363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2374'. [ 316.155805][T14363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2374'. [ 316.432423][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 316.629013][T14404] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2381'. [ 317.045865][T14420] syzkaller0: entered promiscuous mode [ 317.068695][T14420] syzkaller0: entered allmulticast mode [ 317.398293][T14436] tipc: Enabled bearer , priority 0 [ 317.479007][T14442] tipc: Resetting bearer [ 317.522345][T14443] delete_channel: no stack [ 317.671634][T14435] tipc: Disabling bearer [ 318.055095][T14470] netlink: 'syz.0.2392': attribute type 5 has an invalid length. [ 318.064273][T14463] netlink: 'syz.0.2392': attribute type 5 has an invalid length. [ 318.246284][T14482] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2398'. [ 318.257748][T14482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2398'. [ 318.475122][T14469] wlan0 speed is unknown, defaulting to 1000 [ 318.517572][T14494] bridge_slave_0: left allmulticast mode [ 318.537440][T14494] bridge_slave_0: left promiscuous mode [ 318.543615][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.632907][T14502] RDS: rds_bind could not find a transport for fe80::b, load rds_tcp or rds_rdma? [ 318.639323][T14503] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2401'. [ 318.693176][T14503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2401'. [ 319.275469][T14498] wlan0 speed is unknown, defaulting to 1000 [ 320.070963][T14540] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.108239][T14541] syzkaller0: entered promiscuous mode [ 320.113921][T14541] syzkaller0: entered allmulticast mode [ 322.401084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.840158][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.020200][T14553] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2413'. [ 385.073302][ T6684] IPVS: starting estimator thread 0... [ 385.167280][T14560] IPVS: using max 25 ests per chain, 60000 per kthread [ 385.196271][T14562] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2419'. [ 385.331283][T14571] xt_NFQUEUE: number of total queues is 0 [ 385.485292][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 385.520407][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 385.578427][T14576] bridge0: port 6(vlan0) entered blocking state [ 385.585111][T14576] bridge0: port 6(vlan0) entered disabled state [ 385.597146][T14576] vlan0: entered allmulticast mode [ 385.615690][T14576] vlan0: left allmulticast mode [ 385.780594][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2428'. [ 386.085913][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 386.371673][T14625] openvswitch: netlink: IP tunnel dst address not specified [ 386.494326][T14632] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2442'. [ 386.514151][T14635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2444'. [ 386.537095][T14635] netlink: 162 bytes leftover after parsing attributes in process `syz.0.2444'. [ 386.552292][T14635] netlink: 249 bytes leftover after parsing attributes in process `syz.0.2444'. [ 386.621244][T14640] ip6tnl0: Caught tx_queue_len zero misconfig [ 387.340716][T14679] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 387.350522][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.459489][T14681] bond10 (unregistering): Released all slaves [ 387.893356][T14715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.597428][T14750] can: request_module (can-proto-0) failed. [ 388.726164][T14767] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 388.745535][T14753] x_tables: duplicate underflow at hook 2 [ 388.774940][T14769] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20003 [ 388.785022][T14769] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 389.094246][T14784] syzkaller1: entered promiscuous mode [ 389.123363][T14784] syzkaller1: entered allmulticast mode [ 389.153573][T14788] netdevsim netdevsim4 v: renamed from netdevsim0 [ 389.159373][T14784] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20004 [ 389.740634][T14820] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20002 [ 390.187138][T14851] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 390.209198][T14851] __nla_validate_parse: 25 callbacks suppressed [ 390.209217][T14851] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2500'. [ 390.242388][T14854] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 390.251582][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 390.294868][T14854] netlink: 'syz.3.2499': attribute type 2 has an invalid length. [ 390.351805][T14854] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2499'. [ 390.427344][T14864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.446733][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 390.512099][T14864] bond4: option xmit_hash_policy: invalid value (64) [ 390.525392][T14864] bond4 (unregistering): Released all slaves [ 390.557943][T14851] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 390.579492][T14851] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 390.648828][T14875] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 390.671712][T14875] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2505'. [ 391.066200][T14892] sctp: [Deprecated]: syz.3.2510 (pid 14892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.066200][T14892] Use struct sctp_sack_info instead [ 391.269716][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2513'. [ 391.322633][T14911] netlink: 'syz.0.2512': attribute type 9 has an invalid length. [ 391.602812][T14927] tipc: Enabled bearer , priority 0 [ 391.627161][T14925] syzkaller0: entered promiscuous mode [ 391.632733][T14925] syzkaller0: entered allmulticast mode [ 391.650805][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 391.725353][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'. [ 391.752243][T14929] netlink: 'syz.3.2518': attribute type 1 has an invalid length. [ 391.811955][T14927] tipc: Resetting bearer [ 391.888988][T14927] tipc: Disabling bearer [ 392.319118][ T5838] Bluetooth: hci0: command tx timeout [ 392.323479][T14965] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 392.440457][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 392.479629][T14965] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.500647][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2531'. [ 392.519553][T14980] SET target dimension over the limit! [ 392.561560][T14971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.575859][T14971] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 392.590418][T14971] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 392.665287][T14975] veth9: entered promiscuous mode [ 392.686405][T14975] bond7: (slave veth9): Enslaving as an active interface with a down link [ 393.229324][T15011] syzkaller0: entered promiscuous mode [ 393.252921][T15011] syzkaller0: entered allmulticast mode [ 393.447347][T15030] xt_SECMARK: invalid mode: 9 [ 394.091496][T15068] batadv1: entered allmulticast mode [ 394.257789][T15070] bridge0: entered promiscuous mode [ 394.271628][T15070] batadv_slave_1: entered promiscuous mode [ 394.297891][T15070] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.380752][T15080] netlink: 'syz.3.2551': attribute type 5 has an invalid length. [ 394.390910][T15076] bond5: option resend_igmp: invalid value (32767) [ 394.397779][T15076] bond5: option resend_igmp: allowed values 0 - 255 [ 394.482121][T15076] bond5 (unregistering): Released all slaves [ 395.055526][T15111] netlink: 'syz.0.2558': attribute type 11 has an invalid length. [ 395.377945][T15132] veth0: entered promiscuous mode [ 395.522710][T15143] netlink: 'syz.2.2567': attribute type 11 has an invalid length. [ 395.545233][T15143] netlink: 'syz.2.2567': attribute type 11 has an invalid length. [ 395.570461][T15143] __nla_validate_parse: 19 callbacks suppressed [ 395.570483][T15143] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2567'. [ 395.587390][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 395.612774][T15129] veth0: left promiscuous mode [ 395.751969][T15150] netlink: 'syz.3.2569': attribute type 4 has an invalid length. [ 395.859626][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 395.893096][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.901488][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.909502][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.916402][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 395.917570][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.934250][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.942257][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.950273][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.958283][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.966333][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.974439][T15153] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.979579][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 396.140745][T15165] xt_CT: No such helper "pptp" [ 396.890745][T15208] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 396.926128][T15208] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 396.954341][T15208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2581'. [ 397.053675][T15218] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2584'. [ 397.086414][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2582'. [ 397.356846][T15232] tipc: Enabled bearer , priority 0 [ 397.377256][T15229] syzkaller0: entered promiscuous mode [ 397.384217][T15229] syzkaller0: entered allmulticast mode [ 397.667416][T15229] tipc: Resetting bearer [ 398.029250][T15229] tipc: Disabling bearer [ 398.366306][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 398.403887][T15264] netlink: 'syz.3.2596': attribute type 1 has an invalid length. [ 398.573954][T15268] gretap2: entered promiscuous mode [ 398.683092][T15282] tipc: Enabled bearer , priority 0 [ 398.691308][T15282] syzkaller0: entered promiscuous mode [ 398.734659][T15282] syzkaller0: entered allmulticast mode [ 398.763447][T15284] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 398.784450][T15282] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 398.958708][T15282] tipc: Resetting bearer [ 399.012592][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2606'. [ 399.041662][T15282] tipc: Disabling bearer [ 399.432482][T15330] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 399.451488][T15330] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 399.934851][T15359] Cannot find set identified by id 3 to match [ 400.302724][T15368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.361773][T15368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.552998][T15368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.575174][T15368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.598777][T15398] xt_hashlimit: invalid rate [ 400.760530][T15368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.779887][T15368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.977767][T15368] netdevsim netdevsim4 v (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.015362][T15368] netdevsim netdevsim4 v (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.222032][T15428] __nla_validate_parse: 3 callbacks suppressed [ 401.222053][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'. [ 401.354773][ T50] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.364454][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.469893][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.488457][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.539748][ T3516] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.548293][ T3516] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.575053][ T3516] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.584540][ T3516] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.773508][T15458] netlink: 'syz.2.2651': attribute type 8 has an invalid length. [ 402.046115][T15469] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 402.145507][T15478] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 402.162888][T15478] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 402.193513][T15478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2660'. [ 403.074040][T15535] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 403.097610][T15535] veth0_virt_wifi: entered allmulticast mode [ 403.109344][T15537] netlink: 444 bytes leftover after parsing attributes in process `syz.4.2680'. [ 403.143649][T15537] netlink: 'syz.4.2680': attribute type 4 has an invalid length. [ 403.203956][T15540] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 403.254948][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 403.372563][T15552] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 403.409136][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 403.458562][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 403.564247][T15564] tipc: Enabled bearer , priority 0 [ 403.589207][T15563] syzkaller0: entered promiscuous mode [ 403.594746][T15563] syzkaller0: entered allmulticast mode [ 403.681589][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2689'. [ 403.719471][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 403.739399][T15568] tipc: Resetting bearer [ 403.744321][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2689'. [ 403.751922][T15573] netlink: 'syz.4.2690': attribute type 11 has an invalid length. [ 403.776712][T15573] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 403.784639][T15573] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.2690'. [ 403.831304][T15568] tipc: Disabling bearer [ 403.958345][T15583] netlink: 'syz.1.2693': attribute type 21 has an invalid length. [ 403.967920][T15583] netlink: 'syz.1.2693': attribute type 5 has an invalid length. [ 404.098134][T15589] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 404.200649][T15594] veth1_to_bond: entered allmulticast mode [ 404.349635][T15594] bond0: (slave bond_slave_1): Releasing backup interface [ 404.426584][T15594] veth1_to_bond (unregistering): left allmulticast mode [ 404.520883][T15608] ip6gre2: entered promiscuous mode [ 404.735775][T15622] bond11: entered promiscuous mode [ 404.754730][T15622] bond11: entered allmulticast mode [ 404.764365][T15622] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.643141][T15684] net_ratelimit: 48 callbacks suppressed [ 405.643182][T15684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.924270][T15692] macvtap0: entered allmulticast mode [ 405.930912][T15692] macvtap0: refused to change device tx_queue_len [ 406.286578][T15701] netdevsim netdevsim2 v: renamed from netdevsim0 [ 406.881358][T15716] __nla_validate_parse: 20 callbacks suppressed [ 406.881380][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2730'. [ 406.984575][T15718] veth0_to_bond: entered allmulticast mode [ 407.118513][T15724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2732'. [ 407.889038][T15770] validate_nla: 10 callbacks suppressed [ 407.889059][T15770] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 407.949318][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 408.024425][T15770] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 408.094392][T15789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2748'. [ 408.128857][T15779] syzkaller0: entered promiscuous mode [ 408.144831][T15779] syzkaller0: entered allmulticast mode [ 410.153612][T15828] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2760'. [ 410.605845][T15853] netlink: 'syz.3.2772': attribute type 32 has an invalid length. [ 410.614158][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 410.617500][T15854] xt_CONNSECMARK: invalid mode: 0 [ 410.676676][T15853] bond12: option coupled_control: invalid value (6) [ 410.699834][T15853] bond12 (unregistering): Released all slaves [ 410.795398][T15868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.831609][T15870] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2776'. [ 410.928413][T15872] netlink: 'syz.1.2777': attribute type 1 has an invalid length. [ 410.961690][T15872] netlink: 9814 bytes leftover after parsing attributes in process `syz.1.2777'. [ 411.233990][T15895] xt_hashlimit: max too large, truncated to 1048576 [ 411.258753][T15888] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2781'. [ 411.333030][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 411.750779][T15916] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 411.798139][ T13] netdevsim netdevsim2 v: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.816136][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.882485][ T3516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.911623][ T3516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.259078][T15943] __nla_validate_parse: 2 callbacks suppressed [ 412.259099][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 412.273233][T15874] wlan0 speed is unknown, defaulting to 1000 [ 412.338120][T15949] netlink: 'syz.1.2799': attribute type 10 has an invalid length. [ 412.375495][T15949] bridge0: port 4(dummy0) entered disabled state [ 412.403288][T15949] dummy0: left allmulticast mode [ 412.412467][T15951] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2800'. [ 412.426354][T15949] dummy0: left promiscuous mode [ 412.431537][T15949] bridge0: port 4(dummy0) entered disabled state [ 412.442598][T15959] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2800'. [ 412.465162][T15949] team0: Port device dummy0 added [ 412.514834][T15947] tipc: Enabled bearer , priority 0 [ 412.601498][T15947] syzkaller0: entered promiscuous mode [ 412.614578][T15947] syzkaller0: entered allmulticast mode [ 412.632724][T15962] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2802'. [ 412.656879][T15968] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 412.687951][T15960] tipc: Resetting bearer [ 412.838577][T15947] tipc: Resetting bearer [ 412.868079][T15947] tipc: Disabling bearer [ 413.099758][T15981] netlink: 'syz.1.2807': attribute type 16 has an invalid length. [ 413.110945][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2807'. [ 413.128250][T15981] netlink: 'syz.1.2807': attribute type 21 has an invalid length. [ 413.188565][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 413.369559][T15991] geneve2: entered promiscuous mode [ 413.385092][T15991] geneve2: entered allmulticast mode [ 413.403054][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 413.429436][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 413.452210][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 413.514514][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 413.892436][T16020] gtp1: entered promiscuous mode [ 413.904720][T16020] gtp1: entered allmulticast mode [ 413.919155][T16026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2820'. [ 414.134486][T16040] netlink: 'syz.1.2822': attribute type 63 has an invalid length. [ 414.867257][T16080] netlink: 'syz.0.2833': attribute type 21 has an invalid length. [ 414.883748][T16074] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2831'. [ 414.894042][T16074] openvswitch: netlink: ufid size 1142 bytes exceeds the range (1, 16) [ 414.902634][T16074] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 414.920538][T16080] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2833'. [ 414.941944][T16074] syzkaller0: entered promiscuous mode [ 414.950793][T16074] syzkaller0: entered allmulticast mode [ 415.462819][T16098] lo: entered promiscuous mode [ 415.495401][T16098] netlink: 'syz.3.2841': attribute type 2 has an invalid length. [ 415.526091][T16098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.875145][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.894992][T16114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2844'. [ 415.904404][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.915333][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.938226][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.947832][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.976505][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.046645][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.055482][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.097662][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.126298][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.672892][T16134] [ 416.675292][T16134] ====================================================== [ 416.682337][T16134] WARNING: possible circular locking dependency detected [ 416.689401][T16134] syzkaller #0 Not tainted [ 416.693848][T16134] ------------------------------------------------------ [ 416.700876][T16134] syz.2.2849/16134 is trying to acquire lock: [ 416.706946][T16134] ffffffff8f426a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 416.716455][T16134] [ 416.716455][T16134] but task is already holding lock: [ 416.723827][T16134] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 416.733420][T16134] [ 416.733420][T16134] which lock already depends on the new lock. [ 416.733420][T16134] [ 416.743825][T16134] [ 416.743825][T16134] the existing dependency chain (in reverse order) is: [ 416.752850][T16134] [ 416.752850][T16134] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 416.760775][T16134] lock_acquire+0x120/0x360 [ 416.765816][T16134] _raw_spin_lock_bh+0x36/0x50 [ 416.771209][T16134] nr_rt_ioctl+0x390/0xd50 [ 416.776165][T16134] sock_do_ioctl+0xdc/0x300 [ 416.781211][T16134] sock_ioctl+0x576/0x790 [ 416.786078][T16134] __se_sys_ioctl+0xfc/0x170 [ 416.791203][T16134] do_syscall_64+0xfa/0xfa0 [ 416.796239][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.802694][T16134] [ 416.802694][T16134] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 416.810709][T16134] lock_acquire+0x120/0x360 [ 416.815742][T16134] _raw_spin_lock_bh+0x36/0x50 [ 416.821045][T16134] nr_rt_ioctl+0x193/0xd50 [ 416.826006][T16134] sock_do_ioctl+0xdc/0x300 [ 416.831051][T16134] sock_ioctl+0x576/0x790 [ 416.835911][T16134] __se_sys_ioctl+0xfc/0x170 [ 416.841031][T16134] do_syscall_64+0xfa/0xfa0 [ 416.846077][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.852496][T16134] [ 416.852496][T16134] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 416.860328][T16134] validate_chain+0xb9b/0x2140 [ 416.865617][T16134] __lock_acquire+0xab9/0xd20 [ 416.870849][T16134] lock_acquire+0x120/0x360 [ 416.875873][T16134] _raw_spin_lock_bh+0x36/0x50 [ 416.881176][T16134] nr_rt_device_down+0xa9/0x720 [ 416.886559][T16134] nr_device_event+0x137/0x150 [ 416.891850][T16134] notifier_call_chain+0x1b6/0x3e0 [ 416.897493][T16134] netif_close_many+0x29c/0x410 [ 416.902896][T16134] netif_close+0x158/0x210 [ 416.907851][T16134] dev_close+0x10a/0x220 [ 416.912618][T16134] bpq_device_event+0x377/0x6a0 [ 416.918006][T16134] notifier_call_chain+0x1b6/0x3e0 [ 416.923671][T16134] __dev_notify_flags+0x18d/0x2e0 [ 416.929222][T16134] netif_change_flags+0xe8/0x1a0 [ 416.934689][T16134] dev_change_flags+0x130/0x260 [ 416.940069][T16134] dev_ioctl+0x7b4/0x1150 [ 416.944939][T16134] sock_do_ioctl+0x22c/0x300 [ 416.950081][T16134] sock_ioctl+0x576/0x790 [ 416.954945][T16134] __se_sys_ioctl+0xfc/0x170 [ 416.960079][T16134] do_syscall_64+0xfa/0xfa0 [ 416.965120][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.971544][T16134] [ 416.971544][T16134] other info that might help us debug this: [ 416.971544][T16134] [ 416.981774][T16134] Chain exists of: [ 416.981774][T16134] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 416.981774][T16134] [ 416.995690][T16134] Possible unsafe locking scenario: [ 416.995690][T16134] [ 417.003157][T16134] CPU0 CPU1 [ 417.008526][T16134] ---- ---- [ 417.013897][T16134] lock(nr_neigh_list_lock); [ 417.018583][T16134] lock(&nr_node->node_lock); [ 417.025871][T16134] lock(nr_neigh_list_lock); [ 417.033078][T16134] lock(nr_node_list_lock); [ 417.037687][T16134] [ 417.037687][T16134] *** DEADLOCK *** [ 417.037687][T16134] [ 417.045832][T16134] 2 locks held by syz.2.2849/16134: [ 417.051031][T16134] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 417.059876][T16134] #1: ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 417.069940][T16134] [ 417.069940][T16134] stack backtrace: [ 417.075847][T16134] CPU: 0 UID: 0 PID: 16134 Comm: syz.2.2849 Not tainted syzkaller #0 PREEMPT(full) [ 417.075868][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.075886][T16134] Call Trace: [ 417.075895][T16134] [ 417.075904][T16134] dump_stack_lvl+0x189/0x250 [ 417.075950][T16134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.075974][T16134] ? __pfx__printk+0x10/0x10 [ 417.075994][T16134] ? print_lock_name+0xde/0x100 [ 417.076016][T16134] print_circular_bug+0x2ee/0x310 [ 417.076053][T16134] check_noncircular+0x134/0x160 [ 417.076086][T16134] validate_chain+0xb9b/0x2140 [ 417.076116][T16134] ? rt6_disable_ip+0x6b3/0x720 [ 417.076151][T16134] ? __queue_work+0xc56/0xfb0 [ 417.076180][T16134] ? __lock_acquire+0xab9/0xd20 [ 417.076203][T16134] __lock_acquire+0xab9/0xd20 [ 417.076227][T16134] ? nr_rt_device_down+0xa9/0x720 [ 417.076253][T16134] lock_acquire+0x120/0x360 [ 417.076273][T16134] ? nr_rt_device_down+0xa9/0x720 [ 417.076307][T16134] ? nr_rt_device_down+0xa9/0x720 [ 417.076333][T16134] _raw_spin_lock_bh+0x36/0x50 [ 417.076363][T16134] ? nr_rt_device_down+0xa9/0x720 [ 417.076387][T16134] nr_rt_device_down+0xa9/0x720 [ 417.076409][T16134] ? do_raw_spin_unlock+0x122/0x240 [ 417.076436][T16134] nr_device_event+0x137/0x150 [ 417.076455][T16134] notifier_call_chain+0x1b6/0x3e0 [ 417.076480][T16134] netif_close_many+0x29c/0x410 [ 417.076509][T16134] ? __pfx_netif_close_many+0x10/0x10 [ 417.076537][T16134] ? bond_netdev_event+0x227/0xe80 [ 417.076562][T16134] netif_close+0x158/0x210 [ 417.076587][T16134] ? __pfx_netif_close+0x10/0x10 [ 417.076613][T16134] ? __pfx___neigh_ifdown+0x10/0x10 [ 417.076636][T16134] ? macsec_notify+0x104/0x660 [ 417.076662][T16134] dev_close+0x10a/0x220 [ 417.076680][T16134] bpq_device_event+0x377/0x6a0 [ 417.076700][T16134] notifier_call_chain+0x1b6/0x3e0 [ 417.076724][T16134] __dev_notify_flags+0x18d/0x2e0 [ 417.076743][T16134] ? __pfx___dev_notify_flags+0x10/0x10 [ 417.076760][T16134] ? __dev_change_flags+0x4cc/0x6d0 [ 417.076780][T16134] ? __pfx___dev_change_flags+0x10/0x10 [ 417.076810][T16134] ? full_name_hash+0x92/0xe0 [ 417.076831][T16134] netif_change_flags+0xe8/0x1a0 [ 417.076851][T16134] dev_change_flags+0x130/0x260 [ 417.076869][T16134] dev_ioctl+0x7b4/0x1150 [ 417.076895][T16134] sock_do_ioctl+0x22c/0x300 [ 417.076920][T16134] ? __pfx_sock_do_ioctl+0x10/0x10 [ 417.076950][T16134] sock_ioctl+0x576/0x790 [ 417.076971][T16134] ? __pfx_sock_ioctl+0x10/0x10 [ 417.076994][T16134] ? __fget_files+0x3a0/0x420 [ 417.077009][T16134] ? __fget_files+0x2a/0x420 [ 417.077026][T16134] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.077052][T16134] ? __pfx_sock_ioctl+0x10/0x10 [ 417.077073][T16134] __se_sys_ioctl+0xfc/0x170 [ 417.077097][T16134] do_syscall_64+0xfa/0xfa0 [ 417.077123][T16134] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.077149][T16134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.077166][T16134] ? clear_bhb_loop+0x60/0xb0 [ 417.077185][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.077208][T16134] RIP: 0033:0x7ff10158f749 [ 417.077224][T16134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.077240][T16134] RSP: 002b:00007ff0ff7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.077258][T16134] RAX: ffffffffffffffda RBX: 00007ff1017e6090 RCX: 00007ff10158f749 [ 417.077271][T16134] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000b [ 417.077283][T16134] RBP: 00007ff101613f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.077294][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.077303][T16134] R13: 00007ff1017e6128 R14: 00007ff1017e6090 R15: 00007ffef300d1c8 [ 417.077324][T16134] [ 417.551644][T16110] wlan0 speed is unknown, defaulting to 1000 [ 417.678128][T16160] __nla_validate_parse: 5 callbacks suppressed [ 417.678149][T16160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2852'. [ 417.725593][T16110] chnl_net:caif_netlink_parms(): no params data found [ 417.772224][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 417.951695][T16110] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.959089][T16110] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.968598][T16110] bridge_slave_0: entered allmulticast mode [ 417.984042][T16110] bridge_slave_0: entered promiscuous mode [ 417.992458][T16110] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.999938][T16110] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.009182][T16110] bridge_slave_1: entered allmulticast mode [ 418.016104][T16110] bridge_slave_1: entered promiscuous mode [ 418.043216][T16110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.055888][T16110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.089143][T16110] team0: Port device team_slave_0 added [ 418.101009][T16110] team0: Port device team_slave_1 added [ 418.131880][T16110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.139888][T16110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.167160][T16110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.181327][T16110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.188443][T16110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.215210][T16110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.237039][ T5838] Bluetooth: hci5: command tx timeout [ 418.264371][T16110] hsr_slave_0: entered promiscuous mode [ 418.274189][T16110] hsr_slave_1: entered promiscuous mode [ 418.281580][T16110] debugfs: 'hsr0' already exists in 'hsr' [ 418.287943][T16110] Cannot create hsr debugfs directory [ 418.383903][T16110] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.394267][T16110] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 418.439955][T16110] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.449962][T16110] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 418.490497][T16110] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.501109][T16110] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 418.542043][T16110] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.552730][T16110] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 418.650140][T16110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.661317][T16110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.672236][T16110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.683815][T16110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.715820][T16110] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.723027][T16110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.730529][T16110] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.737746][T16110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.748043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.755764][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.805388][T16110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.821293][T16110] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.833208][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.840375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.852915][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.860086][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.990612][T16110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.023919][T16110] veth0_vlan: entered promiscuous mode [ 419.034040][T16110] veth1_vlan: entered promiscuous mode [ 419.054727][T16110] veth0_macvtap: entered promiscuous mode [ 419.064091][T16110] veth1_macvtap: entered promiscuous mode [ 419.078817][T16110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.092295][T16110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.104531][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.118262][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.127191][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.137428][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.160010][T16110] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 419.187625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.193008][T16110] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 419.195602][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.226977][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.235061][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.316369][ T5838] Bluetooth: hci5: command tx timeout [ 422.396891][ T5838] Bluetooth: hci5: command tx timeout [ 424.477509][ T5838] Bluetooth: hci5: command tx timeout