last executing test programs: 5m1.027663542s ago: executing program 2 (id=3617): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x0, r5}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x403, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r9, 0x1001, 0x52860}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 5m0.329768881s ago: executing program 2 (id=3621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x50) unshare(0x600) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x28}}, 0x0) 5m0.201903245s ago: executing program 2 (id=3625): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, 0x0, 0x24000001) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, 0x0, 0x40001) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x4000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001640)={'bond0\x00', &(0x7f0000001580)=@ethtool_dump={0x3f, 0xae0c, 0x6}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000140)={0x0}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x3, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) 4m59.961114682s ago: executing program 2 (id=3632): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1007, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000001c0)={0xf10, 0x4, 0x62e, 0x7, 0xe1}, 0x14) socketpair(0x8, 0x80000, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r7, 0x8949, &(0x7f0000000280)={'erspan0\x00', @ifru_data=&(0x7f0000000240)="73d8495738b53b5a00d6ee19138df56f62ddff160597d230ae88fc69c686eec2"}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000002c0)={'wlan0\x00'}) r8 = accept4$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000400)={r9, 0x1386}, &(0x7f0000000440)=0x8) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @local}}, 0x1, 0x8, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @broadcast}}]}, 0x490) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000940)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a00)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r2, 0xc00, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7e}, @void, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd0b, 0x7}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x6e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000b80)={'team_slave_0\x00', @ifru_data=&(0x7f0000000b40)="0eaa25692003dbbc59a6c05501ebaac9c1fd3803f9cd81fe7a90db091a98344c"}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000bc0)=@generic={0x0, 0x2, 0x3}) epoll_create1(0x80000) getsockname(0xffffffffffffffff, &(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000c80)=0x80) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9407, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4050}, 0x8804) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000e00)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x10, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) clock_gettime(0x0, &(0x7f0000000f40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e80)={0x2, 0xe6, 0xfa4, 0x0, 0x8, 0xfff, 0x9, 0x3}, &(0x7f0000000ec0)={0xffffffffffffff01, 0x800, 0xeaf, 0xff, 0x9, 0xfffffffffffffffa, 0x4, 0x1}, &(0x7f0000000f00)={0xd5, 0x7, 0xfffffffffffffff9, 0x8, 0x6, 0xffffffffffffffff, 0x1, 0x6}, &(0x7f0000000f80)={r12, r13+60000000}, &(0x7f0000001000)={&(0x7f0000000fc0)={[0x2]}, 0x8}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x96}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0xa000}, 0x8000) 4m59.549652079s ago: executing program 2 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x1036, &(0x7f0000001840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@generic={0x9300, "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"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 4m59.253715598s ago: executing program 2 (id=3642): r0 = socket$inet6(0xa, 0x3, 0x32) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) 4m59.025398079s ago: executing program 32 (id=3642): r0 = socket$inet6(0xa, 0x3, 0x32) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) 21.479321182s ago: executing program 0 (id=6834): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x0, 'hsr0\x00', 0x3}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa14080041a300b100000000fd019078ac1e0001ac1414aa0300907803240000450000000000000003010000ac1414bbac141435867700000000000ce2560008000000000008002809789607675ca638060e7434954373561de584b703c80009e706d30bd224f806124e543700003c368041000000000000000010c600000000000000000000000000000a65807fe97612fe86001273bc2300ad9d19a300000000000040000607c8f46976e78606000000020000"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0xa00, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x9, 0x2}, {0x9, 0x8}}, ["", ""]}, 0x24}}, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r8, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r8, 0x101, 0x1, &(0x7f0000000040)=0xe53, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "3e94e68432fc588d", "6ebd3aba1ce583cabf83bbfda16a1653", "0aa94111", "0b76277c3b0f949b"}, 0x28) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 21.373736712s ago: executing program 4 (id=6835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="f000000700000000000000000000140029020d0001007564700822f2f267886f84ca121d01c529d05b33dac28990c30fad4db8b7c1b491a80472b123f7f03221d3c9ae071e7010eb1d386ec78b7a1d67ade41d4442b39cf74bc966bd772312e6ec3b2c7e0a358bf775b2dbdec8239546b69cc70b30904099ad5535fb47ecd546cc4a269f04cb2b3c150b79c63db9f3e7d35b97b1638631ce3eec"], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000ff1bd1f09208001d0084000000"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 21.248672754s ago: executing program 0 (id=6838): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 21.121605277s ago: executing program 4 (id=6839): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r2, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20.859476467s ago: executing program 1 (id=6841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x14}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4084) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 20.858622591s ago: executing program 4 (id=6842): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000b0200000000000100000000140000000000006e018000006ab8de000000000000000000"], 0x30}}], 0x1, 0x80) 20.577549506s ago: executing program 0 (id=6845): close(0x3) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r1, 0x80) (async) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0xffffffffffffff88}, 0x80}], 0x1, 0x32040, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) getpeername$netrom(r3, 0x0, 0x0) (async) close(0x3) 20.489852139s ago: executing program 1 (id=6846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@remote, @netrom, @remote, @bcast, @netrom, @netrom]}, &(0x7f0000001080)=0x40, 0x80800) setsockopt$rose(r2, 0x104, 0x3, &(0x7f00000010c0)=0x7, 0x4) 20.455223331s ago: executing program 1 (id=6847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 20.361709421s ago: executing program 1 (id=6849): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x48, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x61e, 0xfffffffc}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x3, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0x3}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ppoll(&(0x7f0000000080)=[{r6, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x2, 0x0, 0x7fffffff, 0x40, r3, 0x1589, '\x00', r1, r7, 0x0, 0x2, 0x2}, 0x50) 20.342945354s ago: executing program 0 (id=6850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070018000000000000ff02000000000000000067203948816fd253de000000000001ac1414aa00"/73, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027bd7000000000000200000000000000000000004c00120070637279707428726663343330392863636d5f6261736528636263286165732d6165736e69292c777033383429292900000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000200fc000000000000000000000000000000140006006e72300000000000000000000000000014000300fe880000000000000000000000000001"], 0x50}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xb8}}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) socket$igmp6(0xa, 0x3, 0x2) 20.192515977s ago: executing program 5 (id=6852): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dbdf2502000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100009cae3bb0aaba9d7dd8f8a3f439b01ba629c6e26820f1871670794a6ef24900000000000000", @ANYRES16=r2, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) sendmmsg$inet6(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="77b801986fd9a761cbc6ce3e01b80de3b115eb2c68edab792cde84a3385ee67c34f452878d21fd7102913e3ca7520ccafa20baa0b30f3ead9710c6ed5d90", 0x3e}, {&(0x7f0000000380)="41b35d98808161c189dccb51974d1db3796496efda54efcda3baa8bc92b3f834d50c690bbad9c92575a6f1d93f7b7a0a8f7e", 0x32}], 0x2}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x89, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000440)="4bf9a23ab4802448302dc04115fdd5f22f165720b1886d3e92d7121759d9fe9850a28fe2137f33e1b25930e1fd05ac3ce9d1bc819ea71e748ee0581417974eb76fa5f77824ffce4a474824f2944211956b6c06141b8f71904e1362117875c249a118540283c9b57adb10e2aa96f117eeda59b94c7c", 0x75}, {&(0x7f0000000a00)="328f175508466c1cdff064d581269aff772a9c46", 0x14}, {&(0x7f0000000500)="056d6b68ed93bc227903b81424b370f2063aac9cb93347ffa38ff66eb17ac38ca00d", 0x22}, {&(0x7f0000000540)="c2ff02448e810628c0b9893fff3acfe86c9a0bbecc956637265096dc5a6c8ca04f2c5df62f84c6213e08a1d093e99de27a9a54ea1b5222932e0730c143cca134b4861301b84bac4501b3352c39caf49888740ab02e1bfffca4a83de4cc9ec169902d1b78c9d6cd1827020765a6129a1281af09db4634824a07e26c3d7046ea92bd54eff1af7c1c037fbdc64554ee0854aa137776a6484b31a95d7396e93947b39ac3838830fd7f6adef0259c3ce540f03e049fbdf59df264a6166b3ab1c2c12b9f", 0xc1}, {&(0x7f0000000640)="cff42710b3f14f9a85f8f565e44a8059ed1a66add49b382ce6769205f5d7c53566b497d2a0e8ff021b7d8eb890847d065a6c00130595f50d267ae81c37a2f8f0557ec53c70d3d36c93513a76bae966e72fcdf8be2a582863e6600696b7ab9bc4ccaf477c2252b98487d4996a25f265bbddacb9ba74c695c3ce05eb2f21b642a7f7e64d424ecebb3ffff063b1faa1e3a3b06e7eeef95f4bb5ae9b8c7e7454c6a1fe4cce78613a971838bb6b642438e9ae2cc20ba225910dc13e6f3810b973894956c03f12c8da57509bf5", 0xca}, {&(0x7f0000000740)="5083fce36e5453684eee7c2dadc0417ac58dbaa4ac8732b32cd2be8f8b74fb33be0bb3b5f13e9467b4e354b39306f179ab43319508b44c3da4afbbdd40a4d4abd25ee82400d62516602d396c4279940d03bf0f3a452f7e452253a8d1ddefb705c4210c7e8ba62b15b27d6b6f2291a9480115cc1abc7d7889c7df97257b7d6ce6ec1dd30138285b2d87c2adc64c9eb6", 0x8f}], 0x6, &(0x7f0000000880)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x33, 0x12, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @empty]}}}], 0xa8}}], 0x2, 0x22044091) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={r10, 0x0, 0x8}, 0xc) 20.097220382s ago: executing program 5 (id=6854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) 20.087920712s ago: executing program 3 (id=6855): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x10}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2b, 0x1, 0xfffffff9, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = accept4$tipc(r0, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r4, r0, 0x1b, 0x1, r0, @void, @value=r0, @void, @void, r3}, 0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r2, 0x3, 0xe, 0x60}, &(0x7f00000003c0)=0x10) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000440)={0x7, 0x20, '\x00', 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000480)={0x3, [0x7f, 0x1, 0x40]}, &(0x7f00000004c0)=0xa) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) ioctl$SIOCRSACCEPT(r0, 0x89e3) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001540)=0x4, 0x4) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000001580)={0x1}) listen(r5, 0x1) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f00000015c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, r7, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40884}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x40, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x22}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r9, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000001a00)=0x9, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 19.973758665s ago: executing program 3 (id=6856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.942344963s ago: executing program 3 (id=6857): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) (rerun: 64) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000640)={0x1d, r7, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipmr_newroute={0x4c, 0x18, 0x100, 0x70bd2b, 0x25dfdbff, {0x80, 0x14, 0x20, 0xa, 0x0, 0x4, 0xff, 0xb, 0x100}, [@RTA_SRC={0x8, 0x2, @multicast2}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x1, 0xb6, r5}}, @RTA_PRIORITY={0x8, 0x6, 0xfff}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 19.938650179s ago: executing program 5 (id=6858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0x2}]}}]}, 0x40}}, 0x40c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040011) 19.892094265s ago: executing program 4 (id=6859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071119b000000000085104f000002000000850000000000004385000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30110000", @ANYRES16=r1, @ANYBLOB="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"], 0x130}}, 0x0) 19.749909976s ago: executing program 5 (id=6860): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000004000000000000a64000000060a010400000000000000000200000038000480340001800c00010062697477697365002400028008000340000000040800014000000004080006400000000208000240000000130900016e9f850134a0a663fe8e117bae0073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000180)) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 19.748257488s ago: executing program 4 (id=6861): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7fad2a65cf005d51ae19e340000000490000082aad859ec4a2a83d7ace0d61058e8cb6887324e32477512d4d480df8dc5ed98fe324029a210863482a3f586a778f1388c93fba4eca03b5916671e75926004a2cca7dce7ea87db14f9bd883311108c62c72d384e0f81d38e4a28ca0f1e2fbf24b94fc1be8d9f0265191c0bc1bf2fee7e16d39dfc2b8a7848c123e8a8a4eb6d36d12cbd8fac50f5ab3df779073be8607e3e06f1980d34a", @ANYRES32=r1, @ANYBLOB="040000000800020003000000080002000000000014000100fc010000000000000000000000000001"], 0x40}}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(r0, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7fad2a65cf005d51ae19e340000000490000082aad859ec4a2a83d7ace0d61058e8cb6887324e32477512d4d480df8dc5ed98fe324029a210863482a3f586a778f1388c93fba4eca03b5916671e75926004a2cca7dce7ea87db14f9bd883311108c62c72d384e0f81d38e4a28ca0f1e2fbf24b94fc1be8d9f0265191c0bc1bf2fee7e16d39dfc2b8a7848c123e8a8a4eb6d36d12cbd8fac50f5ab3df779073be8607e3e06f1980d34a", @ANYRES32=r1, @ANYBLOB="040000000800020003000000080002000000000014000100fc010000000000000000000000000001"], 0x40}}, 0x4000000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) (async) 19.719408762s ago: executing program 3 (id=6862): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000002", @ANYRES32=r3, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x48800) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "981c3b21eded22fd", "e583620a7d362e55ef6442331ce1a93f", "62e8c2a9", "4877fcc6e25b3c2f"}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000002", @ANYRES32=r3, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x48800) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "981c3b21eded22fd", "e583620a7d362e55ef6442331ce1a93f", "62e8c2a9", "4877fcc6e25b3c2f"}, 0x28) (async) 19.689602928s ago: executing program 5 (id=6863): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000a8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x5, 0xfffffff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a6845, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r6, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) close(r3) socket(0x3, 0x2, 0x8) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000004679100000000000000000095", @ANYBLOB="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", @ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r13, 0x25, 0x2, @void}, 0x10) close(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 19.62580663s ago: executing program 4 (id=6864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000240)="810fe052") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r3 = socket(0x25, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0xe}, 0x20) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {0x2, 0x2}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) socket$nl_route(0x10, 0x3, 0x0) 19.607405189s ago: executing program 3 (id=6865): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x6, 0x1000000004, 0x100002001]}, &(0x7f0000000300)=0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x6, 0x1000000004, 0x100002001]}, &(0x7f0000000300)=0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) 19.488547583s ago: executing program 1 (id=6866): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3cb9a400100003050000001d6191a96e9c01d7d13d10ba10336c85f7ff1296bc24a4c49e69c401b62936e609f991fd8f62ab4bbe044102c8d0254888dee135870b1610c4d96d9aeff8", @ANYRES32=0x0, @ANYBLOB="c486070000000000140012800b00010069703667726500000400028008001f0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 19.357606954s ago: executing program 0 (id=6867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd55}, 0x90) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001340)={{r2}, "1ab4a9798ebb0c57edad95ef00a4b0afea7c2aef4a7e95774fdbe3630ccde2babdbda5a4ad154642e3539c404313af7fb2b0ae8413f891f1451ac575fe22cf93df779d4533209538b81591420664024f950cddfa3c54e3db0f455ef4be490ffc967669a0523dc6ed86d6940c4481b339b960f8437fc59783ed7f6fb36f8c96eeab3e1d131486adc6a4ac18efd654ec288ea25896ed01040b69ef72590f5c64d0ecdb5a1f53724bda0884dea86bfb91161864bb1d6cac721f7e8084783c234124c5b6e51e4e1f7449ec030e38546aabf737861b78147cee1f279ba0b53e1af9758e16fed20659228e2ba1b0863f6d3e3041f8836a61e07b9651021616ee9284df1cc525c447bcaa9bd90f818439ce1559f9f2b5d761dc4bd48196b6b1ddb2c20c41f3b8c16d38e645b7b450be4b4a3b4922f924cb2f30b29446f2b3d079624fbb0739acbf01abb8ab5c32935833cdde84363d5ad47c62d8cfa4675d28a601070bfa75b048a4cbba7b8aef4ff64755b1de19f244ab212c715e411c2a27effed4dedd707c98a3a23b44a80d7d1d4abeb88f5762ad735cc75240cd617d3b8111d5fc8b1071b7c6aff7aa5177a3db70194b3e1d9a7b15f08bd9e49f95a6575c238b571a39cfec35dec42a01dac197bf006738beda27a74a911e18209f743d6b4d9fb6035de017220a82e112ce12c0710581a4eab4bcd99a60ce330d364cf32fb17ddfd439d816f7e84e356b1ee876027aeac43643db639a89fe70205fc9382e3cf38a3ecf50a7e348359403d21ae92453d434c56bda5c4978ca1bd725d9602f4fbbdfff5b2e9961f869442e758e2eca8fa6f71e0a5350b8f284bda65a3543eddcddf939e0b7e88f88bac57d3a565ecd57b1f1872464fbc63a420a576d535bc32a0f6f9cbe96f1c0686e54b1dd5c6d3b9f7d868e8bf490913493805e6e837c401a519706f5a8e193f1000b555ea3849f84616b08680aad0ba98b07efb06c62257f16e1b5863acd53b6795fbb33a1ebd9105c44b7137c4eb2cc61b2aa718d312455ee1277dbed3b2df857c3c4398f4b9157762d585bf3ce192615ecd18427221cd6d66e8045d40f4be63bd7b7ebdeb7efc1c89543905644c26907ccb5f0962599439eb07b1c6229830ed2eb732f971da2da342a115a486423d2675d30a48858041dc9634bc43de0b56b06f5bd87ac19ce6e80fcd883c68f7add8fbb47448b7dc14f6fc2bd44ce9b0d628e5dcd27de6e120335d6ebeeb818c5db5d3c5c33ec34119063f3e540e6d233ac7ffabfa72c9ea6fe733168c089c62172fdb44765aed5d08b5a85c03b4bf63b49e0efb3f2c6b6491f9f88d560c925446bc1a472b3874a85a6905be0b9b0af78c62415f63fa6b3b7d65e30d4f9325bfac414ba7be55b91e9adee39b433ac1ff0ed110ac0288ed8efdce44675244f4a03803824244274105c6654013ec913b97d10d167637460973b6814f308fb5bc49b24cbda6d5e433bda7a18e2cf127c8c23879409a777885625017c5d8aa2c3adbba227f38ae86c026b41903787f2716a6fa6b37a2b4364f95d86c2b417079ed741849f142c097bdbca4b4e5535b099bd77c812fbd92fbb8ef8ab14a60698a769240bd3afbc96600dab058e74a63c959b60fb6f610e761d1088e5c5285ebf9d304afec8561f98085cee61de728d965aebbe8bb72b2ad693786577827990148c03e8bf07874ae835b4922718d9688c4958adff313edfc91255a13798178045b477e9bbd07c83499a6addc645faee6aeaf3c46819c698d753973167347dc5a9c33d54846d6f7843a4cff34174ea3b1d06e33c038b8e83c8c61495bdd15d6949771f630817c117cfd78617524ac97a42c8ae7b1584860e0f491c4c37becff64b612e5984393e7a34a8acac1314f33877ddf0a51365ec2d1933fe5ae16fe9937bc18a91849284ff536581cf33f442f9ec17e9bd7c5b56ff0ac06b9d92e192e58cf55b277f95c7eb705555d1975b8fc268c22b77f7f646de53b402e8e02fa0ceefa1b96dc859a00596cf212d514810ed9ba0539b51f485deccb2d6ca6f5eb6f55426d4c84e47ff70b65354c8d53a40be5faf9966771cd4ae295647b7c8fe04c721a50f330a3b8e71cbfd23e5042a7d586617e82369b58f23afe8416851f8aeba78300c66c11d602c46ad24228bedf4b8109fff86357420623ffaeeee92c94a4b05424a4ffda8fe420a124cba2519b2161af8f0e5881e0d00be838e5c75821ec2ac9ec27390cfff6c6aa032ca3a717303a26b521b6a8ff967090c98899059891888c2e171dd38892ea12a8f65aee2adb2a7353e9b62ecf6f95feba1e9e427fc3d54b1b30e8857c9b443469be5b575b0a5621918e2bb883c3f73c77a564df4e53185157ecd9feb812e4b5620447917b79240591060204285e36a902ca7ef0560188b72e1d73b66208e5aa87d2119c494678f129d9dda49202f2b444bffdc7b41d966c8d4a53926d96b0f36024d453da4405dbc050ba36b4a058edb8508ab2d883df59662e6ecbfd5282c0cd7a247c486451464ee971dec4836bfbf129ca5057d08451487be8ebcbe0898f48c15076c32d6955ef049813c87c8545fb383523d99f8ca91e1acb504a1579b286155a26f7188ada0622b8c5767d7c001d29afeb8361cc7dfc0d788da083d0bd800d9fe7b95a61e6bfee5fd6cbb52f5b5c04d370b4cf62ac69847b22304c5d0e602f433ada13e05032dc8930f66d8fd6092d2a4856bfb0690729d1cfa0371e71f738e6a412d5d0f76bb91328c189b6249b102b362ab3253cbeb94f2a541d849ec60609b32fe4c2f75305e3391652b4fc5451002abaa205dea391d32a23491848016e25b6b3da99c9140cc9c80052d20111fe27de50b93e2172ace644471e0d4b009d751bb1b24dd4832b4db729ea2da02d74600febada6be82c3cde1d5dfe891487e8d6e5c3ddb8de7afedb626be75fe0ab55130b33537ba492fb850fad52c57845b8aed095000fb3b54a6145285140dc91b24e502aeab8b9062349ec83ae84e5235d87f37147bbc666f54ba93d4837f9c793a348c79be969bafb8efbaec5644270e567ea2266ee1aab2165c024c2495e42777651704eddc877be98927cd079302acd4417890d6759acdd2d16610c7e80a804e8f459b51ff0e799c9bcbabac6f1af60e56115526792664d81e89ea1c3ebd54487986f53fee384b9b5fc46a972eaaafb85b2500d3a76cdf5a66fe1a758fed764d6419dc3bf1a5ee0b81eaf5083405698f934784cedf2774b11ea27dc710058f9dcb1d3a697bf206e1afb01f84a5724f00b946649ec09860786ff4c8843d514646317bf29a58c84b325b4cd7a1e612df092b84c911081af3667cf143c2e4b81f0e6360d8b977299a10a376d545d177fd877d4953e4ea75124109123436d9781c86304fbb65b4384f4b109b2d53cc40fceffd61e5cf9d9b33b3715c4032518c5c32200e2edf7d0c661260618bfebaab4e4e7e8d91eef3ff40315ff693dd24bca29857a3450ed283035b835546de57e59a67f7d9a77211dd6e405840fb070863fe66c31573f1900d9197185ae6e87c6df08f229d775572bab17c91cd5440904bd4f80f1ae579ead13e9f0a9e0c8c7cb8c42a5049eac397aab916cd0b9119a354209fba567cb17d9876af053c271c8d161f32bdbfe021cc71d53ff802750bd9067279bb6b5c3332626b8a9ba91d00959b86fcfa1c15bbae65920342ae1ed8c3d43aad69e4c2ea93a50147ad9afe8ed3722d2ac015bebd4ca267414a8d94857355d80d731af00277be430416d90ac57f47f58ae26e2b495d64260561cf111b5e71922da332a9a008bd5384be568897b6bd17494b801f1a0ac1b28a74e58589c7c5d023412d292d8f5633df099adee22f6a9521cf7c2f016531d7cdef57e8b67ac11fdee461984e1db1964e0b44a73f2e06ca6d08e97465ac5223eda9547f7cdca3e555a6278b43dcee943aa45ec4e7533d2016609ff16b04a8a400051b55e4970cf7436ffb9be9d2013754d278a80024995276a10f8cf5e7e2608528ff4865c9e15e88b9a2efde6a081d3504629993b688bedd9ebc3f039011bcc288a62e9cee1bd8fb06d64817519c7113fe37a652ee2d63dde4eea3a21218661fea1b521e94530ff837fa8f2aaf438417015a124a07b2568153d7a9c0aad826a308df6d3826c59e2706e4f8840198a681524970f73e2d8acdb26c53a1cb0c23c075f2296d5fc5cb8aba14399643a4e266015a3b56f1b55d5d7ca502039291a74cf13dc1a85a4bf0c5618ad1e339b47cf8691caba4f767a11d40da2125e9417517aa4b7708cb8a48ea7b27b8f1721274845f25533a281ae253d348067f432d2ff431483bf99405d587c9a5aec3ee180427654bf9adda3174ff2d177dadc730419fa5cd7fb07422f0159c24f11cf3797988d00fd7c4c3ba70812630f852891b84aef258a329ef9b70cde8842619d4deb0b7608532ab55b2363934f199dfc21aa33e2f8f4149a71ecd1e3461a0113a88b76b4c1127ef24a395bda8282c4b9c84838c198665fb408a2c11fca00aec330662b25c15d002d3adc288431c90a6e9a3abe92f612234db68daf4a27556e756cc53c15b74810cef8ce09ba068d18638bae62cf395dfaeacd9c2c0686cb789c1e5a5ce25fc0340f04fc6e3239cc42f476fb9eec77a27fa269995544fea8a39e33cc6337e22e33dc5e2c3846a9a41c3c3349ce979d4bf2af0083e33710c6585d586fc298f102a5b642927a4f3f8b703f5c5e5f37f4df2647efa006960b5558b6f6d8e5cd44d0cadb73e9ff90f108aad7f276712ed5f8ca468b91016b8a174d5412d56390dc74006670fb1e16dd9ff3ac278eeb5d2b679c9a85cf59624c0db7be0f97f85a6d79f75d309857e1db15787f39b0dd05a9486f1c0833c5f6087f68653b9c997eea31a1c840f57cace2ba3aafdefd8fb688ab2ce1ebc98d96e8b33f2335ac79a10d5c400623f46cfd35617690fbcdc4ddcbd83155fef7528862f8370d9bcc1f77705dfe751036b16a8023d5261e888aead93342a069e76cdc82c10d5c7ede11c2838715627a15747b0938c4546070d4c35a79032f3916d7da8a4209568a59a9e33a53bb0e05d55aad8831008277cc3fd6740c8849754fe993fc5dbe0b872be4f002af2f9cc2007413381eb4ecce47528985b55d83800190b20b8020cbfe3abb6483089b4cf5b1cf35ecf10b7f26111977139c0d40c4c877b970caddd52c6a04401cc6453fb2d5c22ad927ea2bc3299155326880398d31f21931ede4b017d23ede032595aac3104528068ea8fa1e868bbf091dd09b804cd405ef4358879bea739809b26187044e5cdcaf86af61cd698e729522f7b1f2f5d7b21836741e1b728185f049cb7c8e5ad1d50b27b20056d48eb7ddd0120618d1557c6b2fe6058d4aae4c48d9617c7d926b9ea58d30a8963c7107d5a7d4ccf02a609bd178ae301a9c858b0b6a47fcfe42d0dd67a2a59405ed29e341343e88aa32dce17901cd1eddd4af9f96a81c8c46e38122603f51350726185b9282519935174472bbdcbde8b9317f34b7b892bbafb8483a5628bd5314ccd158b076b89ccfd9e9dffc454e64efe8aa0a7ab95250d23e18b744e00a3a338ba2f920420d34e0b86bcd8031dde003a8f7d625fd43f3228dc1e322dbc4d626890014d7ce6c203bc47cd03f54e2bbd081166833098340969e62b2a4e3f0801586489fffa64de7575db0a8ea6744bff8c5c3fbeb8c80274a4ad7b3c791b6aecff9772bce6065d3af5351da55748ded9cef5278e97f"}) 19.338996557s ago: executing program 3 (id=6868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x502, 0x0) r12 = accept$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000080)=0x60) getsockname(r12, &(0x7f0000000200)=@generic, &(0x7f00000000c0)=0x80) ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5202) 19.277794602s ago: executing program 1 (id=6869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xa0000000}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 19.197754318s ago: executing program 5 (id=6870): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cee]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}]}]}}]}, 0xa4}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x20000000) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r5, {0x7518ef7f1b92388b, 0xfff3}, {0xe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) recvfrom$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @empty, 0xfff}, 0x1c) shutdown(r9, 0x0) sendfile(r8, r8, &(0x7f0000000440)=0x9400, 0x7ffff000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19.195779259s ago: executing program 0 (id=6871): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c000a5e0b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="100000005e00250e003d2e3687000000"], 0x10}], 0x1}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x11031c6cb4b3eab) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0xff, 0x5, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000200000001000100100000000080020006c9faceabe0d3d47b4feecd20e6bb562e386a75818967103971e7eb5baecb411dead5ca4637c7894cfca7db5a51919c4d5f94eaefb9e27c49e8a303bd5f35a3a96a515b666ded1767b247bd314d91246a785a198120cc91fc0b61798d42003b6b1028ff0fc0beb6b868af5d1f539596a995e92cecb2a78d537d07bd55535d14142f762c42a1312a16855085a513df069ebc", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000010000000d00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) recvfrom(r3, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) 0s ago: executing program 33 (id=6871): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c000a5e0b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="100000005e00250e003d2e3687000000"], 0x10}], 0x1}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x11031c6cb4b3eab) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0xff, 0x5, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000200000001000100100000000080020006c9faceabe0d3d47b4feecd20e6bb562e386a75818967103971e7eb5baecb411dead5ca4637c7894cfca7db5a51919c4d5f94eaefb9e27c49e8a303bd5f35a3a96a515b666ded1767b247bd314d91246a785a198120cc91fc0b61798d42003b6b1028ff0fc0beb6b868af5d1f539596a995e92cecb2a78d537d07bd55535d14142f762c42a1312a16855085a513df069ebc", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000010000000d00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) recvfrom(r3, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): 4598] sctp: [Deprecated]: syz.1.5108 (pid 24598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.185422][T24598] Use struct sctp_sack_info instead [ 536.253938][T24601] smc: net device gre0 applied user defined pnetid SYZ1 [ 536.432760][T24612] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 536.459431][T24620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.465933][T24620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.882885][T24648] bond0: option resend_igmp: invalid value (32767) [ 536.892699][T24648] bond0: option resend_igmp: allowed values 0 - 255 [ 536.905676][T24648] bond0 (unregistering): Released all slaves [ 536.950814][T24654] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.989578][T24654] bridge_slave_1 (unregistering): left allmulticast mode [ 536.998559][T24654] bridge_slave_1 (unregistering): left promiscuous mode [ 537.005757][T24654] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.051985][T24651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 537.075087][T24651] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.083740][T24651] gretap2: entered promiscuous mode [ 537.089625][T24651] gretap2: entered allmulticast mode [ 537.253301][T24672] netlink: 'syz.3.5128': attribute type 24 has an invalid length. [ 561.169999][T24700] netlink: 'syz.0.5138': attribute type 1 has an invalid length. [ 561.179233][T24700] __nla_validate_parse: 9 callbacks suppressed [ 561.179252][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 561.224740][T24707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.232459][T24704] openvswitch: netlink: Missing key (keys=40, expected=80) [ 561.257480][T24708] openvswitch: netlink: Flow key attr not present in new flow. [ 561.278485][T24708] nft_compat: unsupported protocol 0 [ 561.580200][T24725] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 561.646050][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5149'. [ 561.657370][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5149'. [ 561.667840][T24731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5149'. [ 561.979397][T24757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5156'. [ 562.089095][T24766] ip6gretap2: entered allmulticast mode [ 562.176340][T24777] netlink: 'syz.3.5162': attribute type 1 has an invalid length. [ 562.417498][T24789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.433061][T24789] netlink: 'syz.1.5166': attribute type 1 has an invalid length. [ 562.589978][T24799] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 562.645551][T24799] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5169'. [ 562.660891][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5171'. [ 562.671106][T24799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5169'. [ 562.743880][T24806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5172'. [ 562.761454][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'. [ 562.782440][T24806] veth0_macvtap: left promiscuous mode [ 562.977784][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.147911][T24831] netlink: 'syz.4.5182': attribute type 10 has an invalid length. [ 563.168953][T24829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.352975][T24847] veth0_to_bond: entered allmulticast mode [ 563.469113][T24850] netlink: 'syz.3.5188': attribute type 18 has an invalid length. [ 563.471002][T24854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 563.480766][T24850] netlink: 'syz.3.5188': attribute type 18 has an invalid length. [ 563.775042][T24866] netlink: 'syz.1.5191': attribute type 12 has an invalid length. [ 563.903711][T24870] netlink: 'syz.4.5193': attribute type 1 has an invalid length. [ 564.327637][T24903] netlink: 'syz.5.5204': attribute type 10 has an invalid length. [ 564.336868][T24903] dummy0: entered promiscuous mode [ 564.342910][T24903] bridge0: port 3(dummy0) entered blocking state [ 564.349638][T24903] bridge0: port 3(dummy0) entered disabled state [ 564.356887][T24903] dummy0: entered allmulticast mode [ 564.365196][T24903] bridge0: port 3(dummy0) entered blocking state [ 564.371687][T24903] bridge0: port 3(dummy0) entered forwarding state [ 564.917914][T24942] x_tables: unsorted underflow at hook 4 [ 565.291920][T24969] bond6 (unregistering): Released all slaves [ 565.595459][T25000] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 565.674874][T25008] siw: device registration error -23 [ 565.781603][T25015] netlink: 'syz.0.5238': attribute type 1 has an invalid length. [ 565.851007][T25015] 8021q: adding VLAN 0 to HW filter on device bond11 [ 565.994559][T25015] 8021q: adding VLAN 0 to HW filter on device bond11 [ 566.002118][T25015] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 566.015577][T25015] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 566.111451][T25028] veth5: entered promiscuous mode [ 566.221295][T25042] __nla_validate_parse: 21 callbacks suppressed [ 566.221313][T25042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5246'. [ 566.297099][T25040] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5244'. [ 566.324287][T25048] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5248'. [ 566.450179][T25058] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5250'. [ 566.587541][T25061] validate_nla: 1 callbacks suppressed [ 566.587559][T25061] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.650419][T25065] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.670507][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 566.682065][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 566.704089][T25071] netlink: 'syz.1.5253': attribute type 142 has an invalid length. [ 566.716931][T25072] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.743109][T25061] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.766880][T25065] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.771619][T25072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 566.796378][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 566.803063][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 566.813615][T25072] netlink: 'syz.3.5251': attribute type 14 has an invalid length. [ 566.878634][T25072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 567.007635][T25089] xt_cgroup: invalid path, errno=-2 [ 567.016663][T25084] bond7 (unregistering): Released all slaves [ 567.044970][T25083] tipc: Enabling of bearer rejected, failed to enable media [ 567.487371][T25115] netlink: 'syz.5.5268': attribute type 13 has an invalid length. [ 567.510613][T25115] netlink: 'syz.5.5268': attribute type 17 has an invalid length. [ 567.640072][T25115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.658496][T25115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.942864][T25148] policy can only be matched on NF_INET_PRE_ROUTING [ 567.942885][T25148] unable to load match [ 568.072914][T25161] netlink: 'syz.1.5282': attribute type 10 has an invalid length. [ 568.109635][T25161] batman_adv: batadv0: Adding interface: netdevsim0 [ 568.117182][T25161] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.145721][T25161] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 568.300949][T25173] tipc: Started in network mode [ 568.306037][T25173] tipc: Node identity aee2d39dab21, cluster identity 4711 [ 568.313395][T25173] tipc: Enabled bearer , priority 0 [ 568.385706][T25173] syzkaller0: entered promiscuous mode [ 568.391432][T25173] syzkaller0: entered allmulticast mode [ 568.399845][T25179] sctp: [Deprecated]: syz.0.5287 (pid 25179) Use of int in maxseg socket option. [ 568.399845][T25179] Use struct sctp_assoc_value instead [ 568.440778][T25173] tipc: Resetting bearer [ 568.452523][T25172] tipc: Resetting bearer [ 568.849927][T25201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.227830][T25172] tipc: Disabling bearer [ 570.242084][ T9] tipc: Node number set to 96719773 [ 570.593155][T25209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.667234][T25234] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 570.697687][T25237] dummy0: left allmulticast mode [ 570.704494][T25237] dummy0: left promiscuous mode [ 570.709953][T25237] bridge0: port 3(dummy0) entered disabled state [ 570.720427][T25237] bridge_slave_1: left allmulticast mode [ 570.727042][T25237] bridge_slave_1: left promiscuous mode [ 570.734044][T25237] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.746399][T25237] bridge_slave_0: left allmulticast mode [ 570.752652][T25237] bridge_slave_0: left promiscuous mode [ 570.759599][T25237] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.271731][T25265] lo speed is unknown, defaulting to 1000 [ 571.395048][T25276] __nla_validate_parse: 15 callbacks suppressed [ 571.395066][T25276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5314'. [ 571.459421][T25276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5314'. [ 571.665963][T25292] validate_nla: 1 callbacks suppressed [ 571.665981][T25292] netlink: 'syz.0.5320': attribute type 6 has an invalid length. [ 571.702177][T25295] syzkaller1: entered promiscuous mode [ 571.717616][T25295] syzkaller1: entered allmulticast mode [ 571.733634][T25294] netlink: 'syz.0.5320': attribute type 6 has an invalid length. [ 572.192675][T25321] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 572.219446][T25320] netlink: zone id is out of range [ 572.255811][T25320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5326'. [ 572.381359][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5328'. [ 572.544766][T25333] syzkaller0: entered promiscuous mode [ 572.550282][T25333] syzkaller0: entered allmulticast mode [ 572.569414][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5329'. [ 572.579704][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5329'. [ 572.685981][T25337] netlink: 'syz.0.5331': attribute type 4 has an invalid length. [ 573.286719][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5343'. [ 573.390669][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5347'. [ 573.496836][T25387] netlink: 'syz.4.5347': attribute type 1 has an invalid length. [ 573.524417][T25387] netlink: 'syz.4.5347': attribute type 2 has an invalid length. [ 573.818718][T25408] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5350'. [ 573.858673][T25408] netem: invalid attributes len -24 [ 573.863927][T25408] netem: change failed [ 574.256054][T25435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.480834][T25445] netlink: 'syz.0.5357': attribute type 3 has an invalid length. [ 574.487544][T25442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5356'. [ 574.525512][T25445] netlink: 'syz.0.5357': attribute type 1 has an invalid length. [ 574.647622][T25450] dvmrp6: entered allmulticast mode [ 574.758438][T25462] netlink: 'syz.1.5362': attribute type 1 has an invalid length. [ 574.791680][T25459] No such timeout policy "syz0" [ 574.823763][T25462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.839474][T25467] IPv6: sit2: Disabled Multicast RS [ 574.847655][T25467] sit2: entered allmulticast mode [ 574.898431][T25462] bond5: (slave ip6gretap1): making interface the new active one [ 574.929026][T25462] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 574.946709][T25468] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 575.413612][T25503] veth0_to_team: entered promiscuous mode [ 575.555311][T25512] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 575.568730][T25512] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 575.709762][T25520] tipc: Enabled bearer , priority 0 [ 575.721368][T25520] syzkaller0: entered promiscuous mode [ 575.727148][T25520] syzkaller0: entered allmulticast mode [ 575.753660][T25520] tipc: Resetting bearer [ 575.768331][T25517] tipc: Resetting bearer [ 575.790151][T25517] tipc: Disabling bearer [ 576.377758][T25557] dummy0: left allmulticast mode [ 576.385255][T25557] bridge0: port 3(dummy0) entered disabled state [ 576.425642][T25557] bridge_slave_1: left allmulticast mode [ 576.431419][T25557] bridge_slave_1: left promiscuous mode [ 576.446932][T25557] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.508368][T25557] bridge_slave_0: left allmulticast mode [ 576.522081][T25557] bridge_slave_0: left promiscuous mode [ 576.531597][T25557] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.602279][T25574] __nla_validate_parse: 6 callbacks suppressed [ 576.602298][T25574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5396'. [ 576.653723][T25574] netlink: 'syz.1.5396': attribute type 178 has an invalid length. [ 576.679829][T25574] xt_recent: Unsupported userspace flags (000000b1) [ 576.896803][T25591] gretap0: entered promiscuous mode [ 576.907854][T25591] vlan6: entered promiscuous mode [ 576.960198][T25592] : renamed from veth1_vlan (while UP) [ 577.124061][T25603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5403'. [ 577.543742][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.610665][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.651312][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.748695][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.799342][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.823937][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.845171][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 577.854957][T25635] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.5411'. [ 578.126217][T25677] vlan1: entered allmulticast mode [ 578.399892][T25702] netlink: 'syz.1.5432': attribute type 1 has an invalid length. [ 578.415831][T25696] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 578.429874][T25696] bond6 (unregistering): Released all slaves [ 578.544776][T25717] netlink: 'syz.3.5434': attribute type 2 has an invalid length. [ 578.583716][T25705] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.639594][T25702] veth5: entered promiscuous mode [ 578.651119][T25702] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 578.669442][T25717] 9: entered promiscuous mode [ 578.680811][T25710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 578.782722][T25714] lo speed is unknown, defaulting to 1000 [ 579.439286][T25754] veth0: entered promiscuous mode [ 579.452956][T25754] veth0: entered allmulticast mode [ 579.472156][T25760] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.622112][T25767] netlink: 'syz.5.5448': attribute type 19 has an invalid length. [ 579.641308][T25767] netlink: 'syz.5.5448': attribute type 19 has an invalid length. [ 580.042948][T25784] netlink: 'syz.1.5454': attribute type 26 has an invalid length. [ 580.092212][T25784] netlink: 'syz.1.5454': attribute type 26 has an invalid length. [ 580.400466][T25803] netlink: 'syz.3.5461': attribute type 10 has an invalid length. [ 580.505995][T25803] bridge0: port 2(team0) entered blocking state [ 580.515079][T25803] bridge0: port 2(team0) entered disabled state [ 580.521520][T25803] team0: entered allmulticast mode [ 580.527146][T25803] team_slave_0: entered allmulticast mode [ 580.533295][T25803] team_slave_1: entered allmulticast mode [ 580.544647][T25803] geneve0: entered allmulticast mode [ 580.555870][T25803] team0: entered promiscuous mode [ 580.560941][T25803] team_slave_0: entered promiscuous mode [ 580.568458][T25820] netlink: 'syz.5.5462': attribute type 2 has an invalid length. [ 580.580325][T25803] team_slave_1: entered promiscuous mode [ 580.596388][T25803] geneve0: entered promiscuous mode [ 580.610339][T25803] bridge0: port 2(team0) entered blocking state [ 580.616906][T25803] bridge0: port 2(team0) entered forwarding state [ 580.793540][T25827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.805970][T25827] bond0 (unregistering): Released all slaves [ 580.830327][T25838] xt_l2tp: wrong L2TP version: 0 [ 581.379858][T25868] can: request_module (can-proto-0) failed. [ 581.449611][T25877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.611130][T25885] netlink: 'syz.5.5484': attribute type 3 has an invalid length. [ 581.612990][T25886] netlink: 'syz.5.5484': attribute type 3 has an invalid length. [ 581.720887][T25888] __nla_validate_parse: 52 callbacks suppressed [ 581.720906][T25888] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5485'. [ 581.727472][T25891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5486'. [ 581.785599][T25888] bond7 (unregistering): Released all slaves [ 581.833965][T25894] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.843512][T14701] IPVS: starting estimator thread 0... [ 581.874754][T25896] IPVS: set_ctl: invalid protocol: 43690 170.170.255.255:65535 [ 581.934849][T25897] IPVS: using max 38 ests per chain, 91200 per kthread [ 581.940538][T25901] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5488'. [ 582.107446][T25914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5493'. [ 582.230134][T25918] tipc: Invalid UDP bearer configuration [ 582.230191][T25918] tipc: Enabling of bearer rejected, failed to enable media [ 582.300393][T25924] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.314884][T25923] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.522588][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5503'. [ 583.172832][T25975] bond7: (slave ip6gretap2): making interface the new active one [ 583.187561][T25975] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 583.437536][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5514'. [ 583.462898][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 583.503647][T25985] team0: left allmulticast mode [ 583.509270][T25985] team_slave_0: left allmulticast mode [ 583.515702][T25985] team_slave_1: left allmulticast mode [ 583.521954][T25985] geneve0: left allmulticast mode [ 583.532294][T25985] team0: left promiscuous mode [ 583.571070][T25985] team_slave_0: left promiscuous mode [ 583.598800][T25985] team_slave_1: left promiscuous mode [ 583.621170][T25985] geneve0: left promiscuous mode [ 583.627141][T25985] bridge0: port 2(team0) entered disabled state [ 583.642122][T25985] bridge_slave_0: left allmulticast mode [ 583.651862][T25985] bridge_slave_0: left promiscuous mode [ 583.659287][T25985] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.672645][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'. [ 583.814991][T26008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5523'. [ 583.941049][T26003] bond7: Removing last ns target with arp_interval on [ 583.978753][T26010] bond8: Removing last ns target with arp_interval on [ 584.028586][T26024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5527'. [ 584.112713][T26026] x_tables: duplicate underflow at hook 1 [ 584.143214][T26031] erspan0: entered promiscuous mode [ 584.149835][T26032] validate_nla: 3 callbacks suppressed [ 584.149853][T26032] netlink: 'syz.0.5531': attribute type 10 has an invalid length. [ 584.163700][T26031] erspan0: entered allmulticast mode [ 584.186934][T26032] geneve0: entered promiscuous mode [ 584.195569][T26032] team0: Port device geneve0 added [ 584.278023][T26038] team_slave_1: Caught tx_queue_len zero misconfig [ 584.456188][T26050] netlink: 'syz.3.5536': attribute type 1 has an invalid length. [ 584.520342][T26052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.588411][T26058] 8021q: adding VLAN 0 to HW filter on device bond11 [ 584.603489][T26058] bond0: (slave bond11): making interface the new active one [ 584.629918][T26058] bond0: (slave bond11): Enslaving as an active interface with an up link [ 584.646065][T26058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.883689][T26079] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 585.075375][T26095] dvmrp0: entered allmulticast mode [ 585.948768][T26147] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20001 [ 586.083489][T26155] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.100067][T26155] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.107355][T26155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.733049][T26199] netlink: 'syz.0.5582': attribute type 4 has an invalid length. [ 586.789825][T26199] netlink: 'syz.0.5582': attribute type 4 has an invalid length. [ 586.896317][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 587.052927][T26214] __nla_validate_parse: 17 callbacks suppressed [ 587.052946][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 587.250951][T26216] syzkaller1: entered promiscuous mode [ 587.260957][T26216] syzkaller1: entered allmulticast mode [ 587.280002][ T1101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.292905][ T1101] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 587.313114][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 587.325392][T26226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5589'. [ 587.344074][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5589'. [ 587.394624][T26219] syzkaller1: entered allmulticast mode [ 587.514643][T26239] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5591'. [ 587.572815][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5592'. [ 587.839739][T26257] tipc: Enabling of bearer rejected, failed to enable media [ 588.024524][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5603'. [ 588.039225][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5601'. [ 588.396669][T26292] netlink: 'syz.4.5607': attribute type 1 has an invalid length. [ 588.502260][T26297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5611'. [ 588.525868][T26297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5611'. [ 588.539299][T26297] siw: device registration error -23 [ 588.717275][T26316] netlink: 'syz.1.5617': attribute type 9 has an invalid length. [ 588.870753][T26325] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.995440][T26334] netlink: 'syz.4.5623': attribute type 10 has an invalid length. [ 589.023657][T26334] bridge0: port 2(team0) entered blocking state [ 589.038886][T26334] bridge0: port 2(team0) entered disabled state [ 589.053657][T26334] team0: entered allmulticast mode [ 589.065932][T26334] team_slave_0: entered allmulticast mode [ 589.071780][T26334] team_slave_1: entered allmulticast mode [ 589.084405][T26334] team0: entered promiscuous mode [ 589.089566][T26334] team_slave_0: entered promiscuous mode [ 589.097253][T26334] team_slave_1: entered promiscuous mode [ 589.260539][T26351] xt_cgroup: path and classid specified [ 589.316940][T26357] tipc: Enabling of bearer rejected, failed to enable media [ 589.375906][T26355] lo speed is unknown, defaulting to 1000 [ 589.566608][T26377] netlink: 'syz.5.5629': attribute type 4 has an invalid length. [ 590.116777][T26407] tipc: Enabled bearer , priority 2 [ 590.678549][T26428] lo speed is unknown, defaulting to 1000 [ 590.695945][T26432] syzkaller0: entered promiscuous mode [ 590.701472][T26432] syzkaller0: entered allmulticast mode [ 591.007140][T26450] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 591.012105][T26451] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 591.091018][T26452] tipc: Enabled bearer , priority 0 [ 591.219534][T26452] tipc: Resetting bearer [ 591.532920][T26444] tipc: Disabling bearer [ 591.570555][T26477] pim6reg1: entered promiscuous mode [ 591.594116][T26477] pim6reg1: entered allmulticast mode [ 592.133624][T26500] __nla_validate_parse: 10 callbacks suppressed [ 592.133644][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'. [ 592.372309][T26480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.390721][T26480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.669775][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5666'. [ 592.688049][T26497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5666'. [ 592.746171][T26499] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 592.777612][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.806583][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.864645][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.887498][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.179936][T26526] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5678'. [ 593.312350][T26533] syzkaller0: entered promiscuous mode [ 593.319636][T26533] syzkaller0: entered allmulticast mode [ 593.781683][T26553] wlan0 speed is unknown, defaulting to 1000 [ 593.805834][T26553] wlan0 speed is unknown, defaulting to 1000 [ 593.813480][T26559] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5688'. [ 593.825055][T26553] wlan0 speed is unknown, defaulting to 1000 [ 593.852163][T26559] netlink: 'syz.0.5688': attribute type 9 has an invalid length. [ 593.880693][T26553] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 593.922514][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5689'. [ 593.931714][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5689'. [ 593.946025][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5689'. [ 593.974716][T26559] netlink: 'syz.0.5688': attribute type 11 has an invalid length. [ 593.982923][T26559] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5688'. [ 593.988408][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.002926][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.010992][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.019177][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.027427][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.037893][T26553] wlan0 speed is unknown, defaulting to 1000 [ 594.083707][ T30] audit: type=1804 audit(1763729612.000:9): pid=26564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5690" name="/newroot/539/cgroup.controllers" dev="tmpfs" ino=2760 res=1 errno=0 [ 594.108825][ T30] audit: type=1800 audit(1763729612.030:10): pid=26564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5690" name="cgroup.controllers" dev="tmpfs" ino=2760 res=0 errno=0 [ 594.110100][T26564] netlink: 'syz.4.5690': attribute type 1 has an invalid length. [ 594.166993][T26566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5691'. [ 594.190306][T26569] bond8: (slave geneve4): making interface the new active one [ 594.198723][T26569] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 594.208123][ T6436] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 594.228576][ T6436] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 594.245515][ T6436] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 594.274639][ T6436] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 594.330479][T26576] C: renamed from team_slave_0 (while UP) [ 594.340151][T26576] netlink: 'syz.0.5695': attribute type 1 has an invalid length. [ 594.348159][T26576] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 594.364554][T26577] netlink: 'syz.1.5693': attribute type 2 has an invalid length. [ 594.481408][T26583] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.947462][T26588] : entered promiscuous mode [ 596.427671][T26654] netlink: 'syz.1.5715': attribute type 1 has an invalid length. [ 596.503078][T26659] A link change request failed with some changes committed already. Interface vet0_virt_wifi may have been left with an inconsistent configuration, please check. [ 597.226979][T26678] __nla_validate_parse: 13 callbacks suppressed [ 597.226998][T26678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5723'. [ 598.188995][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5731'. [ 599.245236][T26713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5732'. [ 599.270369][T26714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5732'. [ 599.485788][T26732] netlink: 'syz.3.5735': attribute type 1 has an invalid length. [ 599.589336][T26733] netlink: 'syz.5.5738': attribute type 16 has an invalid length. [ 599.598073][T26733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5738'. [ 599.722843][T26744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5742'. [ 599.725382][T26746] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5741'. [ 599.745224][T26744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5742'. [ 599.756715][T26744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5742'. [ 599.998796][T26762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5748'. [ 600.032999][T26763] bond0: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 600.053197][T26767] netlink: 'syz.1.5750': attribute type 83 has an invalid length. [ 600.475227][T26802] netlink: 'syz.0.5760': attribute type 4 has an invalid length. [ 600.651770][T26810] ieee802154 phy0 wpan0: encryption failed: -22 [ 600.808938][T26820] pim6reg: entered allmulticast mode [ 600.825692][T26820] pim6reg: left allmulticast mode [ 601.033879][T26828] netlink: 'syz.5.5770': attribute type 2 has an invalid length. [ 601.582543][T26851] lo: entered promiscuous mode [ 601.601882][T26851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.742782][T26853] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 602.054622][T26870] SET target dimension over the limit! [ 602.074985][T26868] x_tables: duplicate underflow at hook 3 [ 602.213806][T26883] syzkaller0: entered promiscuous mode [ 602.230030][T26883] syzkaller0: entered allmulticast mode [ 602.357442][T26889] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 602.391497][ T12] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 602.408598][ T12] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 602.422214][T26896] __nla_validate_parse: 9 callbacks suppressed [ 602.422233][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5790'. [ 602.461371][T26893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5791'. [ 602.485795][ T12] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 602.560004][T26903] xt_l2tp: invalid flags combination: 8 [ 602.589040][ T12] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 602.645004][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5795'. [ 602.672865][T26908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5795'. [ 602.904170][T26925] netlink: 'syz.5.5799': attribute type 1 has an invalid length. [ 603.048810][T26933] netlink: 'syz.3.5801': attribute type 4 has an invalid length. [ 603.171231][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 603.281546][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5807'. [ 603.351053][T26954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5808'. [ 603.382988][T26956] team0: Cannot enslave team device to itself [ 603.481684][T26962] netlink: 'syz.5.5811': attribute type 83 has an invalid length. [ 603.512732][T26962] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 603.570933][T26962] bond8 (unregistering): Released all slaves [ 603.808124][T26977] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5815'. [ 603.858557][T26988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.090699][T27003] tipc: Enabling of bearer rejected, failed to enable media [ 604.260571][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5828'. [ 604.472253][T27034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5831'. [ 604.526010][T27036] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 604.553930][T27038] netlink: 'syz.0.5833': attribute type 1 has an invalid length. [ 604.590848][T27038] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 604.890736][T27066] openvswitch: netlink: Message has 6 unknown bytes. [ 605.109833][T27074] sctp: [Deprecated]: syz.0.5844 (pid 27074) Use of int in maxseg socket option. [ 605.109833][T27074] Use struct sctp_assoc_value instead [ 605.166350][T27078] netlink: 'syz.1.5842': attribute type 7 has an invalid length. [ 605.439916][T27106] Unsupported ieee802154 address type: 0 [ 605.599897][T27116] netlink: 'syz.0.5856': attribute type 2 has an invalid length. [ 605.630766][T27118] syzkaller0: entered promiscuous mode [ 605.636341][T27118] syzkaller0: entered allmulticast mode [ 605.647660][T27116] netlink: 'syz.0.5856': attribute type 8 has an invalid length. [ 605.741738][T27129] netlink: 'syz.4.5862': attribute type 1 has an invalid length. [ 605.803661][T27135] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 606.717299][T27190] bond10: Invalid ad_actor_system MAC address. [ 606.730531][T27190] bond10: option ad_actor_system: invalid value (1) [ 606.759258][T27190] bond10 (unregistering): Released all slaves [ 606.793641][T27196] tipc: Enabled bearer , priority 13 [ 607.038627][T27209] netlink: 'syz.3.5889': attribute type 1 has an invalid length. [ 607.375670][T27225] netlink: 'syz.0.5892': attribute type 2 has an invalid length. [ 607.406444][T27225] 9: entered promiscuous mode [ 607.595061][T27244] __nla_validate_parse: 17 callbacks suppressed [ 607.595080][T27244] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5898'. [ 607.647958][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'. [ 607.926896][T27275] validate_nla: 3 callbacks suppressed [ 607.926913][T27275] netlink: 'syz.5.5906': attribute type 4 has an invalid length. [ 607.943029][ T24] tipc: Node number set to 315621169 [ 607.957470][T27275] netlink: 'syz.5.5906': attribute type 1 has an invalid length. [ 607.986611][T27275] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20004 [ 608.262761][T27294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5910'. [ 608.481809][T27316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5917'. [ 608.569226][T27324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.342169][T27353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5927'. [ 609.665477][T27361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5930'. [ 609.690107][T27361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5930'. [ 609.702029][T27366] netlink: 'syz.0.5932': attribute type 12 has an invalid length. [ 609.890412][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5935'. [ 609.895915][T27381] syzkaller0: entered promiscuous mode [ 609.905522][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5935'. [ 609.906822][T27381] syzkaller0: entered allmulticast mode [ 609.924359][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5935'. [ 609.965650][T27383] tipc: Enabled bearer , priority 0 [ 609.973932][T27381] tipc: Enabling of bearer rejected, already enabled [ 610.261404][T27402] siw: device registration error -23 [ 610.279867][T27398] IPVS: length: 87 != 24 [ 610.318782][T27380] tipc: Resetting bearer [ 610.383125][T27380] tipc: Disabling bearer [ 610.470568][T27416] sctp: [Deprecated]: syz.4.5944 (pid 27416) Use of int in max_burst socket option. [ 610.470568][T27416] Use struct sctp_assoc_value instead [ 610.560447][T27420] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 610.606692][T27423] pim6reg1: entered promiscuous mode [ 610.621905][T27423] pim6reg1: entered allmulticast mode [ 610.732283][T27435] netlink: 'syz.5.5950': attribute type 1 has an invalid length. [ 610.753887][T27435] bond8: entered promiscuous mode [ 610.759489][T27435] 8021q: adding VLAN 0 to HW filter on device bond8 [ 610.776748][T27435] bond8: (slave bridge9): making interface the new active one [ 610.784757][T27435] bridge9: entered promiscuous mode [ 610.790711][T27435] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 611.322789][T27451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.366783][T27448] bridge4: entered promiscuous mode [ 611.372227][T27448] bridge4: entered allmulticast mode [ 611.455677][T27454] nbd1: detected capacity change from 0 to 127 [ 611.478481][T27464] netlink: 'syz.0.5959': attribute type 7 has an invalid length. [ 611.607017][ T5832] block nbd1: Receive control failed (result -32) [ 611.842154][T27490] syzkaller0: entered promiscuous mode [ 611.880646][T27490] syzkaller0: entered allmulticast mode [ 612.064789][T27503] netlink: 'syz.5.5969': attribute type 21 has an invalid length. [ 612.180194][T27515] netlink: 'syz.0.5972': attribute type 3 has an invalid length. [ 612.237670][T27518] xt_connbytes: Forcing CT accounting to be enabled [ 612.247556][T27518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.280443][T27518] batman_adv: batadv0: Removing interface: vlan2 [ 612.290052][T27518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.953246][T27554] __nla_validate_parse: 40 callbacks suppressed [ 612.953265][T27554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5986'. [ 612.953848][T27557] netlink: 'syz.1.5988': attribute type 25 has an invalid length. [ 612.982182][T27557] netlink: 'syz.1.5988': attribute type 7 has an invalid length. [ 612.989995][T27557] netlink: 'syz.1.5988': attribute type 1 has an invalid length. [ 612.997775][T27557] netlink: 'syz.1.5988': attribute type 4 has an invalid length. [ 613.006126][T27557] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5988'. [ 613.018534][T27557] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.110506][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5989'. [ 613.187811][T27564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.226249][T27573] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5991'. [ 613.523162][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6001'. [ 613.539526][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6001'. [ 613.560248][T27599] netlink: 'syz.4.6000': attribute type 1 has an invalid length. [ 613.721695][T27612] netlink: 'syz.5.6005': attribute type 1 has an invalid length. [ 613.735664][T27612] netlink: 'syz.5.6005': attribute type 3 has an invalid length. [ 613.743749][T27612] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6005'. [ 613.753150][T27612] NCSI netlink: No device for ifindex 813332851 [ 613.762272][T27612] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.6005'. [ 613.777909][T27612] tipc: Enabling of bearer rejected, failed to enable media [ 613.795825][T27617] netlink: 'syz.3.6004': attribute type 21 has an invalid length. [ 613.826558][T27617] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6004'. [ 613.867548][T27617] netlink: 'syz.3.6004': attribute type 21 has an invalid length. [ 613.917173][T27625] syz.4.6009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 613.935394][T27625] CPU: 1 UID: 0 PID: 27625 Comm: syz.4.6009 Not tainted syzkaller #0 PREEMPT(full) [ 613.935421][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.935434][T27625] Call Trace: [ 613.935441][T27625] [ 613.935450][T27625] dump_stack_lvl+0x189/0x250 [ 613.935486][T27625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.935512][T27625] ? __pfx__printk+0x10/0x10 [ 613.935532][T27625] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 613.935559][T27625] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 613.935587][T27625] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 613.935616][T27625] warn_alloc+0x214/0x310 [ 613.935645][T27625] ? stack_depot_save_flags+0x40/0x860 [ 613.935679][T27625] ? __pfx_warn_alloc+0x10/0x10 [ 613.935709][T27625] ? kasan_save_track+0x3e/0x80 [ 613.935734][T27625] ? __kasan_kmalloc+0x93/0xb0 [ 613.935762][T27625] ? xsk_setsockopt+0x4dc/0x8d0 [ 613.935785][T27625] ? do_sock_setsockopt+0x17c/0x1b0 [ 613.935803][T27625] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 613.935819][T27625] ? do_syscall_64+0xfa/0xfa0 [ 613.935843][T27625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.935871][T27625] __vmalloc_node_range_noprof+0x125/0x12d0 [ 613.935930][T27625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 613.935961][T27625] ? __kasan_kmalloc+0x93/0xb0 [ 613.935995][T27625] vmalloc_user_noprof+0xad/0xf0 [ 613.936021][T27625] ? xskq_create+0xbf/0x170 [ 613.936046][T27625] xskq_create+0xbf/0x170 [ 613.936073][T27625] xsk_init_queue+0xb0/0x110 [ 613.936099][T27625] xsk_setsockopt+0x4dc/0x8d0 [ 613.936148][T27625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.936174][T27625] ? __pfx_aa_sk_perm+0x10/0x10 [ 613.936200][T27625] ? aa_sock_opt_perm+0xff/0x1b0 [ 613.936232][T27625] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 613.936251][T27625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.936277][T27625] do_sock_setsockopt+0x17c/0x1b0 [ 613.936302][T27625] __x64_sys_setsockopt+0x13f/0x1b0 [ 613.936328][T27625] do_syscall_64+0xfa/0xfa0 [ 613.936354][T27625] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.936381][T27625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.936406][T27625] ? clear_bhb_loop+0x60/0xb0 [ 613.936430][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.936449][T27625] RIP: 0033:0x7f910d58f749 [ 613.936467][T27625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.936484][T27625] RSP: 002b:00007f910e3ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 613.936505][T27625] RAX: ffffffffffffffda RBX: 00007f910d7e5fa0 RCX: 00007f910d58f749 [ 613.936518][T27625] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 613.936530][T27625] RBP: 00007f910d613f91 R08: 0000000000000004 R09: 0000000000000000 [ 613.936542][T27625] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.936554][T27625] R13: 00007f910d7e6038 R14: 00007f910d7e5fa0 R15: 00007ffe9f09c8d8 [ 613.936589][T27625] [ 613.936596][T27625] Mem-Info: [ 614.101519][T27630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6012'. [ 614.141854][T27625] active_anon:3913 inactive_anon:0 isolated_anon:0 [ 614.141854][T27625] active_file:3078 inactive_file:40082 isolated_file:0 [ 614.141854][T27625] unevictable:768 dirty:92 writeback:0 [ 614.141854][T27625] slab_reclaimable:12663 slab_unreclaimable:125126 [ 614.141854][T27625] mapped:28937 shmem:1377 pagetables:1133 [ 614.141854][T27625] sec_pagetables:0 bounce:0 [ 614.141854][T27625] kernel_misc_reclaimable:0 [ 614.141854][T27625] free:1295832 free_pcp:13084 free_cma:0 [ 614.389856][T27625] Node 0 active_anon:15652kB inactive_anon:0kB active_file:12312kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115748kB dirty:368kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14708kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 614.425965][T27625] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 614.449758][T27643] sch_fq: defrate 0 ignored. [ 614.463163][T27625] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.494630][T27625] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 614.500612][T27625] Node 0 DMA32 free:1272900kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15752kB inactive_anon:0kB active_file:12312kB inactive_file:160128kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:36028kB local_pcp:17952kB free_cma:0kB [ 614.604255][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 614.609033][T27625] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.667396][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 614.672178][T27625] Node 1 Normal free:3895068kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:7616kB free_cma:0kB [ 614.718151][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 614.727984][T27656] pim6reg1: entered promiscuous mode [ 614.733316][T27656] pim6reg1: entered allmulticast mode [ 614.765463][T27625] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 614.781470][T27625] Node 0 DMA32: 2591*4kB (UME) 1261*8kB (UME) 526*16kB (UME) 1090*32kB (UM) 565*64kB (UME) 184*128kB (UME) 60*256kB (UME) 233*512kB (UME) 93*1024kB (UM) 13*2048kB (UM) 218*4096kB (UM) = 1272900kB [ 614.801697][T27625] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 614.813811][T27625] Node 1 Normal: 201*4kB (U) 49*8kB (UME) 39*16kB (UME) 104*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895068kB [ 614.832205][T27625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.842338][T27625] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.854605][T27625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.855217][T27658] gretap4: entered promiscuous mode [ 614.864267][T27625] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 614.864290][T27625] 44534 total pagecache pages [ 614.864300][T27625] 0 pages in swap cache [ 614.864308][T27625] Free swap = 124996kB [ 614.864318][T27625] Total swap = 124996kB [ 614.864328][T27625] 2097051 pages RAM [ 614.864337][T27625] 0 pages HighMem/MovableOnly [ 614.864345][T27625] 424122 pages reserved [ 614.864354][T27625] 0 pages cma reserved [ 614.939202][T27661] sock: sock_timestamping_bind_phc: sock not bind to device [ 615.875424][T27723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.133883][T27730] x_tables: duplicate underflow at hook 1 [ 616.156625][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.168496][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.182062][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.192814][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.201542][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 616.261307][T27733] lo speed is unknown, defaulting to 1000 [ 616.500088][T27733] wlan0 speed is unknown, defaulting to 1000 [ 616.617114][T27752] netlink: 'syz.0.6049': attribute type 3 has an invalid length. [ 616.809454][T27733] chnl_net:caif_netlink_parms(): no params data found [ 617.197358][T27733] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.219004][T27733] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.234977][T27733] bridge_slave_0: entered allmulticast mode [ 617.254453][T27733] bridge_slave_0: entered promiscuous mode [ 617.263271][T27788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.279905][T27733] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.305148][T27733] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.312539][T27733] bridge_slave_1: entered allmulticast mode [ 617.327841][T27733] bridge_slave_1: entered promiscuous mode [ 617.421347][T27733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.438048][T27733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.531212][T27733] team0: Port device team_slave_0 added [ 617.543328][T27803] lo speed is unknown, defaulting to 1000 [ 617.593519][T27733] team0: Port device team_slave_1 added [ 617.737216][T27733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.748736][T27733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.810839][T27733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.904568][T27803] wlan0 speed is unknown, defaulting to 1000 [ 617.982320][T27733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.009852][T27733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.036944][T27733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.256025][ T52] Bluetooth: hci0: command tx timeout [ 618.283147][T27733] hsr_slave_0: entered promiscuous mode [ 618.291408][T27733] hsr_slave_1: entered promiscuous mode [ 618.298848][T27733] debugfs: 'hsr0' already exists in 'hsr' [ 618.304853][T27733] Cannot create hsr debugfs directory [ 618.538334][T27853] __nla_validate_parse: 75 callbacks suppressed [ 618.538351][T27853] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6076'. [ 618.560505][T27853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6076'. [ 618.580009][T27853] netlink: 31 bytes leftover after parsing attributes in process `syz.5.6076'. [ 618.601289][T27853] netlink: 'syz.5.6076': attribute type 3 has an invalid length. [ 618.615473][T27853] netlink: 'syz.5.6076': attribute type 2 has an invalid length. [ 618.623302][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880576ff400: rx timeout, send abort [ 618.623610][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880576ff400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 618.647855][T27853] netlink: 31 bytes leftover after parsing attributes in process `syz.5.6076'. [ 618.786261][T27855] syzkaller0: entered promiscuous mode [ 618.805845][T27855] syzkaller0: entered allmulticast mode [ 618.965759][T27875] netlink: 'syz.1.6083': attribute type 5 has an invalid length. [ 618.985332][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 619.007026][T27872] tipc: Enabled bearer , priority 0 [ 619.068513][T27883] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 619.078746][T27883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.089415][T27879] bond12: option lp_interval: invalid value (0) [ 619.105310][T27879] bond12: option lp_interval: allowed values 1 - 2147483647 [ 619.116517][T27888] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 619.129045][T27879] bond12 (unregistering): Released all slaves [ 619.137147][T27888] netlink: 'syz.0.6086': attribute type 1 has an invalid length. [ 619.163097][T27872] syzkaller0: entered promiscuous mode [ 619.169561][T27872] syzkaller0: entered allmulticast mode [ 619.189297][T27872] tipc: Resetting bearer [ 619.234791][T27889] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 619.283361][T27888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6086'. [ 619.325779][T27733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.337557][T27733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 619.348842][T27733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 619.353478][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 619.359489][T27733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 619.393213][T27871] tipc: Resetting bearer [ 619.423045][T27871] tipc: Disabling bearer [ 619.550859][T27733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.566345][T27733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 619.577311][T27733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 619.587876][T27733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 619.703587][T27925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6096'. [ 619.716730][T27733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.736116][T27733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 619.747732][T27733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 619.758487][T27733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 619.818222][T27929] syzkaller0: entered promiscuous mode [ 619.825497][T27929] syzkaller0: entered allmulticast mode [ 619.982186][T27733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.005316][T27733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 620.016203][T27733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 620.027045][T27733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 620.068742][T27939] syzkaller0: entered promiscuous mode [ 620.087930][T27939] syzkaller0: entered allmulticast mode [ 620.227613][T27947] netlink: 'syz.1.6102': attribute type 32 has an invalid length. [ 620.376901][T27733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 620.388930][T27733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 620.401191][T27733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.431567][T27733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.455256][T27952] vlan2: entered promiscuous mode [ 620.460356][T27952] veth1: entered promiscuous mode [ 620.597279][T27733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.627103][T27733] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.661719][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.668931][T14508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.725398][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.732600][T14508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.768994][T27968] geneve2: entered promiscuous mode [ 620.774403][T27968] geneve2: entered allmulticast mode [ 620.783487][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.800745][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.817267][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.831041][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.903562][T27733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.011374][T27978] syzkaller0: entered allmulticast mode [ 622.729608][T28003] x_tables: duplicate underflow at hook 2 [ 622.739883][T27733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.750695][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 622.784655][T28006] netlink: 'syz.1.6115': attribute type 30 has an invalid length. [ 622.821142][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6114'. [ 622.870451][T14500] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.888568][T14500] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.904819][T28015] bond0: (slave bond_slave_0): Releasing backup interface [ 622.926946][T28015] bond0: (slave bond_slave_1): Releasing backup interface [ 622.943871][T28017] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 622.955613][T28015] team0: Port device team_slave_0 removed [ 622.965534][T28015] team0: Port device team_slave_1 removed [ 622.983518][T28015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.993038][T28015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.012255][T14500] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.177800][T28025] tipc: Enabled bearer , priority 0 [ 623.192862][T28025] syzkaller0: entered promiscuous mode [ 623.215414][T28025] syzkaller0: entered allmulticast mode [ 623.237160][T28025] tipc: Resetting bearer [ 623.252800][T28024] tipc: Resetting bearer [ 623.285211][T28024] tipc: Disabling bearer [ 623.310524][T28034] netlink: 'syz.5.6125': attribute type 10 has an invalid length. [ 623.339283][T28034] team0: Port device dummy0 added [ 623.372921][T28040] tipc: Enabled bearer , priority 0 [ 623.386184][T28039] syzkaller0: entered promiscuous mode [ 623.393239][T28039] syzkaller0: entered allmulticast mode [ 623.441657][T28038] tipc: Resetting bearer [ 623.466247][T28038] tipc: Disabling bearer [ 623.486255][T27733] veth0_vlan: entered promiscuous mode [ 623.499287][T27733] veth1_vlan: entered promiscuous mode [ 623.706584][T27733] veth0_macvtap: entered promiscuous mode [ 623.737321][T27733] veth1_macvtap: entered promiscuous mode [ 623.837477][T27733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.877506][T27733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.904627][T14500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.983861][T28066] 8021q: VLANs not supported on tunl0 [ 624.000266][T14500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.009962][T14500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.044332][T14500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.079677][T28072] __nla_validate_parse: 5 callbacks suppressed [ 624.079697][T28072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6134'. [ 624.114400][T28072] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6134'. [ 624.284974][T28076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6136'. [ 624.371954][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.380309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.479608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.500027][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.520998][T28086] tipc: Enabled bearer , priority 0 [ 624.586217][T28086] syzkaller0: entered promiscuous mode [ 624.593650][T28086] syzkaller0: entered allmulticast mode [ 624.600151][T28086] tipc: Resetting bearer [ 624.770799][T14500] tipc: Resetting bearer [ 624.799004][T28085] tipc: Resetting bearer [ 625.139191][T28103] netlink: 'syz.4.6145': attribute type 13 has an invalid length. [ 626.383312][T28085] tipc: Disabling bearer [ 626.392364][T28089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6141'. [ 626.401747][T28093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6143'. [ 626.852105][T28124] tipc: Enabled bearer , priority 0 [ 626.998049][T28121] syzkaller0: entered promiscuous mode [ 627.003558][T28121] syzkaller0: entered allmulticast mode [ 627.027276][T28126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6151'. [ 627.055417][T28123] tipc: Resetting bearer [ 627.078278][T28127] bridge0: Caught tx_queue_len zero misconfig [ 627.129262][T28120] tipc: Resetting bearer [ 627.209519][T28120] tipc: Disabling bearer [ 627.245849][T28129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.253553][T28129] IPv6: NLM_F_CREATE should be set when creating new route [ 627.260862][T28129] IPv6: NLM_F_CREATE should be set when creating new route [ 627.279140][T28129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.288348][T28127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.315850][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.326806][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 627.337418][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 627.345470][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 627.353725][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.381797][T28136] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 627.499065][ T2908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.512407][ T2908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.528715][ T2908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 627.558453][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6157'. [ 627.637729][T28134] lo speed is unknown, defaulting to 1000 [ 627.686355][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.697659][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.724772][ T2908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 627.760391][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6158'. [ 627.937751][ T2908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.962949][ T2908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.001657][ T2908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 628.118552][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6163'. [ 628.153229][T28184] Bluetooth: MGMT ver 1.23 [ 628.182414][ T2908] batman_adv: batadv0: Removing interface: netdevsim0 [ 628.279370][T28134] wlan0 speed is unknown, defaulting to 1000 [ 628.567645][ T2908] bridge_slave_0: left allmulticast mode [ 628.592367][ T2908] bridge_slave_0: left promiscuous mode [ 628.607875][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.757074][T28220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6173'. [ 629.455908][ T5832] Bluetooth: hci1: command tx timeout [ 629.889170][ T2908] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 630.340978][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.351714][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.363825][ T2908] bond0 (unregistering): Released all slaves [ 630.471611][ T2908] bond1 (unregistering): Released all slaves [ 630.484120][ T2908] bond2 (unregistering): Released all slaves [ 630.496906][ T2908] bond3 (unregistering): Released all slaves [ 630.509968][ T2908] bond4 (unregistering): Released all slaves [ 630.615962][ T2908] bond5 (unregistering): Released all slaves [ 630.722648][ T2908] bond6 (unregistering): (slave veth5): Releasing backup interface [ 630.732295][ T2908] bond6 (unregistering): Released all slaves [ 630.745359][ T2908] bond7 (unregistering): Released all slaves [ 630.758112][ T2908] bond8 (unregistering): Released all slaves [ 630.770686][ T2908] bond9 (unregistering): Released all slaves [ 630.938911][ T2908] : left promiscuous mode [ 631.183192][ T2908] tipc: Disabling bearer [ 631.198951][ T2908] tipc: Disabling bearer [ 631.243595][T28253] netlink: 'syz.0.6181': attribute type 1 has an invalid length. [ 631.264584][ T2908] tipc: Left network mode [ 631.394439][T28253] bond12: entered promiscuous mode [ 631.405133][T28260] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 631.424425][T28253] 8021q: adding VLAN 0 to HW filter on device bond12 [ 631.527015][T28273] __nla_validate_parse: 1 callbacks suppressed [ 631.527034][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6185'. [ 631.530661][T28134] chnl_net:caif_netlink_parms(): no params data found [ 631.535072][ T5832] Bluetooth: hci1: command tx timeout [ 631.590084][T28278] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 631.736288][T28281] bridge0: entered allmulticast mode [ 631.895291][T28296] netlink: 'syz.5.6189': attribute type 2 has an invalid length. [ 631.903146][T28296] netlink: 'syz.5.6189': attribute type 1 has an invalid length. [ 631.911155][T28296] netlink: 'syz.5.6189': attribute type 2 has an invalid length. [ 631.920320][T28296] netlink: 'syz.5.6189': attribute type 2 has an invalid length. [ 631.938280][T28296] netlink: 'syz.5.6189': attribute type 1 has an invalid length. [ 632.075435][T28134] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.085085][T28134] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.092358][T28134] bridge_slave_0: entered allmulticast mode [ 632.102768][T28134] bridge_slave_0: entered promiscuous mode [ 632.112094][T28134] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.119378][T28134] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.126751][T28134] bridge_slave_1: entered allmulticast mode [ 632.135105][T28134] bridge_slave_1: entered promiscuous mode [ 632.271489][T28134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.299298][T28134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.400282][T28134] team0: Port device team_slave_0 added [ 632.449909][T28134] team0: Port device team_slave_1 added [ 632.683510][T28134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.702495][T28134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.752048][T28134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.795546][T28332] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6201'. [ 632.810485][ T2908] hsr_slave_0: left promiscuous mode [ 632.831930][ T2908] hsr_slave_1: left promiscuous mode [ 632.839375][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.850090][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.852845][T28336] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6203'. [ 632.876851][T28336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6203'. [ 632.877635][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.893793][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.919052][ T2908] veth1_macvtap: left promiscuous mode [ 632.925164][ T2908] veth0_macvtap: left promiscuous mode [ 632.931926][ T2908] veth1_vlan: left promiscuous mode [ 632.939318][ T2908] veth0_vlan: left promiscuous mode [ 633.186912][ T2908] pim6reg527 (unregistering): left allmulticast mode [ 633.491001][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 633.531062][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 633.615770][ T5832] Bluetooth: hci1: command tx timeout [ 633.708408][ T2908] wg0 (unregistering): left allmulticast mode [ 633.812887][T28134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.821309][T28134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.847757][T28134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.866324][T28338] tipc: Started in network mode [ 633.871222][T28338] tipc: Node identity 5ed724748ed5, cluster identity 4711 [ 633.880188][T28338] tipc: Enabled bearer , priority 0 [ 633.896499][T28342] syzkaller0: entered promiscuous mode [ 633.938852][T28342] syzkaller0: entered allmulticast mode [ 634.060967][T28353] tipc: Resetting bearer [ 634.099137][T28331] tipc: Resetting bearer [ 634.154912][T28331] tipc: Disabling bearer [ 634.367665][T28134] hsr_slave_0: entered promiscuous mode [ 634.379519][T28383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6213'. [ 634.390205][T28134] hsr_slave_1: entered promiscuous mode [ 634.397942][T28134] debugfs: 'hsr0' already exists in 'hsr' [ 634.406619][T28134] Cannot create hsr debugfs directory [ 634.525197][T28390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6215'. [ 634.525756][T28380] pim6reg527: entered allmulticast mode [ 634.553860][T28389] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6216'. [ 634.681252][T28393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6217'. [ 634.809710][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6219'. [ 634.824335][T28398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6219'. [ 634.896847][ T2908] IPVS: stop unused estimator thread 0... [ 635.133851][T28405] syzkaller0: entered promiscuous mode [ 635.146950][T28405] syzkaller0: entered allmulticast mode [ 635.403382][T28414] siw: device registration error -23 [ 635.438453][T28134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 635.456675][T28134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 635.470643][T28134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 635.499981][T28134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 635.580541][T28429] xt_hashlimit: size too large, truncated to 1048576 [ 635.610490][T28429] xt_hashlimit: size too large, truncated to 1048576 [ 635.695132][ T52] Bluetooth: hci1: command tx timeout [ 635.755904][T28134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.773726][T28440] xt_hashlimit: size too large, truncated to 1048576 [ 635.803784][T28134] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.865703][T14491] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.872867][T14491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.946334][T14491] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.953545][T14491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.747718][T28134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.804724][T28484] bond13: option resend_igmp: invalid value (32767) [ 636.811618][T28484] bond13: option resend_igmp: allowed values 0 - 255 [ 636.822522][T28484] bond13 (unregistering): Released all slaves [ 636.876070][T28481] bond13: option resend_igmp: invalid value (32767) [ 636.888372][T28481] bond13: option resend_igmp: allowed values 0 - 255 [ 636.905777][T28481] bond13 (unregistering): Released all slaves [ 637.095917][T28134] veth0_vlan: entered promiscuous mode [ 637.128629][T28134] veth1_vlan: entered promiscuous mode [ 637.208773][T28134] veth0_macvtap: entered promiscuous mode [ 637.250822][T28134] veth1_macvtap: entered promiscuous mode [ 637.309452][T28134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.339767][T28134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.391856][T14491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.432963][T14491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.459550][T14491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.489201][T14491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.677591][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.691540][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.762559][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.775319][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 637.788001][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.046876][T28524] syzkaller0: entered promiscuous mode [ 638.072907][T28524] syzkaller0: entered allmulticast mode [ 638.089219][T28522] lo: MTU too low for tipc bearer [ 638.124890][T28522] tipc: Enabling of bearer rejected, failed to enable media [ 638.141045][T28528] __nla_validate_parse: 1 callbacks suppressed [ 638.141064][T28528] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6249'. [ 638.202691][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6250'. [ 638.317054][T28531] netlink: 'syz.4.6250': attribute type 1 has an invalid length. [ 638.337878][T28531] netlink: 'syz.4.6250': attribute type 2 has an invalid length. [ 638.550612][T28545] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6253'. [ 638.817015][T28554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6258'. [ 638.954233][T28556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 639.040898][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.050900][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.079501][T28564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6261'. [ 639.095103][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.111686][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.121512][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.160756][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'. [ 639.185098][T28566] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 639.218660][T28566] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 639.303687][T28561] lo speed is unknown, defaulting to 1000 [ 639.357390][ T6436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.377639][ T6436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.389297][T28577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6265'. [ 639.412242][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6265'. [ 639.622723][T28589] netlink: 'syz.0.6269': attribute type 13 has an invalid length. [ 639.651033][ T6436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.675916][ T6436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.730290][T28580] pim6reg: entered allmulticast mode [ 639.737157][T28581] pim6reg: left allmulticast mode [ 639.785464][T28602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6269'. [ 639.967807][T28605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6272'. [ 640.051468][ T6436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.066227][ T6436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.343699][ T6436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.354740][ T6436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.482585][T28629] pimreg3: entered allmulticast mode [ 640.609910][T28635] tipc: Started in network mode [ 640.617543][T28635] tipc: Node identity 868dbeb1a7dd, cluster identity 4711 [ 640.625156][T28635] tipc: Enabled bearer , priority 0 [ 640.772037][T28635] syzkaller0: entered promiscuous mode [ 640.780427][T28635] syzkaller0: entered allmulticast mode [ 640.786732][T28635] tipc: Resetting bearer [ 640.832963][T28642] tipc: Resetting bearer [ 641.214772][ T5832] Bluetooth: hci5: command tx timeout [ 642.539043][T28642] tipc: Disabling bearer [ 642.575572][T28637] lo: Caught tx_queue_len zero misconfig [ 642.707911][ T5920] tipc: Node number set to 558939825 [ 642.733645][T28667] Unsupported ieee802154 address type: 0 [ 643.066907][T28687] netlink: 'syz.5.6294': attribute type 1 has an invalid length. [ 643.294309][ T5832] Bluetooth: hci5: command tx timeout [ 643.339554][ T6436] bond3 (unregistering): (slave gretap1): Releasing active interface [ 643.375967][ T6436] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 643.470953][ T6436] dvmrp0 (unregistering): left allmulticast mode [ 643.525145][ T6436] team0: Port device geneve0 removed [ 644.067874][ T6436] bond1 (unregistering): Released all slaves [ 644.081534][ T6436] bond2 (unregistering): Released all slaves [ 644.095970][ T6436] bond3 (unregistering): Released all slaves [ 644.208969][ T6436] bond4 (unregistering): Released all slaves [ 644.221537][ T6436] bond5 (unregistering): Released all slaves [ 644.332195][ T6436] bond6 (unregistering): (slave bond7): Releasing backup interface [ 644.340345][ T6436] bond7 (unregistering): left promiscuous mode [ 644.347472][ T6436] bond6 (unregistering): Released all slaves [ 644.452592][ T6436] bond7 (unregistering): Released all slaves [ 644.554532][ T6436] bond8 (unregistering): Released all slaves [ 644.567206][ T6436] bond9 (unregistering): Released all slaves [ 644.581041][ T6436] bond10 (unregistering): Released all slaves [ 644.603030][ T6436] bond0 (unregistering): (slave bond11): Releasing backup interface [ 644.611897][ T6436] bond0 (unregistering): Released all slaves [ 644.721746][ T6436] bond11 (unregistering): Released all slaves [ 644.742981][T28677] __nla_validate_parse: 8 callbacks suppressed [ 644.743022][T28677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 644.760926][T28677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 644.788179][T28686] netlink: 'syz.4.6292': attribute type 3 has an invalid length. [ 644.832216][T28561] chnl_net:caif_netlink_parms(): no params data found [ 645.065097][T28722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6304'. [ 645.116891][T28716] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.132732][T28716] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.139989][T28716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.286970][T28561] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.300011][T28561] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.307513][T28561] bridge_slave_0: entered allmulticast mode [ 645.316269][T28561] bridge_slave_0: entered promiscuous mode [ 645.382823][ T5832] Bluetooth: hci5: command tx timeout [ 645.413503][T28561] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.425876][T28561] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.433722][T28561] bridge_slave_1: entered allmulticast mode [ 645.446961][T28751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6309'. [ 645.460068][T28561] bridge_slave_1: entered promiscuous mode [ 645.569689][T28740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6307'. [ 645.585441][T28561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.613898][T28561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.634316][T28748] syzkaller0: entered promiscuous mode [ 645.651105][T28748] syzkaller0: entered allmulticast mode [ 645.666987][T28740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6307'. [ 645.783699][T28561] team0: Port device team_slave_0 added [ 645.809909][T28561] team0: Port device team_slave_1 added [ 645.984979][T28561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.011015][T28561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.023527][T28787] netlink: 'syz.1.6318': attribute type 83 has an invalid length. [ 646.074441][T28561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.099456][T28785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6317'. [ 646.137863][T28561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.160247][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 646.166593][T28561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.197326][T28561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.435288][T28561] hsr_slave_0: entered promiscuous mode [ 646.448922][T28561] hsr_slave_1: entered promiscuous mode [ 646.458495][T28561] debugfs: 'hsr0' already exists in 'hsr' [ 646.464584][T28561] Cannot create hsr debugfs directory [ 646.477634][T28809] ip6tnl0: Caught tx_queue_len zero misconfig [ 646.652076][ T6436] : left promiscuous mode [ 646.700860][ T6436] 9: left promiscuous mode [ 646.711968][T28821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6329'. [ 646.772469][T28813] syzkaller1: entered promiscuous mode [ 646.779192][T28813] syzkaller1: entered allmulticast mode [ 646.786751][T28827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6330'. [ 646.802020][ T6436] 9: left promiscuous mode [ 646.869087][ T6436] tipc: Left network mode [ 647.171827][T28838] team0: Device gtp0 is of different type [ 647.455864][ T5832] Bluetooth: hci5: command tx timeout [ 647.579893][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.657130][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.673308][ T6436] veth1_macvtap: left promiscuous mode [ 647.685172][ T6436] veth0_macvtap: left promiscuous mode [ 647.702511][ T6436] veth1_vlan: left promiscuous mode [ 647.998759][T28859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.006356][T28859] IPv6: NLM_F_CREATE should be set when creating new route [ 648.013633][T28859] IPv6: NLM_F_CREATE should be set when creating new route [ 648.076914][T28859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.482464][ T6436] vlan1 (unregistering): left allmulticast mode [ 648.727360][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 648.772272][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 649.142414][T28870] erspan0: entered promiscuous mode [ 649.440629][T28561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.490106][T28561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 649.565556][T28561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 649.599678][T28561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 649.823021][T28911] __nla_validate_parse: 3 callbacks suppressed [ 649.823040][T28911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6353'. [ 649.929571][T28914] xt_hashlimit: size too large, truncated to 1048576 [ 649.970566][T28561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.002118][T28911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.009464][T28911] IPv6: NLM_F_CREATE should be set when creating new route [ 650.016767][T28911] IPv6: NLM_F_CREATE should be set when creating new route [ 650.054726][T28911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.197814][ T6436] IPVS: stop unused estimator thread 0... [ 650.241305][T28561] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.292919][T14500] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.300465][T14500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.345145][T14500] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.352380][T14500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.513668][T28938] syzkaller1: entered promiscuous mode [ 650.522266][T28938] syzkaller1: entered allmulticast mode [ 650.991582][T28561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.020304][T28972] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6369'. [ 651.183147][T28561] veth0_vlan: entered promiscuous mode [ 651.253322][T28561] veth1_vlan: entered promiscuous mode [ 651.343215][T28985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6374'. [ 651.347718][T28561] veth0_macvtap: entered promiscuous mode [ 651.378958][T28561] veth1_macvtap: entered promiscuous mode [ 651.468349][T28561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.519760][T28561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.531185][T28994] netlink: 'syz.1.6377': attribute type 4 has an invalid length. [ 651.565172][ T2908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.590984][ T2908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.620756][ T2908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.639836][ T2908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.869901][T29005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6382'. [ 651.882096][T14500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.891240][T29005] netlink: 13 bytes leftover after parsing attributes in process `syz.5.6382'. [ 651.909129][T14500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.978903][T29005] netlink: 'syz.5.6382': attribute type 83 has an invalid length. [ 652.023389][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.035180][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.175548][T29029] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6388'. [ 652.190793][T29028] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6388'. [ 652.200598][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6388'. [ 652.246187][T29034] xt_nat: multiple ranges no longer supported [ 652.364047][T29052] syzkaller0: entered promiscuous mode [ 652.370205][T29047] netlink: 'syz.3.6392': attribute type 1 has an invalid length. [ 652.370426][T29052] syzkaller0: entered allmulticast mode [ 652.392151][T29051] tipc: Enabled bearer , priority 0 [ 652.435281][T29050] tipc: Resetting bearer [ 652.480149][T29058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6394'. [ 652.481540][T29050] tipc: Resetting bearer [ 652.526329][T29050] tipc: Disabling bearer [ 652.540827][T29062] netlink: 'syz.3.6396': attribute type 33 has an invalid length. [ 652.552110][T29062] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6396'. [ 652.705077][T29069] netlink: 'syz.5.6398': attribute type 83 has an invalid length. [ 653.165597][T29100] x_tables: duplicate underflow at hook 2 [ 653.451043][T29117] pimreg: entered allmulticast mode [ 653.780814][T29129] lo: Caught tx_queue_len zero misconfig [ 653.933044][T29152] xt_hashlimit: max too large, truncated to 1048576 [ 654.319217][T29167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.336396][T29167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.652984][T29181] netlink: 'syz.5.6431': attribute type 1 has an invalid length. [ 656.250954][T29181] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 656.327736][T29194] batadv_slave_0: entered promiscuous mode [ 656.372711][T29193] batadv_slave_0: left promiscuous mode [ 656.426495][T29200] __nla_validate_parse: 6 callbacks suppressed [ 656.426515][T29200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6436'. [ 656.466120][ T5950] IPVS: starting estimator thread 0... [ 656.564118][T29204] IPVS: using max 31 ests per chain, 74400 per kthread [ 656.750208][T29222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6444'. [ 656.766889][T29223] netlink: 'syz.0.6442': attribute type 2 has an invalid length. [ 656.832925][T29222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.855667][T29222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.104884][T29245] ip6tnl0: Caught tx_queue_len zero misconfig [ 657.492246][T29253] syzkaller0: entered promiscuous mode [ 657.498338][T29253] syzkaller0: entered allmulticast mode [ 657.722150][T29266] netlink: 'syz.1.6458': attribute type 1 has an invalid length. [ 657.773960][T29270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6458'. [ 657.842546][T29275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6461'. [ 657.868864][T29277] Bluetooth: MGMT ver 1.23 [ 658.139721][T29281] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.147602][T29281] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.635292][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6467'. [ 658.691797][T29298] vlan2: entered promiscuous mode [ 658.697020][T29298] bridge0: entered promiscuous mode [ 658.782314][T29303] tipc: Enabling of bearer rejected, failed to enable media [ 659.080784][T29316] : entered promiscuous mode [ 659.244883][T29319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6473'. [ 659.320004][T29321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6474'. [ 659.337447][T29321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6474'. [ 659.347046][T29321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6474'. [ 659.356602][T29321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6474'. [ 659.493774][T29328] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 659.511511][T29328] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 659.758114][T29350] 8021q: VLANs not supported on ip6tnl0 [ 659.958818][T29358] veth0: entered allmulticast mode [ 660.147883][T29362] vlan3: entered allmulticast mode [ 660.153292][T29362] gretap0: entered allmulticast mode [ 660.478519][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 660.491721][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 660.501026][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 660.511299][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 660.519886][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.913763][T29388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.942992][T29388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.048946][T29395] sctp: [Deprecated]: syz.3.6499 (pid 29395) Use of int in max_burst socket option deprecated. [ 661.048946][T29395] Use struct sctp_assoc_value instead [ 661.358226][T29411] tipc: Enabled bearer , priority 10 [ 661.604871][T29423] netlink: 'syz.3.6507': attribute type 16 has an invalid length. [ 661.610939][T29427] netlink: 'syz.4.6506': attribute type 1 has an invalid length. [ 661.612728][T29423] __nla_validate_parse: 7 callbacks suppressed [ 661.612742][T29423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6507'. [ 661.621712][T29427] netlink: 'syz.4.6506': attribute type 3 has an invalid length. [ 661.646395][T29427] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6506'. [ 661.648339][T29429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6509'. [ 661.656698][T29427] NCSI netlink: No device for ifindex 813332851 [ 661.875843][T29429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.883336][T29429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.907844][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6514'. [ 661.945406][T29377] chnl_net:caif_netlink_parms(): no params data found [ 662.022095][T29454] veth1: Caught tx_queue_len zero misconfig [ 662.069930][T29458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.109199][T29461] x_tables: duplicate underflow at hook 1 [ 662.279317][T29377] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.298641][T29377] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.307355][T29377] bridge_slave_0: entered allmulticast mode [ 662.315539][T29377] bridge_slave_0: entered promiscuous mode [ 662.421122][T29471] syzkaller0: entered promiscuous mode [ 662.431747][T29471] syzkaller0: entered allmulticast mode [ 662.439108][T29377] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.447015][T29377] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.465392][T29377] bridge_slave_1: entered allmulticast mode [ 662.473503][T29377] bridge_slave_1: entered promiscuous mode [ 662.577171][ T5832] Bluetooth: hci3: command tx timeout [ 663.036879][T29495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6525'. [ 663.152730][T29499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6526'. [ 663.217212][T29500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.225172][T29500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.337118][T29503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6526'. [ 664.399972][T29498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.460183][T29377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.488357][T29506] netlink: 'syz.5.6527': attribute type 4 has an invalid length. [ 664.500769][T29377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.654277][ T5832] Bluetooth: hci3: command tx timeout [ 664.712661][T29377] team0: Port device team_slave_0 added [ 664.773172][T29528] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6534'. [ 664.797481][T29377] team0: Port device team_slave_1 added [ 664.929197][T29377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.954125][T29377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.998182][T29377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.018586][T29541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.020915][T29377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.032602][T29541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.052986][T29377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.079449][T29377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.283511][T29547] syzkaller0: entered promiscuous mode [ 665.322371][T29547] syzkaller0: entered allmulticast mode [ 665.353673][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6546'. [ 665.389414][T29563] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6547'. [ 665.546849][T29561] team0: Port device veth0_virt_wifi removed [ 665.800151][T29579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.808437][T29579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.734590][ T5832] Bluetooth: hci3: command tx timeout [ 667.362093][T29377] hsr_slave_0: entered promiscuous mode [ 667.370134][T29377] hsr_slave_1: entered promiscuous mode [ 667.377328][T29377] debugfs: 'hsr0' already exists in 'hsr' [ 667.384972][T29377] Cannot create hsr debugfs directory [ 667.407276][T29578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.517677][T29583] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6554'. [ 667.528145][T29583] team0: Caught tx_queue_len zero misconfig [ 667.758029][T29607] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 667.789960][T29609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6556'. [ 667.834644][T29377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.852456][T29377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.080394][T29613] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 668.155183][T29622] netlink: 'syz.5.6562': attribute type 83 has an invalid length. [ 668.423113][T29613] bond1 (unregistering): Released all slaves [ 668.544924][T29632] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6565'. [ 668.696536][T29377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.720629][T29377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.824522][ T5832] Bluetooth: hci3: command tx timeout [ 668.841317][T29642] netlink: 'syz.5.6568': attribute type 1 has an invalid length. [ 668.867261][T29377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.883358][T29377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.946595][T29642] 8021q: adding VLAN 0 to HW filter on device bond10 [ 668.948192][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6569'. [ 668.978829][T29647] bond10: (slave gretap3): making interface the new active one [ 668.989904][T29647] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 669.118018][T29377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.128777][T29377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.276942][T29659] syzkaller1: entered promiscuous mode [ 669.292748][T29659] syzkaller1: entered allmulticast mode [ 669.421754][T29670] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6575'. [ 669.460199][T29671] netlink: 'syz.3.6574': attribute type 1 has an invalid length. [ 669.478557][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6574'. [ 669.496007][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6574'. [ 669.620076][T29377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 669.637904][T29677] netlink: 'syz.5.6577': attribute type 1 has an invalid length. [ 669.734613][T29677] 8021q: adding VLAN 0 to HW filter on device bond11 [ 669.742460][T29377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 669.768370][T29677] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6577'. [ 669.835490][T29677] veth9: entered promiscuous mode [ 669.844465][T29677] bond11: (slave veth9): Enslaving as an active interface with a down link [ 669.873418][T29377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 669.885997][T29377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 670.282702][T29377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.406406][T29377] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.457130][T29717] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6586'. [ 670.512235][T29711] tipc: Enabled bearer , priority 2 [ 670.549406][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.556784][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.571328][T14491] team0: left allmulticast mode [ 670.584119][T14491] team_slave_0: left allmulticast mode [ 670.591253][T29720] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6587'. [ 670.595216][T14491] team_slave_1: left allmulticast mode [ 670.615749][T14491] team0: left promiscuous mode [ 670.620565][T14491] team_slave_0: left promiscuous mode [ 670.644583][T14491] team_slave_1: left promiscuous mode [ 670.650413][T14491] bridge0: port 2(team0) entered disabled state [ 670.661259][T14491] bridge_slave_0: left allmulticast mode [ 670.667318][T14491] bridge_slave_0: left promiscuous mode [ 670.673181][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.701271][T29726] netlink: 'syz.3.6588': attribute type 6 has an invalid length. [ 670.882121][T14491] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 671.140378][T14491] smc: removing net device gre0 with user defined pnetid SYZ1 [ 671.209825][T14491] dvmrp6 (unregistering): left allmulticast mode [ 671.229764][T14491] bond9 (unregistering): (slave geneve5): Releasing backup interface [ 671.253367][T14491] bond8 (unregistering): (slave geneve4): Releasing active interface [ 671.779841][T14491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.791176][T14491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.802549][T14491] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 671.815556][T14491] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 671.826902][T14491] bond0 (unregistering): Released all slaves [ 671.969160][T14491] bond1 (unregistering): Released all slaves [ 671.983097][T14491] bond2 (unregistering): Released all slaves [ 671.997925][T14491] bond3 (unregistering): Released all slaves [ 672.012232][T14491] bond4 (unregistering): Released all slaves [ 672.028974][T14491] bond5 (unregistering): Released all slaves [ 672.048600][T14491] bond6 (unregistering): Released all slaves [ 672.204338][T14491] bond7 (unregistering): Released all slaves [ 672.217594][T14491] bond8 (unregistering): Released all slaves [ 672.230392][T14491] bond9 (unregistering): Released all slaves [ 672.243436][T14491] bond10 (unregistering): Released all slaves [ 672.268808][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.276198][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.298337][T29737] netem: unknown loss type 0 [ 672.303439][T29737] netem: change failed [ 672.502353][T14491] tipc: Left network mode [ 672.890909][T29377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.960628][T29765] __nla_validate_parse: 1 callbacks suppressed [ 672.960648][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 672.981179][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 673.017615][T29377] veth0_vlan: entered promiscuous mode [ 673.063794][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6601'. [ 673.065212][T29377] veth1_vlan: entered promiscuous mode [ 673.083403][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6601'. [ 673.110154][T29377] veth0_macvtap: entered promiscuous mode [ 673.122527][T29377] veth1_macvtap: entered promiscuous mode [ 673.183074][T29377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.246786][T29377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.314947][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.329595][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.389748][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.513853][T29782] netlink: 'syz.3.6604': attribute type 1 has an invalid length. [ 673.527667][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6604'. [ 673.554426][T29784] tipc: Enabling of bearer rejected, failed to enable media [ 673.563868][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.626838][T14491] hsr_slave_0: left promiscuous mode [ 673.642782][T14491] hsr_slave_1: left promiscuous mode [ 673.659779][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.673186][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.715423][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.746961][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.770360][T14491] veth1_vlan: left promiscuous mode [ 673.779584][T14491] veth0_vlan: left promiscuous mode [ 673.937518][T29801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.510738][T14491] team0 (unregistering): Port device team_slave_1 removed [ 674.568984][T14491] team0 (unregistering): Port device team_slave_0 removed [ 674.967817][T29784] syzkaller0: entered promiscuous mode [ 674.973584][T29784] syzkaller0: entered allmulticast mode [ 675.271043][T29820] sctp: [Deprecated]: syz.1.6614 (pid 29820) Use of int in max_burst socket option. [ 675.271043][T29820] Use struct sctp_assoc_value instead [ 675.319231][T29820] sctp: [Deprecated]: syz.1.6614 (pid 29820) Use of int in max_burst socket option. [ 675.319231][T29820] Use struct sctp_assoc_value instead [ 675.334193][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.371008][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.487903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.505064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.605278][T29838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 675.634444][T29838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 675.654302][T29837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 675.733096][T29837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 675.918497][T29858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6622'. [ 675.948973][T29853] block nbd3: server does not support multiple connections per device. [ 675.958087][T29853] block nbd3: shutting down sockets [ 675.984822][T29861] netlink: 'syz.3.6623': attribute type 1 has an invalid length. [ 676.406794][T29874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.757412][T29890] netlink: 'syz.0.6633': attribute type 29 has an invalid length. [ 676.790625][T29890] netlink: 'syz.0.6633': attribute type 29 has an invalid length. [ 677.188161][T14491] IPVS: stop unused estimator thread 0... [ 677.620106][T29915] syzkaller0: entered promiscuous mode [ 677.639941][T29915] syzkaller0: entered allmulticast mode [ 677.828996][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.857243][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.867738][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 677.880816][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.905196][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.906800][T29929] tipc: Started in network mode [ 677.940483][T29929] tipc: Node identity 8eaebce32f04, cluster identity 4711 [ 677.948473][T29929] tipc: Enabled bearer , priority 0 [ 677.975320][T29929] syzkaller0: entered promiscuous mode [ 677.984485][T29929] syzkaller0: entered allmulticast mode [ 678.013291][T29929] tipc: Resetting bearer [ 678.027490][T29928] tipc: Resetting bearer [ 678.049084][T29928] tipc: Disabling bearer [ 678.083342][T29940] netlink: 'syz.1.6651': attribute type 1 has an invalid length. [ 678.095315][T29940] netlink: 'syz.1.6651': attribute type 2 has an invalid length. [ 678.167284][T29942] netlink: 'syz.3.6652': attribute type 6 has an invalid length. [ 678.178749][T29942] __nla_validate_parse: 6 callbacks suppressed [ 678.178770][T29942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6652'. [ 678.373865][T29952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6655'. [ 678.396717][T29945] netlink: 'syz.0.6653': attribute type 15 has an invalid length. [ 678.404318][T29952] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6655'. [ 678.413600][T29952] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6655'. [ 678.454242][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6655'. [ 678.494834][ T30] audit: type=1107 audit(1763729696.390:11): pid=29955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g [ 678.494834][ T30] ~Y88IH' [ 678.819842][T29974] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6661'. [ 678.863263][T29930] chnl_net:caif_netlink_parms(): no params data found [ 678.865097][T29979] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6662'. [ 678.899627][T29974] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6661'. [ 678.945572][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6662'. [ 679.021816][T29991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6664'. [ 679.207950][T29995] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 679.219787][T29930] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.232622][T29930] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.241527][T29930] bridge_slave_0: entered allmulticast mode [ 679.251890][T29930] bridge_slave_0: entered promiscuous mode [ 679.261074][T29930] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.284722][T29930] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.298475][T29930] bridge_slave_1: entered allmulticast mode [ 679.322054][T29930] bridge_slave_1: entered promiscuous mode [ 679.464559][T29930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.489765][T29930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.598828][T30016] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 679.638612][T30016] bond2: entered promiscuous mode [ 679.650621][T30016] bond2: entered allmulticast mode [ 679.658108][T30016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.688557][T29930] team0: Port device team_slave_0 added [ 679.699117][T29930] team0: Port device team_slave_1 added [ 679.767269][T29930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.792094][T29930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.829311][T29930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.842688][T29930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.851058][T29930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.884328][T29930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.918601][T30041] net veth1_virt_wifi .: renamed from virt_wifi0 [ 680.014213][ T5832] Bluetooth: hci4: command tx timeout [ 680.031217][T29930] hsr_slave_0: entered promiscuous mode [ 680.059873][T29930] hsr_slave_1: entered promiscuous mode [ 680.303036][T29930] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.412423][T29930] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.508750][T29930] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.606439][T29930] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.676154][T30067] netlink: 'syz.3.6684': attribute type 16 has an invalid length. [ 680.811894][T30069] netlink: 'syz.0.6685': attribute type 2 has an invalid length. [ 680.917779][T29930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 680.960453][T29930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 680.991701][T29930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 681.029246][T29930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 681.156651][T30087] gre1: entered promiscuous mode [ 681.161809][T30087] gre1: entered allmulticast mode [ 681.460797][T29930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.558877][T29930] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.583125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.590339][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.623088][T14500] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.630308][T14500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.095055][ T5832] Bluetooth: hci4: command tx timeout [ 682.192689][T30162] SET target dimension over the limit! [ 682.210505][T29930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.217339][T30162] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 682.447029][T30169] sit0: Caught tx_queue_len zero misconfig [ 682.911573][T29930] veth0_vlan: entered promiscuous mode [ 682.942959][T29930] veth1_vlan: entered promiscuous mode [ 682.985551][T30201] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 683.014487][T29930] veth0_macvtap: entered promiscuous mode [ 683.042483][T29930] veth1_macvtap: entered promiscuous mode [ 683.058718][T30205] nbd: must specify at least one socket [ 683.092203][T29930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.121665][T29930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.160514][T14500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.179959][T14500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.208024][T30213] __nla_validate_parse: 17 callbacks suppressed [ 683.208043][T30213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6724'. [ 683.212015][T30217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6726'. [ 683.256277][T14500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.283043][T14500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.338267][T30217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.352105][T30217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.386593][T30220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6727'. [ 683.473396][ T6436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.506277][ T6436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.585194][T14500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.606483][T14500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.840226][T30246] openvswitch: netlink: IP tunnel dst address not specified [ 684.020162][T30255] veth0: entered promiscuous mode [ 684.044760][T30255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6736'. [ 684.091304][T30261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6740'. [ 684.175037][ T5832] Bluetooth: hci4: command tx timeout [ 684.346734][T30261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.356515][T30273] netlink: 'syz.3.6743': attribute type 29 has an invalid length. [ 684.375151][T30277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6745'. [ 684.375492][T30261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.386416][T30273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6743'. [ 684.693074][T30296] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6751'. [ 684.765259][T30303] netlink: 'syz.3.6754': attribute type 1 has an invalid length. [ 684.794271][T30303] netlink: 'syz.3.6754': attribute type 2 has an invalid length. [ 684.810037][T30303] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6754'. [ 685.460582][T30345] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6769'. [ 685.928548][T30375] delete_channel: no stack [ 685.969711][T30379] netlink: 'syz.3.6782': attribute type 21 has an invalid length. [ 685.979456][T30379] netlink: 'syz.3.6782': attribute type 1 has an invalid length. [ 686.254603][ T5832] Bluetooth: hci4: command tx timeout [ 686.488331][T30406] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 686.858463][T30425] netlink: 'syz.1.6794': attribute type 2 has an invalid length. [ 686.888209][T30427] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 687.552726][T30464] syzkaller1: entered promiscuous mode [ 687.561364][T30464] syzkaller1: entered allmulticast mode [ 687.703625][T30472] syzkaller0: entered promiscuous mode [ 687.710211][T30472] syzkaller0: entered allmulticast mode [ 687.745877][T30476] 8021q: VLANs not supported on ip_vti0 [ 688.878711][T30511] __nla_validate_parse: 17 callbacks suppressed [ 688.878731][T30511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6816'. [ 690.124453][T30519] netlink: 'syz.3.6819': attribute type 15 has an invalid length. [ 690.133466][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 690.165730][T14491] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 690.177383][T30519] netlink: 'syz.3.6819': attribute type 15 has an invalid length. [ 690.190851][T14491] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 690.209350][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 690.239458][T14491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 690.265829][T14491] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 690.391499][T30534] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6826'. [ 690.684389][T30562] netlink: 'syz.5.6831': attribute type 11 has an invalid length. [ 690.694936][T30561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.738446][T30561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.797871][T30561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.884787][T30561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 691.093160][T30578] syzkaller0: entered promiscuous mode [ 691.110353][T30578] syzkaller0: entered allmulticast mode [ 691.158293][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6838'. [ 691.182750][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6837'. [ 691.198120][T30586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6837'. [ 691.221551][T30591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6838'. [ 691.229047][T30587] bridge0: entered promiscuous mode [ 691.238578][T30587] macsec1: entered promiscuous mode [ 691.247491][T30587] macsec1: entered allmulticast mode [ 691.253192][T30587] bridge0: entered allmulticast mode [ 691.260505][T30587] bridge0: port 3(macsec1) entered blocking state [ 691.317676][T30587] bridge0: port 3(macsec1) entered disabled state [ 691.337235][T30587] bridge0: left allmulticast mode [ 691.342628][T30587] bridge0: left promiscuous mode [ 691.379208][T30591] bridge0: entered promiscuous mode [ 691.433122][T30591] macsec1: entered promiscuous mode [ 691.473786][T30591] macsec1: entered allmulticast mode [ 691.493172][T30591] bridge0: entered allmulticast mode [ 691.521490][T30591] bridge0: port 3(macsec1) entered blocking state [ 691.539981][T30591] bridge0: port 3(macsec1) entered disabled state [ 691.553619][T30604] netlink: 'syz.1.6841': attribute type 27 has an invalid length. [ 691.577195][T30591] bridge0: left allmulticast mode [ 691.582732][T30591] bridge0: left promiscuous mode [ 691.660920][T30604] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.668149][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.678798][T14727] IPVS: starting estimator thread 0... [ 691.695041][T30604] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.702708][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.736819][T30618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6844'. [ 691.774470][T30616] IPVS: using max 30 ests per chain, 72000 per kthread [ 691.900857][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6848'. [ 691.991887][T30635] netlink: 'syz.0.6850': attribute type 3 has an invalid length. [ 692.003580][T30633] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 692.089779][T30642] netlink: 'syz.5.6852': attribute type 11 has an invalid length. [ 692.111745][T14491] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.111879][T30642] netlink: 'syz.5.6852': attribute type 11 has an invalid length. [ 692.123559][T14491] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.139917][T14491] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.152718][T14491] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.163046][T30644] nbd: must specify at least one socket [ 692.662944][T30672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.730792][T30672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.921841][T30693] netlink: 'syz.1.6866': attribute type 1 has an invalid length. [ 712.153783][ C0] hrtimer: interrupt took 18987511693 ns [ 798.173935][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 798.180938][ C1] rcu: 0-...!: (3 ticks this GP) idle=0234/1/0x4000000000000000 softirq=132944/132944 fqs=8 [ 798.192163][ C1] rcu: (detected by 1, t=10502 jiffies, g=117253, q=1244 ncpus=2) [ 798.200084][ C1] Sending NMI from CPU 1 to CPUs 0: [ 798.200121][ C0] NMI backtrace for cpu 0 [ 798.200146][ C0] CPU: 0 UID: 0 PID: 14727 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 798.200165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.200178][ C0] Workqueue: events_power_efficient gc_worker [ 798.200209][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 798.200231][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b 7a e9 f5 cc [ 798.200246][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000006 [ 798.200260][ C0] RAX: ffffffff89601ca7 RBX: dffffc0000000000 RCX: ffff8880250cbc80 [ 798.200273][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: ffff88803ad7b340 [ 798.200285][ C0] RBP: ffffc90000007e90 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 798.200298][ C0] R10: dffffc0000000000 R11: ffffffff89601c80 R12: ffff88803ad7b340 [ 798.200311][ C0] R13: 1ffff11004a198f3 R14: dffffc0000000000 R15: ffff8880250cc798 [ 798.200324][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 798.200338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.200350][ C0] CR2: 00007f09f99a0d58 CR3: 000000004db00000 CR4: 00000000003526f0 [ 798.200365][ C0] Call Trace: [ 798.200374][ C0] [ 798.200381][ C0] advance_sched+0x27/0xc90 [ 798.200417][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 798.200439][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 798.200464][ C0] ? __pfx_advance_sched+0x10/0x10 [ 798.200481][ C0] ? __pfx_advance_sched+0x10/0x10 [ 798.200498][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 798.200516][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 798.200555][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 798.200572][ C0] ? read_tsc+0x9/0x20 [ 798.200596][ C0] ? rcu_is_watching+0x15/0xb0 [ 798.200617][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 798.200648][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 798.200669][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 798.200693][ C0] [ 798.200699][ C0] [ 798.200706][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 798.200724][ C0] RIP: 0010:gc_worker+0x3ac/0x1380 [ 798.200747][ C0] Code: 00 44 89 f0 4c 8d 34 c3 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 07 4d b3 f8 4d 8b 3e <4c> 89 fe 48 83 e6 01 31 ff e8 16 90 4d f8 4c 89 f8 48 83 e0 01 0f [ 798.200761][ C0] RSP: 0018:ffffc9000f47f900 EFLAGS: 00000246 [ 798.200775][ C0] RAX: 1ffff11004607a50 RBX: ffff888023000000 RCX: dffffc0000000000 [ 798.200789][ C0] RDX: ffff8880250cbc80 RSI: 0000000000040000 RDI: 0000000000007a50 [ 798.200801][ C0] RBP: ffffc9000f47fa50 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 798.200814][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: 1ffff1100da66409 [ 798.200827][ C0] R13: 0000000000003a53 R14: ffff88802303d280 R15: 000000000000f4a1 [ 798.200852][ C0] ? gc_worker+0x264/0x1380 [ 798.200878][ C0] ? __pfx_gc_worker+0x10/0x10 [ 798.200901][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.200921][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 798.200939][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 798.200958][ C0] process_scheduled_works+0xae1/0x17b0 [ 798.200989][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 798.201015][ C0] worker_thread+0x8a0/0xda0 [ 798.201035][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 798.201060][ C0] ? __kthread_parkme+0x7b/0x200 [ 798.201084][ C0] kthread+0x711/0x8a0 [ 798.201107][ C0] ? __pfx_worker_thread+0x10/0x10 [ 798.201124][ C0] ? __pfx_kthread+0x10/0x10 [ 798.201146][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.201167][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.201189][ C0] ? __pfx_kthread+0x10/0x10 [ 798.201210][ C0] ret_from_fork+0x4bc/0x870 [ 798.201228][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 798.201248][ C0] ? __switch_to_asm+0x39/0x70 [ 798.201262][ C0] ? __switch_to_asm+0x33/0x70 [ 798.201275][ C0] ? __pfx_kthread+0x10/0x10 [ 798.201296][ C0] ret_from_fork_asm+0x1a/0x30 [ 798.201319][ C0] [ 798.202112][ C1] rcu: rcu_preempt kthread starved for 8551 jiffies! g117253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 798.615823][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 798.625808][ C1] rcu: RCU grace-period kthread stack dump: [ 798.631693][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 798.645193][ C1] Call Trace: [ 798.648475][ C1] [ 798.651411][ C1] __schedule+0x1798/0x4cc0 [ 798.655950][ C1] ? __lock_acquire+0xab9/0xd20 [ 798.660805][ C1] ? __pfx___schedule+0x10/0x10 [ 798.665765][ C1] ? schedule+0x91/0x360 [ 798.670014][ C1] schedule+0x165/0x360 [ 798.674178][ C1] schedule_timeout+0x12b/0x270 [ 798.679031][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 798.684401][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 798.690303][ C1] ? __pfx_process_timeout+0x10/0x10 [ 798.695610][ C1] ? prepare_to_swait_event+0x341/0x380 [ 798.701219][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 798.706107][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 798.712601][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 798.717996][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 798.723210][ C1] ? finish_swait+0xcd/0x1f0 [ 798.727810][ C1] rcu_gp_kthread+0x99/0x390 [ 798.732408][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 798.737614][ C1] ? __kthread_parkme+0x7b/0x200 [ 798.742565][ C1] ? __kthread_parkme+0x1a1/0x200 [ 798.747616][ C1] kthread+0x711/0x8a0 [ 798.751819][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 798.757122][ C1] ? __pfx_kthread+0x10/0x10 [ 798.761749][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.767019][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.772244][ C1] ? __pfx_kthread+0x10/0x10 [ 798.776938][ C1] ret_from_fork+0x4bc/0x870 [ 798.781536][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 798.786659][ C1] ? __switch_to_asm+0x39/0x70 [ 798.791516][ C1] ? __switch_to_asm+0x33/0x70 [ 798.796291][ C1] ? __pfx_kthread+0x10/0x10 [ 798.800995][ C1] ret_from_fork_asm+0x1a/0x30 [ 798.805794][ C1] [ 798.808816][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 798.815137][ C1] CPU: 1 UID: 0 PID: 28110 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 798.824683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.834918][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 798.841606][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 6f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 6f [ 798.861218][ C1] RSP: 0018:ffffc9000411f340 EFLAGS: 00000293 [ 798.867466][ C1] RAX: ffffffff81b4944b RBX: 1ffff11017108441 RCX: ffff888026a33c80 [ 798.875616][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 798.884041][ C1] RBP: ffffc9000411f4c0 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 798.892122][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffff8880b8842208 [ 798.900391][ C1] R13: dffffc0000000000 R14: ffff8880b893b240 R15: 0000000000000000 [ 798.908389][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 798.917342][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.924023][ C1] CR2: 00007ffce4f14c38 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 798.932105][ C1] Call Trace: [ 798.935399][ C1] [ 798.938357][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 798.943580][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 798.949934][ C1] ? rcu_is_watching+0x15/0xb0 [ 798.954723][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 798.960138][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 798.965277][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 798.970412][ C1] ? free_pgd_range+0x144b/0x14c0 [ 798.975442][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 798.981007][ C1] tlb_flush_mmu+0x1a7/0x680 [ 798.985618][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 798.990210][ C1] ? free_pgd_range+0x144b/0x14c0 [ 798.995243][ C1] free_ldt_pgtables+0x17b/0x320 [ 799.000212][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 799.005715][ C1] ? down_read+0x1ad/0x2e0 [ 799.010146][ C1] exit_mmap+0x174/0xb40 [ 799.014399][ C1] ? uprobe_clear_state+0x20f/0x290 [ 799.019604][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 799.024380][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 799.030034][ C1] ? __pfx_exit_aio+0x10/0x10 [ 799.034732][ C1] ? uprobe_clear_state+0x27c/0x290 [ 799.040024][ C1] __mmput+0x118/0x430 [ 799.044103][ C1] exit_mm+0x1da/0x2c0 [ 799.048192][ C1] ? __pfx_exit_mm+0x10/0x10 [ 799.052793][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 799.058360][ C1] ? rcu_is_watching+0x15/0xb0 [ 799.063156][ C1] do_exit+0x648/0x2300 [ 799.067429][ C1] ? do_raw_spin_lock+0x121/0x290 [ 799.072502][ C1] ? __pfx_do_exit+0x10/0x10 [ 799.077202][ C1] ? cgroup_freezing+0x20/0x350 [ 799.082169][ C1] do_group_exit+0x21c/0x2d0 [ 799.086771][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.092071][ C1] get_signal+0x1285/0x1340 [ 799.096612][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 799.102179][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 799.107916][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 799.114193][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 799.119920][ C1] exit_to_user_mode_loop+0x72/0x130 [ 799.125251][ C1] do_syscall_64+0x2bd/0xfa0 [ 799.129949][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.135244][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.141309][ C1] ? clear_bhb_loop+0x60/0xb0 [ 799.146084][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.151978][ C1] RIP: 0033:0x7f5c17185853 [ 799.156424][ C1] Code: Unable to access opcode bytes at 0x7f5c17185829. [ 799.163461][ C1] RSP: 002b:00007ffd3a771428 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 799.171899][ C1] RAX: fffffffffffffe00 RBX: 0000000000006de6 RCX: 00007f5c17185853 [ 799.179884][ C1] RDX: 0000000040000000 RSI: 00007ffd3a77143c RDI: 00000000ffffffff [ 799.187955][ C1] RBP: 00007ffd3a77143c R08: 0000000000000000 R09: 0000000000000000 [ 799.195955][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 799.203936][ C1] R13: 0000000000000003 R14: 00007ffd3a771728 R15: 0000000000000000 [ 799.212299][ C1]