last executing test programs: 13.263426243s ago: executing program 0 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, [0x5, 0x0, 0x0, 0xffffffff]}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xbd1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x8804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x65f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x300, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x2d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6324}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "aaff84724bd197fc6ee5faf3b0d58a45761a5d9bbe5dcab8e88f2ec77629f20c25ac89217f5c54"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+,.L]--$#{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{(+\\i,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '({(-::,$\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "57526dddc06917bf1d6c142fa4de9576b819901838c33b6ff6659ca9685bfcbb3b79c180facb012ea7ef75cb5bbe83abdcdc55faeb51b71e7d2764f26258210ffedfed5001324ed14182a5e1a87d780b4fe023e869e6cb52d35a7540093df98b23758e4ab42a0495b473ca2530d0609c6d5e1275ace4541fd316956dd7c4147afd09131a77b8b4eb0102fa7639f4d33a0483d78d42f551fa197f67525674e37fd3a8392c34366d3b"}]}]}, 0x300}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) 6.758657339s ago: executing program 0 (id=3683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r8, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@delchain={0x34, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x48880}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 5.744435973s ago: executing program 0 (id=3691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37, 0x80, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r4, 0xfca804a0, 0x8, 0xa, &(0x7f0000001440)="b800000500000000", &(0x7f0000001480)=""/10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000080)=""/125, 0xb9}], 0x2, 0xfffffffb, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x401, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1, 0xffff, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40044000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r8, 0x0) listen(r8, 0x9ce2) sendmmsg$inet(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="4d5830855192fe654590bdc8aa85c48846a9612e835f777575ff456b61867d1455f86836542f190f74cfc9a17ad2addabe88fa7e1becad0ef0f9fb77ec01ace316"}, {&(0x7f0000000200)="90adf5666ab3dc5cfc3df004e4590300eb6fc49bfc1298b35ab1b876a81a258d06de5690738e020daf622ddc9091803050892e43c22c96259b9ee5749ed2c74e1a9ea6ece5b5bad446cfb0bd494b10854aa1577b77f45471c2a37099b373fabe01157282aca0ef67315d5b20ca3f26b413d28140d31ebb82f5b34af1d6585b7b78cd5b0af7c88b5c0b5d1ea0b9af7bd83f9597b20724aca904f3453984e30e710fed57713439349044976e240389ec3a4fc4"}, {&(0x7f0000000100)="a97622"}, {&(0x7f0000000380)="c7719decaa83cc23e84c1eca70228cdc21e64cdda840d94441da38e36d7ffb61cfe4196c809916e51786ace0688d634b7d24b6f3bc5bd0875e3b85c7c2a599c14a023598b90b28c09a1ddc4d6cbcbee0192c057ec614138ecab3116fe26043471e8e8aa4b8a5c0c2c6fab802a67b8d0d0f9cd761a9738a6b9b8087c5daad456b40dc33b63d7afa4d56288ddb952d3e489e8d052ed38ada59e63d9b88eaf0afb835f1cc83b6"}, {&(0x7f0000000440)="9f26801d874196c562766f0882c77b0f4672029ed0fdd75f89da3640c221e73125126722050662100344178be9f9797d2b2e323cf9f02fc6e8b8cec0f1c0390d6a9fdbf49676ced95780552488a24808039f10bf605f9b854132160a7676a5d9a0001265cf030d82e220f20446b0196012"}, {&(0x7f00000004c0)="fd9addfff7b68cb72869a0f8f9647a348ad41d7d45d9d58baff7c1241940e1e945e5c4ef2ed5dbc76b9cff3a00568efeb1af95c47381f0dcfc99bcbf50ff36d95edee2ff2e715c8bcf591379d45a70da196725cb8dc7f0b828181d3537c53f23632df9a26307040db5d88d9adf6a4a293fad5a202ac9d7b2d22928093e502304c796da215e3d65b8be817f40c3991af88528e0b39c8ff4cc6e269a856eb2bf337738f90d6d7c9bfc0f611d0b83d575104d332ab3f01b5a67914c4f2bf452a88dbea3ecd7aed60b"}, {&(0x7f00000005c0)="a06562e0e90683c9a0ec1034c9540a9318b4855ff44db739e7678ccb7a14269d15cab4a38f78f1bebbbb508158ca1e49f7e5acbfbc945a824dfe583a7c6e7c130c2358dbaa2fd25ab97db9a63165f6bd0152001d1024397d19570228e8469a9d4f32585274712edc53e9f2b7c115172f08783ea9ccb0fae7545d35106d9a60c8bca50b6ecaa7fb"}]}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="cba99d5553"}]}}, {{&(0x7f0000000740)={0x2, 0x4e21, @loopback}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)="bbe3a5a7b0c77877c71afbc0688660ecd564320cced96ea5225f6291befbe9c2261b9e90c18577f34d64bb2cccd20f4af3d508fc"}, {&(0x7f00000007c0)="fe422634ad722fe9607f26b466ae054609aa44dd447099ccb88b0b9b50be929e6b9023d198e18c99a653812d3ebafceb8a65b404dfef80e086a3fe69d3f63281d6dedcb7802bf505b8db057d7b8e4efe49defcd3fddba1ad5c3db7416075c81e449587c21bec057b1df714e2c19abd"}, {&(0x7f0000000840)="70c56567f59037528a18a41f0221a2368866232630cb6cf2dc12a69a085671d7574d70e9e3a652d26912d5d0c962941b09c2378cbc09a978500e9bb3086a367e2815b3"}, {&(0x7f00000008c0)="cfc5dd36c842d8ebb2bb7231776f6ca296bacd41c8b177930ecf8632e368136217759dcdeb8c75b7a6"}], 0x0, &(0x7f0000000980)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="6362e3bc649de126123b5e2a7aba3ac25df4fd6fa485a565aaef8b85e04be3a564af22647f94fdc633df5cc68f642026bf491893a7a8a910ae52931dfe33ab23d534"}, {&(0x7f0000000a40)="b3c83467d6a4c20a95d8f77786f4d4941e4ac7cb6cc3606fc0"}, {&(0x7f0000000fc0)="f6eefcd6e61e66d3a926a6c57a736a9b38f5b4885c6bc67af9e35ef9ac3131b3c88f93a07c0e5ff0ee53673b316f6fa0a1a065879442274ed66bed085bf3183b909b6ebfee31d6ffdc71b73ee450cce629c9e08270e33c526b740effae5af561e203948c84b31574d4e08184a2b66935e5691e0007c371fa9691c7569d81ab6f0c0823fc56a459edd7283570bea2b4cbf17b46cbce9637b7cccd81b745bb6ae90efbc8e05ea95e0eb8f99665e0ff0a0f135dcb10c1d3f293ad9b27e71f"}, {&(0x7f0000000b40)="05f0e82aa96b20b4afbb3422369ef0e34109382d7444a5faa3319ac4c32004cc66fae00b1e70c30b6fbb197dea091055e202b46cbed52897f9949fabccbcf39507487a4c876cae83f7399570b9b47a28ba50b76bd529459a811b558f26fa991f01e6fafa9206b0a4bf697c2ab1383ccc038622320b0d323189d0df01e284f19cde5c9d5011faf62b2ec6ebcd8e"}, {&(0x7f0000000c00)="0f87cef096cd0e8e800766bcf6bf554961b817decc4edf104f4715bb5beb1237c158ccb2d01a3ad78fc0e6fca19acb4bf78026b1514a333760fd87588df00bc3142c0a449e8d2cc010fd5900ddb17fc6728c839d3da6ed8527b6b1270918257dbfdfc42b757ab3204645b6a00f594f19aac66635473ffb0747f71551b7e4a4de55"}, {&(0x7f0000000cc0)="dd64dd522b1e27d7b9f06c31acf380cb3c44cad7de0b45fddc39bdd1b7f36f97b16b13a572cc24dade2d6c72399e67524de4e863f6240e59e68f19e79277edfff2ec169e0e7c19e1535f182a4b1ecf4b699c5c24f647abbab04dbae237948ea3a4a2b40337dc68b0d6d50e70a8019fd5fa407408d54bda75d9d9fb7891b3f0bb9ad9c662ef8e35ac71aebce8700c5eb40efca1b7b426cde030615b8d3f1541734a92c8d8f3ae40c2ec8c9fdac755f848c1300b292bf7fc176b113a6deb5c07bbf3789909a24d06e24ca52b9c5e82ecf976758d"}], 0x0, &(0x7f0000000e40)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x1}}, @ip_ttl={{0x0, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_ttl]}}], 0x36, 0x24000080) close(r0) 5.34445285s ago: executing program 0 (id=3696): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x6, 0x2, 0xb}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route(r0, 0xfffffffffffffffc, 0x8000008) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x20, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.911784091s ago: executing program 3 (id=3712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp=r2, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcf0ffe300c400008000000085000000b40019009500000000000400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) 2.716425939s ago: executing program 3 (id=3715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f300b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 2.209954918s ago: executing program 3 (id=3716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x5d) close(r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2.112555476s ago: executing program 1 (id=3717): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000408000640ffffff0008000340000000083c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000006"], 0xd0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x72) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) sendmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfdff) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) syz_emit_ethernet(0x15d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6701474201272101fe8000000000000000000000000000bbfc"], 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r9, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) (async) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.112219282s ago: executing program 4 (id=3718): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="8daf0941aabf367f3435e34d26d1", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.994553795s ago: executing program 3 (id=3719): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x34, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff74) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0xffff}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.728340971s ago: executing program 3 (id=3721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001880)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x108, 0x240, 0x108, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xff000000], 'ip6_vti0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x13, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010102, [0x0, 0xff, 0xff, 0xffffffff], 0x4e23, 0x4e20, 0x4e21, 0x4e24, 0x5, 0x3, 0xc5, 0x6, 0x1bd}}}, {{@ipv6={@private2, @empty, [0xff000000, 0xf4ad867e48ee91c8, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xff, 0xffff00], 'wlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0xb0, 0x8e, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3ff, 0xcc}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) unshare(0x2c060000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.72402871s ago: executing program 2 (id=3722): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000200)=@ethtool_cmd={0x17, 0x8, 0x6, 0x7508, 0x2, 0x2, 0x6, 0xa, 0xe, 0x2a, 0x7, 0x6, 0x3, 0xd, 0xff, 0x0, [0x10000, 0x48]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.653170033s ago: executing program 4 (id=3723): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000180)="f79f68dc1590213a644586f06f11d5f1cc5de49d9552dbe8508e48b3f4e99cc04d724e6d5159b2913a3fe39f7e5b559c95e0692eadc3dd3a4d6fc671c8784963367d10e4b84da008218831b10a556fde3ef3b8801320dc862edf4d0aabcef9d2c70ca71512d951920fd23e3c7b4132fa688df064bca1b54465d69d60f7f04e0ddde2e8b5cd6b2a245e40efb6a8e30735c0e0d99cdc712663c5d2ead78ccf36fa054811d298a421bfefc8b9cdbc9c32e919afe04669cbff15c735e1bc47cc", 0xbe}, {&(0x7f0000000240)="9552a547274f94710a8b4023953f6f15bcba00f8f5ad1351b1509a6f1e0efbde49b0a7388e62d3153518631c07d6ef681203f6b4740ef8d46a504e72206f927fc3286d5c9d0cef604b5d08ee69b2799fa66490164ee9d6bc6b362bd268c7e4a3b4ba0fbd7889f89292528294ad7aaf166eb394a6fffee2495eea685992de0fa0699ef5680c657a2925a35514ef5aace0c24514eefc8c2c656323", 0x9a}, {&(0x7f0000000300)="4f560638b92cd0f39fb8cdd3e719798fbba4e6d1ceb5acdf2fe1aaaf1913a35cc436b2905e3faf91e3db0f837b6a21ef4d76f32d42c1de28605fe0b40973ccb7326d04d79c335269d14455b5d1f4f722827d83b4acfe9ff43c466b9a56af48ebfb537aef7dbc3598c8e70b68aed7965cf3be7198ce7b1d608a579087c72ea43f660d9e5d00ffd5d4f120da9542fc21c7d6980a33429ae663089ea8bb1156dde71f00f1fe4d6c557208543c64882c", 0xae}, {&(0x7f00000003c0)="125f444daafb167d3c87f6e489cefd52d012b2d3b3ac76894aa4454e325681b5321a393c854ee255c8ac9c358fb849a0bdcf383eb194b627ddfd9c4a64744eb6f6bc9a4f252e81c3b5c20226026c39ad524b489e5ba41036f172ec54", 0x5c}, {&(0x7f0000000440)}, {&(0x7f0000000540)="ebd54e7eabdcef471586dc0316500917343e1f0e5f7069208e4e976ff9f893c2cf95c52033200759161cbe0b028dcc314ad6f444e26a5284f40311fb0e7e3081e8116514c83c967161bc57af532fefff23a3c07dc2f1f54a892bc9bed7f1864c18a9d7d1f17ae663e16b543a5deadd2dbea8c9a5c7e469d1a1594d9ce74784e997803e7012ab7426ed78fadd70fb37b6f3c46ccecc57c1dbe11b05da3f0723f8666289cdf210d038afd245b7375588cf891d21cff9643ff7a7b1ea94", 0xbc}], 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x408}}], 0x1, 0xfff0) 1.584079755s ago: executing program 1 (id=3724): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @remote, 0x1, 0x5, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @multicast2]}, 0x24) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1e0ad000) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xffe0, 0xc}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75f, 0x3, 0x400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000108050028bd7000ffdbdf25000000049560fdc0d1a34e7bdcef7a6c1e1173c04cc726892545c3860650bfcc030011f9c5e04782552fe0691cae1a053b2009a8adbc75fd5eac1a94c7cd22aadb4bbf8b6d0e51590f58b7184e896843b070537c3908a32d0c7a9e012d61fdc34019909b610b7a4b0400d37793ac8f60336c5c065c987486118efeb7b30a01f060dde2644f273b0fb6101af67f03f148b3d2a5f81d59c4bad15adf0000"], 0x14}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) socketpair(0x11, 0x800, 0x5029, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet(0x23, 0x2, 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000140)={r12, 0x7}, 0x8) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0xb28, 0x40, 0x107, 0x70bd25, 0x0, {0x6, 0x7c}, [@generic="712e4d8d6474b849f5548b8f14d61cf6102092482b4e1ca2e34e8487cb9ac89dd81157fe71ce5171d882865be95589497fe58657d099c495186d5596ff3ac984f3fb5ea9c295c9e426c8b4a1cb0ab4788d7a38d9adbc58bcd09fcb94b93bc106cda078a597dd6214d5e84c9e98e66b73fb8013e7338597482b838b25413b80063087d2e1075eba30b673362d8880761c27", @nested={0x9af, 0x1, 0x0, 0x1, [@nested={0x11e, 0x63, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @fd=r3}, @generic="f6be0d47d912a4db171be3dfb234c8490e582396ce26e0d08ae7eb81b41307452f7ea51ca501ac5f5811da208dfe029d63956ec8603eb3a73657b8eb9ce8c9bcc94f217f0eee7decd4c557ae610b232093974853fb267caf4b01640fe0de9ebdd6f387c4558c195510e32465f482219b338640f27546ffcd56a73dd1981b4816cbe97d405a811c5ca21a91dcf5551ade0e34dfa55a3374a4dd002cd1478cf8c5eb755d325e061202e52b4c82c447d3b5", @typed={0x4, 0x73}, @typed={0x8, 0x133, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x155}, @typed={0x8, 0x57, 0x0, 0x0, @u32}, @generic="72f3e63d68fef7814d221ef608b5fbaa630f2dcfd6ac9892dfee3196c4b8e2e1e65c4f0584e0c8b5d98e722e4a2b44df68aaba51941a561f53c989ea0302eadb95965a209388d3d8c25f"]}, @nested={0x7b3, 0x11, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @ipv4=@local}, @generic="fb1443e9454f0f4899fbef00636fa80687913714aa267758519ffaf2861a9053367e6985cc65a1005c25cbd208facd31f0b16ae89845dd82305976e6520a4fabdf1368e62263aa8368536c2e9cf409ab2771301dd07137df981323e232eb6ee92459467a49c172", @nested={0xbe, 0x26, 0x0, 0x1, [@generic="f6c0b4506ab1d2a12267ca9e14", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r14}, @nested={0x4, 0x140}, @nested={0x4, 0x13}, @nested={0x4, 0x38}, @generic="91c98c67ed228cf56d9d9144f6868a51e9df0a91ec47c16e92aa87d4a2e426d59d69bf621ca3c4fb2987f6e5221a81d54a02d8b8b30ad13f739d9571df86ff871d3f8c00b65d979eee431db0060cf4b9bdc409c0aa5afbcd3f4591ff482e12836989e783fd4956e4ddb1d4af1b8c2e2740f24af4d22a62f6be", @typed={0x8, 0x1d, 0x0, 0x0, @u32=0xa}, @nested={0x4, 0x6e}]}, @nested={0x1f7, 0x22, 0x0, 0x1, [@nested={0x4, 0x14e}, @typed={0x2e, 0x10, 0x0, 0x0, @binary="211ad89e16b4db2ca6c86b936a073acaa9a791c0e7bb74fc9c1c8839c3adc4bfe16b92d420b30ea380d4"}, @generic="2fb3434cb94d86febb505875395b7418aae132cf3febe0dbda996b73e2dd25e2f0f20c73a8e111d6c55c292030c1590bb55477f7a81ad9ee4c332b6ee003613f2336ff5293937fe7d1ed218bb40fe16053483bc60bec1554c3bdbf424cb02df440970a65689dd4debc851c4a9cb6f0d089017dc6fcbae00b4e78411d55dffdf530f01023062f0533a0ac865f3151fa94c929fcffb37b0b75c12a04a23154436e0b39596dbf2de78ee7183fcb55f138b49b2cf36695359f24c4c59f0ce9", @nested={0x4, 0xf7}, @typed={0xc, 0xc7, 0x0, 0x0, @str=')%(:+{@\x00'}, @generic="b3613bdac562311e9b0d0fbfffbb243196e91828e6db9692738c0adcfb073cd5f8f2c7148c1f055ef7240cb2110cc6a30d46bacd49fc6e543170b2ca4eea1762ab34d206e88347c53fee46366a62b7bb91236b51db0ea2f44f7c02d9db407b8337972e575220ece8d70d081ef0ceea8b7b320508", @nested={0x4, 0x8f}, @generic="7e173cf8178967f3298c3617e5d603a3125c7e6f1a5741b067969f612027e7cc44b69e82baaadad1ea5a754aef1e946d9e59c55384f6989e25f79674067ae9084d3f4aacf702300d6e8e6f357e5756a7964b391b3683453bab187e836416a9839a3802f6a5c08457f708925eb199", @nested={0x4, 0x54}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r7}]}, @nested={0x438, 0x4b, 0x0, 0x1, [@generic="11c75358c14753a5307b9ce2b3e5fdba6a95eb4fe640bfb597d0e21880b0c2be87ce2e61936b60b14980d8381e5eb9f2512c54dc63c7d03fbcc1dc0bcf702d107b7a738efd25fcc1b198d0509ddbe303ae40664b71a30b6d72e7935d609429295fa3261337d7cae77c7ff0b3e2a71cf900ee5e7024afa0f99b3eb885b55647a7300e5966d47618353030fd9ac10e42248826ef7ab6f1154d2ac2a3d77c01feff00", @generic="948c5f700bec62e3b7d8c1b7a8dd48e44ab01495d60fc9f3aab9d13447263198c90017f0645189245a9bd843139fb48a4926fcd5c6b7f7a48ef18f02941c96577156ed72969aedcff595d221546bdfc15ca2075161237b26d9d16eca2f57b01d47a495879af215ef367e6c38e14ffd0ab8f0cc626f258a910a65e9cb9e890847959db5cfcd5a9b42f347b8c41c280cb7618e6e21e88d01eb2f25e62da5b3682fa1c6f9eedbc9d19c0a8a955fa665939b75d9bc8e353da2ac4ca517b8fca0087ad890a96a6596f3456f6d5acd36a65ef45d34451e19ec32bb01ccbf7ea434c16559a8f766398985", @generic="0e0238537aaa42e2180d85ad32d6760289c65b205446ccd6", @nested={0x4, 0x99}, @nested={0x208, 0x80, 0x0, 0x1, [@nested={0x1ec, 0x8c, 0x0, 0x1, [@generic="24b6e2ae21776488e307d66a27301c02d973d24ce0f2b34e4ac37b5cba55f497c08ca30ef623047644af2aee12956329bb7b15fd0c572e858b7067139bd68a", @typed={0x7, 0xf7, 0x0, 0x0, @str='&v\x00'}, @generic="2618c27cf9b29edff57dcfef114857518dcdd90747014a76ca1201d80f3c44579442a9e7d8fe0598b0beabf18c95a365e45b9191b433da12feb871e87eeaf1c22ce4945f40307569645470145edd03393e2d9f36bc75dcacc18efa6c3b459fe223207733620c50d85977f74311f88b9b100ded7dd50abd1c10d4d9df8ff7635714fe717ae227ceec340366ca6e53655042a910581377f0e1f20beeff0bc312d5f7d3db281a1dfa3a1ea22dc6038acf6602f30f7b086c863b34720c50cda1d2dc883f353ad91b785a0238451283dceccd739e3ea2c6e9673255a25f897f2304d4f500e45540b252e5baedad", @generic="b012b44b6385e6656f6315648eeb37e91cee88d194c445a8e25c93882afacbba57a5acee58c7dd3cd1090c9da4c9ac652b20d079d7ab279d9394d54c60e9c8fef7db9dd57cf1964cf437c4925910f87df5614a73fa83b6044c95d10f636bf9a4171baadf0caaf494909491eed11cf7d6ae41dd08d2f4348d2736b1f995bcd902307727730630c98d61414ca4a598894298c813b58f65561b48f6e9c3915e77a92ce1b3eab9b200347e2023f5e7988bc578866bcb33af"]}, @typed={0x4, 0x8d}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x7fff}, @typed={0x8, 0x139, 0x0, 0x0, @u32}]}, @generic="88ff9bff0a9090d5d85a83af07e45759a1cbe829857bc3c00f5755530c03d1d6a7b0126dee7d10236f32755cabf54c8510bc928344fc10bc2aa2ab2a6d53a4375ecfb2ea5b5828c472c5a3ea387e28dac346005eb150b9662e1cefbbff7198ccfe5f818c28dafb724a8ee4c059b698a32b4100"/124, @nested={0x4, 0x11b}, @nested={0x4, 0xb1}, @nested={0x4, 0x7}]}, @generic="d64109e54c58dd03fc0e0bbe00fd6394a12540d4e59623b25a38df73d1147f67bee16f1221eec8b94d62bd98511353a7229b5563fa2dd2e059a2848e", @typed={0x14, 0xff, 0x0, 0x0, @binary="182f190ae80a665871739f495c05b3b8"}]}, @generic="7669d642aeda47f5f3bb9e144659b9d9cc40556607f0fd70c06f47377baee93c17603894a2b5889649dc99a0aaf044a0de3e4018c8b4742d3411a13338981d63564c3087765fad261afb7c55189d2ceca977c3372835ae15413f918d19fd2b0a43b095490265828d2132a1e97747d4edd76f077ba69ef7cda4c731ea023a7d47a955aca01df72456ae36ef3de401e8f8132f08fbb516a622fd37a476cae1651e6fa0a33e6c02ae543b8c8d3925f5003e6ddcfe1cc27e7764cfd3a3e6280d76c35b476c4d63981af33585951556c6ea7333587e73dbc7c7"]}, @generic="84fcb07623d7fbd914f38e69d629e93a164359a412a5388f2e4d3b863b36278e7b1c14fbc78156345b831e703f3ae37e656937219e65731127bfc75d4f86cf5e2b0999851159d76070bc73e8c018469db1296b55facd3c1be3cf412f52336729d3e3974ad6c80f56b046d59bd261dbec807a79f7cf43e4b076f8f3bac1a8431bd85c31ff47cf8e313302d2e426c542f5aea06bb22c8582e1baf0a140778c1eca9b1cd405ba76cd461f8de7ec74a2533c2377c137aca999ad12cad851308b397e844de556403c3da2e43825805d4c9f9ba8"]}, 0xb28}, 0x1, 0x0, 0x0, 0x48815}, 0x840) 1.432544129s ago: executing program 3 (id=3725): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x2c060000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x61e2, 0x0) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) unshare(0x2c020400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r7, 0x952de000) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000", @ANYBLOB="6d7e72a32a5625893852d037fef87b1cc40257d99f25525254acc1ed2db5db3e9bdca3d03a0075123462f71b28f9c36201c1eb3397363c04d063299955228f95e29b430778ed40d6b28dd9be01390fb4988620a4805163db7e9ee2effcd8aa1d60c7c29cd05ea02e615a8182dff91329f42ceb46f0fc91b18c5402b643d0a2613b27c240e878b23f14d24c0fd531577d00"/154, @ANYRES8=r4, @ANYBLOB="1915608558e8b6396137619835ae688247aa746bc42c43cb817f65a494139a6061dc41f88635aae007c83f8e2241b3da2ad66409e9e08036d10063fa2e0b4e811c837774210895b424a8f23364e6c45f37558fdc58a722abe402fc9559d694cac882d47083c9b96aa7982fdef2db6f3a80604941c0a3ba1ded231e3e496b0369d10b282d210f17a796cc7ca0"], 0xb8}, 0x1, 0x0, 0x0, 0x40140}, 0x0) 1.431407235s ago: executing program 4 (id=3726): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd70}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000005fe5677b6b302475a051e35a40b7bce71a0d15262e65377a47b384d42cc6b13c772ed89ab777ffefa80f8b00c7af4dae181670be36", @ANYRES16=r10, @ANYBLOB="c3922bbd7000fedbdf258900000008000300", @ANYRES32=r12, @ANYBLOB="24001d802000008005000b0001000000060005000e0000000c0002000080000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) 1.43088635s ago: executing program 2 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@mpls_delroute={0x24, 0x19, 0x100, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0xa1, 0xfe, 0x2, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}]}, 0x24}}, 0x4) 1.350279366s ago: executing program 2 (id=3728): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000280)={0x200, 0x36, 0x80000000, 0x5, 0x3}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x9, @local, 0x5}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x5, @local}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x1, @empty, 0x1}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}], 0x90) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x0, 0x8007, 0x3, 0x6, {{0x32, 0x4, 0x1, 0x3f, 0xc8, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast2, @private=0xa010100, {[@noop, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x1, [{@multicast2, 0x4}]}, @generic={0x88, 0xa, "464195ef7cfb37f9"}, @ssrr={0x89, 0x23, 0x5, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x3a, 0x0, [{0x4, 0x7, "f5fdee25ad"}, {0x0, 0x8, "9fcb6509255c"}, {0x6, 0x3, "8c"}, {0x0, 0xc, "f31aa6837b0b68295aa1"}, {0x0, 0x5, "db8ab7"}, {0x6, 0x11, "81aa8d92d7f628b80ec9b2a71d3305"}]}, @cipso={0x86, 0x40, 0x1, [{0x7, 0x12, "e2718630aa95e080bc131b7974e11a2f"}, {0x0, 0x12, "47baf6242fd003901faf486401fcfc45"}, {0x2, 0xd, "ebfbef4799e540782072d6"}, {0x7, 0x9, "a3474fe803b3d6"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@remote, @local, 0x0}, &(0x7f0000000580)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000600)={@mcast1, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x10, 0x1, 0x9471, 0x0, {{0x1a, 0x4, 0x3, 0x7, 0x68, 0x64, 0x0, 0xf7, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@cipso={0x86, 0x47, 0x0, [{0x6, 0xa, "1327d5ec3e97bfa0"}, {0x1, 0x10, "f67cf156add86634e8209e2a5aaf"}, {0x6, 0xd, "d61b86a7c8eb9b61a5ed92"}, {0x6, 0x3, "01"}, {0x1, 0x6, "6ced3fea"}, {0x0, 0x11, "10cce341a976a7f5977b08b812f8e6"}]}, @lsrr={0x83, 0xb, 0xe0, [@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x5, 0x8, 0x52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x40, 0xb6}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x80, 0x10, 0x3, 0x1, {{0x16, 0x4, 0x0, 0x25, 0x58, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, {[@generic={0x82, 0xc, "d1272b846c60efb167e7"}, @lsrr={0x83, 0x1f, 0x37, [@dev={0xac, 0x14, 0x14, 0xf}, @local, @private=0xa010100, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010101]}, @generic={0x88, 0xa, "b8dbfa397600d01c"}, @timestamp_addr={0x44, 0xc, 0x19, 0x1, 0xa, [{@multicast1, 0xfffffff5}]}, @generic={0x94, 0x3, "16"}]}}}}}) (async, rerun: 64) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000900)={@loopback, 0x0}, &(0x7f0000000940)=0x14) (async, rerun: 32) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000980)={@private2, 0x0}, &(0x7f00000009c0)=0x14) (async, rerun: 32) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000a00)={@mcast2, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1c8, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5fae8e6b6ddc9e0e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_ASKUMOUNT(r15, 0x80049370, &(0x7f0000000d00)) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$team(&(0x7f0000000d80), r1) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000dc0)={'ip_vti0\x00', r8, 0x20, 0x8000, 0x4f, 0x3ff, {{0x1c, 0x4, 0x3, 0x3e, 0x70, 0x64, 0x0, 0xe, 0x4, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x23, 0x97, [@empty, @loopback, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101]}, @lsrr={0x83, 0xb, 0x9e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0xa4, 0x0, 0x8, [0x8000]}, @rr={0x7, 0xb, 0xb4, [@local, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x6a, [@broadcast]}, @cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "5759e4118391c54efe"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r16, &(0x7f0000001480)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000000f00)={0x51c, r17, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x78d5d1c8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f3cda24}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r11}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xac}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r14}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r19}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=@bridge_delvlan={0x30, 0x71, 0x100, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async, rerun: 32) sendmsg$GTP_CMD_DELPDP(r16, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) 1.319964385s ago: executing program 1 (id=3729): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000100)=""/62, 0x3e}], 0x6}, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r0) 1.040026019s ago: executing program 1 (id=3730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x10, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24020000}, 0x44010) 1.034583701s ago: executing program 2 (id=3731): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1cc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509004200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2c, 0x80000, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x64, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getroute={0x2c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3, 0xff, 0x3, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_PREF={0x5, 0x14, 0x1}]}, 0x2c}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r11, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r12 = socket(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x2, 0x30000000, 0xc, 0x8, 0x1f, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000680)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES32=r15], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r16, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250100000014000300fc0100000000000000000000000000001400060076657468305f746f5f68737200007f7d681e6123d8a573797374656d5f753a6f626a6563745f723a746170655f6465766963655f743a73300000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40400c4) 1.000400451s ago: executing program 4 (id=3732): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x2, 0x0, 0x7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0002"], 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x3ff}, 0x8) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x2, 0x0, 0x7}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0002"], 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x3ff}, 0x8) (async) 548.584989ms ago: executing program 4 (id=3733): r0 = socket$inet6(0x10, 0x3, 0x0) unshare(0x20000400) r1 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 548.11861ms ago: executing program 2 (id=3734): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0xe0, 0x0, 0x2, 0x80, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7f}, @CTA_EXPECT_ZONE={0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x54}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) unshare(0x2c020400) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, 0x0, 0x5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[], 0xa) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001100000000000000000000008500000027000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000740)={r4, &(0x7f0000000640)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3159c0, &(0x7f0000000680)={@_ha_fsid={[0x100, 0xfffff801]}, {0x6, 0x3, 0x8, 0x7}}, 0x0, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x744, 0x0, 0x0, 0x0, 0x80}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x5, 0x7, 0x8, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x5d, &(0x7f00000002c0)=""/93, 0x41000, 0x0, '\x00', r6, 0x1c, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x3, 0x2}, 0x10, 0x812, r8, 0x7, &(0x7f0000000780)=[r9, r5], &(0x7f0000000900)=[{0x1, 0x2, 0x1}, {0x5, 0x5, 0x4, 0x7}, {0x5, 0x3, 0x6, 0xa}, {0x4, 0x5, 0xf}, {0x0, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x1}, {0x0, 0x2, 0xd, 0x8}], 0x10, 0x2}, 0x94) socket(0x10, 0x3, 0x0) 541.000746ms ago: executing program 0 (id=3735): getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x7, 0x422, 0x7, 0x3, 0x6]}, &(0x7f0000000040)=0xe) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x9, 0x80}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x1, 0xff, 0x4, 0x7, 0x2}, 0x20) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r1, 0x9}, &(0x7f0000000280)=0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000013c0)={{r2, &(0x7f00000002c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x201, &(0x7f0000000300)={@align=0x8000000000000000, {0x2, 0x1, 0x7, 0xfffffffffffffff7}}, 0x80000000, &(0x7f0000000340), &(0x7f0000000380)=0xb412}, {[0x3fffc, 0x1, 0x800]}, 0x7, 0x1000, &(0x7f00000003c0)=""/4096}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001440)={0x6, 0x4, 0x3, 0x3, 0x5}, 0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001480)={r1, 0xea, 0x9, [0x8, 0xc, 0x4, 0x3, 0x40, 0x2, 0x6, 0x8, 0x5]}, 0x1a) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001680)={&(0x7f00000014c0), 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xd8, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8fe}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000800) sendmmsg(r4, &(0x7f00000016c0), 0x0, 0x42800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001740)={r1, 0x38, &(0x7f0000001700)=[@in6={0xa, 0x4e22, 0x4aec, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, @in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x81}, 0x200}]}, &(0x7f0000001780)=0x10) writev(r4, &(0x7f0000001880)=[{&(0x7f00000017c0)="c6f206fba673658564ca24a48478c54b120a3e824d1b3831adc029e03cfdb3e4ca4f506eab8526b7965ebe0020ef7041e1091ee2549c28659b5eeb4ff1a27037f6b31fb89a38635dcfa3acc6fa723abd69d45b2ac4f8879a3c282a969756263fc6f593bf562f73a54cd076", 0x6b}, {&(0x7f0000001840)="b6abef1629404c902971c2ffaa56bfd878a90da7ba1b461a7e9696b4cec4edf3f4e3636b7ff40a84", 0x28}], 0x2) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000018c0)={0x0, 0x3, 0x7}, 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000001900)={0x3, 0x0, 0x10}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000001940)={0x1, 0x7, 0x8}) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000001980)={r3, 0xffff, 0xffffff7f, 0x8, 0x8, 0x4, 0x4f, 0x7, {r3, @in={{0x2, 0x4e21, @multicast2}}, 0xf0000000, 0x4, 0xfffffff7, 0xc2a, 0x2}}, &(0x7f0000001a40)=0xb0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000001a80)=""/225, &(0x7f0000001b80)=0xe1) openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40), r7) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000001d40)={&(0x7f0000001c00), 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x68, r8, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x842) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001d80)={r3, 0x2}, &(0x7f0000001dc0)=0x8) r9 = socket(0x2b, 0x6, 0x2) shutdown(r9, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001fc0)={{0xffffffffffffffff, &(0x7f0000001e80)='syz0\x00', 0x8000, &(0x7f0000001ec0)={@_ha_fsid={[0x101, 0xf]}, {0x5, 0xb, 0x8, 0x8000000000000001}}, 0x741, &(0x7f0000001f00), &(0x7f0000001f40)=0xd}, {[0x4, 0x3, 0x5, 0x3]}, 0x2, 0xc, &(0x7f0000001f80)=""/12}) 374.982084ms ago: executing program 1 (id=3736): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00C'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbff, {0xa, 0x10, 0x20, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20040044) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x80000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000300)={0x1, 0x0, "3a9cec", 0xf7, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xd3) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x94, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48010}, 0xc5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 167.868021ms ago: executing program 2 (id=3737): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000380)={0x7fff, 0x0, 0x8000, 0x7, 0x2}) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0xfffffffe}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000440)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x1}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000020601625b0000000000000000cae80000000508040000004eb85ea2a8e3e873f7d41400000900020073797a300000faeeee944ea3f703dc3bf96ad059c700935300010007000000050105000a0000000c"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000050000090500010007000000f6a9d64718b9c26be130f8bf01016113168429a4cf03067627c32138ab94932ecb529bbe39e6f92748804dc5b715ad05ea04e1e60efa2f5c55be4fda8cc32edb4604ed64950ae313adc691675d8e4f42593f24d49b0864f2c3d73fce13c809c9a549514562b38f3fa995cfc10fd02ebbb1c2b3d806cb2c6098b3abcc45edac918ce20e5cca494cff1a14b88cb4b15e"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r8, @ANYBLOB="10002dbd7000fbdbdf25170000000c000600020000000000000008000300", @ANYRES32=r9, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="7400308028000180080001000100000005000200010000001400038006000300feff00000600010000000000240003008fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a1824000300dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"], 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) (async) setsockopt$inet_tcp_buf(r11, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) (async) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) 126.152567ms ago: executing program 1 (id=3738): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="06", 0x40000}], 0x2}}], 0x1, 0x890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x58, &(0x7f0000000180)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa"], 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24048005}, 0x4048050) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 103.057568ms ago: executing program 0 (id=3739): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/128, 0x80}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x4}, 0xfffffffc}], 0x2, 0x42, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000026bd7000ffdbdf2504000000080007006401010214000600fe88000000000000000000000000010108000700ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r6, 0x891b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 0s ago: executing program 4 (id=3740): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES64, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) kernel console output (not intermixed with test programs): ] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 302.475037][T14397] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 302.524861][T14397] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 302.535441][T14398] can: request_module (can-proto-0) failed. [ 303.092510][T14426] syzkaller0: entered promiscuous mode [ 303.110221][T14426] syzkaller0: entered allmulticast mode [ 304.525188][T14435] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 304.632511][T14440] __nla_validate_parse: 2 callbacks suppressed [ 304.632532][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 305.027873][T14457] IPVS: length: 164 != 24 [ 305.055780][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 305.115560][T14452] can: request_module (can-proto-0) failed. [ 305.195833][T14461] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 305.645415][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 305.674888][T14483] netlink: 'syz.3.2233': attribute type 4 has an invalid length. [ 305.687248][T14485] netlink: 'syz.3.2233': attribute type 4 has an invalid length. [ 305.719330][T14479] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 306.017324][T14492] lo speed is unknown, defaulting to 1000 [ 306.028754][T14492] lo speed is unknown, defaulting to 1000 [ 306.241657][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 306.635538][T14525] netlink: 'syz.2.2243': attribute type 1 has an invalid length. [ 306.704962][T14530] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2243'. [ 306.715787][ T5821] block nbd1: Receive control failed (result -32) [ 306.911978][T14539] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 306.937529][T14541] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 306.965676][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2246'. [ 307.026815][T14542] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2246'. [ 307.076679][T14547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2249'. [ 307.115204][T14544] bond7: (slave veth5): Enslaving as an active interface with a down link [ 307.217349][T14539] bond7: (slave veth7): Enslaving as an active interface with a down link [ 307.336666][T14541] bond7: (slave veth9): Enslaving as an active interface with a down link [ 307.346679][T14537] lo speed is unknown, defaulting to 1000 [ 307.357988][T14537] lo speed is unknown, defaulting to 1000 [ 307.728685][T14564] veth0: entered promiscuous mode [ 307.766600][T14564] veth0: left promiscuous mode [ 308.098141][T14576] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 308.131775][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2256'. [ 308.142778][T14576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2256'. [ 308.673770][T14597] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 308.706083][T14597] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 309.520515][T14627] vti0: entered promiscuous mode [ 309.731058][T14634] __nla_validate_parse: 3 callbacks suppressed [ 309.731078][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 309.766786][T14634] openvswitch: netlink: Missing key (keys=40, expected=80) [ 309.839195][T14642] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2274'. [ 311.711670][T14664] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 313.073970][T14686] syzkaller0: entered promiscuous mode [ 313.080910][T14686] syzkaller0: entered allmulticast mode [ 313.160515][T14691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2290'. [ 313.277373][T14692] syzkaller0: entered promiscuous mode [ 313.302444][T14692] syzkaller0: entered allmulticast mode [ 313.736356][ T5946] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.850074][T14737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2300'. [ 314.203827][T14747] vlan3: entered promiscuous mode [ 314.213613][T14747] geneve1: entered promiscuous mode [ 314.246346][T14747] vlan3: entered allmulticast mode [ 314.249623][T14749] netlink: 'syz.4.2301': attribute type 5 has an invalid length. [ 314.256394][T14747] geneve1: entered allmulticast mode [ 314.313372][T14754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2304'. [ 314.334591][T14749] ip6erspan0: entered promiscuous mode [ 314.363310][T14758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.446541][T14750] delete_channel: no stack [ 314.493611][T14760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2306'. [ 314.515166][T14764] netlink: 'syz.4.2308': attribute type 5 has an invalid length. [ 314.517900][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2306'. [ 314.543142][T14764] netlink: 'syz.4.2308': attribute type 5 has an invalid length. [ 314.577570][T14764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2308'. [ 314.596337][T14764] nbd: socks must be embedded in a SOCK_ITEM attr [ 314.636562][ T5946] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.678384][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 314.748580][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.763595][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.781766][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.794145][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.808210][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.831630][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.868581][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.901949][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.928214][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.955792][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 314.997064][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.020637][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.052955][T14769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.114227][T14783] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.243601][T14783] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.333630][T14783] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.417686][T14783] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.527755][ T9424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.561171][ T9424] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.638953][ T9200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.664801][ T9424] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.161237][T14848] syzkaller0: entered promiscuous mode [ 316.167032][T14848] syzkaller0: entered allmulticast mode [ 316.178417][T14852] lo: Caught tx_queue_len zero misconfig [ 317.116263][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.175378][T14917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.182742][T14917] IPv6: NLM_F_CREATE should be set when creating new route [ 318.233651][T14917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.240976][T14917] IPv6: NLM_F_CREATE should be set when creating new route [ 318.591309][T14961] netlink: 'syz.3.2355': attribute type 39 has an invalid length. [ 318.671817][T14961] team0: Port device syz_tun removed [ 318.917252][T14973] syzkaller0: entered promiscuous mode [ 318.922836][T14973] syzkaller0: entered allmulticast mode [ 318.938615][T14974] lo speed is unknown, defaulting to 1000 [ 318.946568][T14974] lo speed is unknown, defaulting to 1000 [ 319.152817][T14978] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 319.203928][T14978] team0: Device ipvlan1 failed to register rx_handler [ 319.231388][T14979] lo speed is unknown, defaulting to 1000 [ 319.290111][T14979] lo speed is unknown, defaulting to 1000 [ 319.523011][T14988] syzkaller1: entered promiscuous mode [ 319.550905][T14988] syzkaller1: entered allmulticast mode [ 319.573580][T14992] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 320.082683][T15010] __nla_validate_parse: 15 callbacks suppressed [ 320.082703][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 320.133446][T15012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2370'. [ 320.287172][T15018] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2371'. [ 320.430669][T15024] smc: net device wlan0 erased user defined pnetid SYZ0 [ 320.594903][T15030] bridge_slave_1: left promiscuous mode [ 320.621237][T15030] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.697269][T15030] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 321.057228][T15040] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 321.396328][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.438387][T15046] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 321.455603][T15048] netlink: 'syz.4.2381': attribute type 1 has an invalid length. [ 321.474312][T15047] wlan1: mtu less than device minimum [ 321.486796][T15047] wlan1: mtu less than device minimum [ 321.502512][T15048] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.526626][T15047] wlan1: mtu less than device minimum [ 321.532154][T15047] wlan1: mtu less than device minimum [ 321.536218][T15048] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.547134][T15047] wlan1: mtu less than device minimum [ 321.552870][T15047] wlan1: mtu less than device minimum [ 321.563119][T15047] wlan1: mtu less than device minimum [ 321.568830][T15047] wlan1: mtu less than device minimum [ 321.574557][T15047] wlan1: mtu less than device minimum [ 321.596133][T15048] netlink: 'syz.4.2381': attribute type 1 has an invalid length. [ 321.604035][T15048] netlink: 'syz.4.2381': attribute type 8 has an invalid length. [ 321.612456][T15048] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.850861][T15062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2384'. [ 321.879447][T15062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2384'. [ 322.148859][T15076] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2388'. [ 322.410408][T15085] syzkaller0: entered promiscuous mode [ 322.420320][T15085] syzkaller0: entered allmulticast mode [ 322.455989][T15085] tipc: Enabled bearer , priority 0 [ 322.533301][T15086] lo speed is unknown, defaulting to 1000 [ 322.555455][T15086] lo speed is unknown, defaulting to 1000 [ 322.593910][T15091] pim6reg: entered allmulticast mode [ 322.604704][T15091] bridge0: entered allmulticast mode [ 322.924574][T15097] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.956069][T15097] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.028631][T15097] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.039439][T15097] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.066780][T15101] syzkaller0: entered promiscuous mode [ 323.072540][T15101] syzkaller0: entered allmulticast mode [ 323.111912][T15097] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.141495][T15097] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.256809][T15097] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.267856][T15097] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.413646][T15114] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 323.428716][ T9200] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.438735][ T9200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.537980][ T9200] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.552094][ T9200] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.573806][ T9200] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.584529][ T9200] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.593875][ T9200] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.605839][ T9200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.951455][T15133] xt_TCPMSS: Only works on TCP SYN packets [ 324.096199][T15086] tipc: Resetting bearer [ 324.184230][T15086] tipc: Disabling bearer [ 324.676113][T15178] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 324.748759][T15178] nbd: must specify a size in bytes for the device [ 325.079881][T15200] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 325.792255][T15236] __nla_validate_parse: 12 callbacks suppressed [ 325.792276][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 325.882101][T15242] net_ratelimit: 58 callbacks suppressed [ 325.882131][T15242] openvswitch: netlink: Message has 572 unknown bytes. [ 325.896156][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 325.915637][T15242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.970136][T15244] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.530788][T15275] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 326.638503][T15275] bond12: entered promiscuous mode [ 326.661794][T15275] 8021q: adding VLAN 0 to HW filter on device bond12 [ 326.868700][T15289] lo speed is unknown, defaulting to 1000 [ 326.927046][T15289] lo speed is unknown, defaulting to 1000 [ 326.978774][T15296] netlink: 'syz.0.2451': attribute type 4 has an invalid length. [ 327.239117][T15307] veth8: entered allmulticast mode [ 327.309729][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 327.319781][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 327.330209][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 327.339941][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 327.425185][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 327.493104][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 327.703342][T15316] 8021q: adding VLAN 0 to HW filter on device bond13 [ 327.734707][T15318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 327.743862][T15318] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 327.754411][T15324] pim6reg: left allmulticast mode [ 327.761749][T15324] bridge0: left allmulticast mode [ 327.769762][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 327.941882][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2460'. [ 329.669686][T15397] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 329.933096][T15397] 8021q: adding VLAN 0 to HW filter on device bond14 [ 330.051888][T15402] bond14: (slave ip6gretap1): making interface the new active one [ 330.073217][T15402] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 330.236420][T15419] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 330.280432][T15419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.558178][T15435] geneve4: entered promiscuous mode [ 330.563691][T15435] geneve4: entered allmulticast mode [ 330.609060][T15444] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 330.928360][T15469] lo speed is unknown, defaulting to 1000 [ 330.940241][T15469] lo speed is unknown, defaulting to 1000 [ 331.050915][T15481] netlink: 'syz.4.2496': attribute type 4 has an invalid length. [ 331.242555][T15490] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.266828][T15494] __nla_validate_parse: 3 callbacks suppressed [ 331.266848][T15494] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2500'. [ 331.284031][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2499'. [ 331.288918][T15494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2500'. [ 331.311113][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 331.323926][T15490] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.392764][T15490] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.452691][T15490] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.495738][T15500] sctp: [Deprecated]: syz.0.2501 (pid 15500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.495738][T15500] Use struct sctp_sack_info instead [ 331.522403][T15501] sctp: [Deprecated]: syz.0.2501 (pid 15501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.522403][T15501] Use struct sctp_sack_info instead [ 331.651092][ T9203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.730816][ T30] audit: type=1804 audit(1771193736.185:2): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2504" name="/newroot/435/cgroup.controllers" dev="tmpfs" ino=2241 res=1 errno=0 [ 331.784078][ T30] audit: type=1800 audit(1771193736.185:3): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2504" name="cgroup.controllers" dev="tmpfs" ino=2241 res=0 errno=0 [ 331.824972][T15505] syzkaller0: entered promiscuous mode [ 331.831553][T15505] syzkaller0: entered allmulticast mode [ 331.841978][ T9205] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.881475][ T9205] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.939467][ T9205] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.274308][T15517] Set syz1 is full, maxelem 65536 reached [ 335.311585][T15525] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 335.328418][T15522] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 335.479673][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 335.507241][T15537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.628179][T15543] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 335.641120][T15537] syzkaller0: entered promiscuous mode [ 335.654092][T15537] syzkaller0: entered allmulticast mode [ 335.964510][T15552] netlink: 'syz.0.2515': attribute type 2 has an invalid length. [ 336.147258][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 336.179413][T15557] netlink: 744 bytes leftover after parsing attributes in process `syz.3.2518'. [ 336.214819][T15555] macvlan2: entered allmulticast mode [ 336.237643][T15555] hsr0: entered allmulticast mode [ 336.269026][T15555] hsr_slave_0: entered allmulticast mode [ 336.587426][T15575] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2521'. [ 336.629522][T15581] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 336.751649][T15581] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.920921][T15588] bond11: (slave veth5): Enslaving as an active interface with a down link [ 336.933718][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'. [ 336.984722][T15596] bond8: entered promiscuous mode [ 336.990940][T15596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.003798][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 337.014450][T15599] netlink: 261 bytes leftover after parsing attributes in process `syz.4.2526'. [ 337.027640][T15596] bond8 (unregistering): Released all slaves [ 337.250900][T15603] lo speed is unknown, defaulting to 1000 [ 337.269311][T15611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'. [ 337.297345][T15611] netlink: 'syz.2.2530': attribute type 7 has an invalid length. [ 337.320683][T15611] netlink: 'syz.2.2530': attribute type 8 has an invalid length. [ 337.331996][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 337.352560][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'. [ 337.528725][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 337.706551][T15621] tipc: Enabled bearer , priority 0 [ 337.714366][T15626] syzkaller0: entered promiscuous mode [ 337.730004][T15626] syzkaller0: entered allmulticast mode [ 337.777497][T15631] netlink: 'syz.2.2536': attribute type 1 has an invalid length. [ 337.879376][T15621] tipc: Resetting bearer [ 337.913703][T15620] tipc: Resetting bearer [ 337.994486][T15620] tipc: Disabling bearer [ 338.330812][T15652] lo speed is unknown, defaulting to 1000 [ 338.699338][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 339.030850][T15667] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 339.166628][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 339.593876][T15689] syzkaller0: entered promiscuous mode [ 339.608942][T15689] syzkaller0: entered allmulticast mode [ 354.425328][T15714] __nla_validate_parse: 1 callbacks suppressed [ 354.425351][T15714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2562'. [ 354.476878][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 354.489668][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 354.883216][T15732] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 355.244810][ T9200] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.264024][ T9200] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.283566][ T9200] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.328087][ T9200] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.436558][ T9200] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.465525][ T9200] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.488175][ T9200] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.515100][ T9200] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.771995][T15775] netlink: 'syz.2.2573': attribute type 9 has an invalid length. [ 355.855150][T15781] x_tables: duplicate underflow at hook 3 [ 355.882287][T15786] vti1: entered promiscuous mode [ 355.896479][T15786] vti1: entered allmulticast mode [ 355.988106][T15790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2577'. [ 356.042688][T15796] netlink: 'syz.4.2579': attribute type 4 has an invalid length. [ 356.073335][T15797] netlink: 'syz.4.2579': attribute type 4 has an invalid length. [ 356.283126][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 356.287317][T15806] tipc: Enabled bearer , priority 0 [ 356.293824][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 356.485095][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 356.513945][T15799] tipc: Disabling bearer [ 356.704664][T15834] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 357.489659][T15875] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2598'. [ 357.653720][T15881] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 357.941242][T15898] IPVS: set_ctl: invalid protocol: 51 172.30.1.4:20002 [ 358.132541][T15908] lo speed is unknown, defaulting to 1000 [ 358.612959][T15936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 358.649437][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2612'. [ 359.087086][T15950] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 359.777451][T15981] __nla_validate_parse: 2 callbacks suppressed [ 359.777472][T15981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2626'. [ 359.840027][T15981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2626'. [ 359.983364][T15990] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 359.991635][T15990] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2631'. [ 360.053130][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 360.081588][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 360.155714][T16001] netlink: 628 bytes leftover after parsing attributes in process `syz.0.2634'. [ 360.247103][T15998] netlink: 'syz.3.2633': attribute type 1 has an invalid length. [ 360.255110][T15998] netlink: 'syz.3.2633': attribute type 2 has an invalid length. [ 360.267441][T15997] netlink: 'syz.3.2633': attribute type 1 has an invalid length. [ 360.275236][T15997] netlink: 'syz.3.2633': attribute type 2 has an invalid length. [ 360.283707][T16007] dvmrp0: left allmulticast mode [ 360.319576][T16005] dvmrp1: entered allmulticast mode [ 360.723277][T16030] lo speed is unknown, defaulting to 1000 [ 360.903738][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 360.986998][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 361.039628][T16045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2642'. [ 361.928218][T16081] tipc: Enabled bearer , priority 0 [ 361.967280][T16081] syzkaller0: entered promiscuous mode [ 361.972884][T16081] syzkaller0: entered allmulticast mode [ 362.091822][T16081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2651'. [ 362.116656][T16086] lo speed is unknown, defaulting to 1000 [ 362.144022][T16081] tipc: Resetting bearer [ 362.182747][T16080] tipc: Resetting bearer [ 362.243598][T16080] tipc: Disabling bearer [ 362.603044][T16113] tipc: Enabled bearer , priority 0 [ 362.610734][T16113] syzkaller0: entered promiscuous mode [ 362.635070][T16113] syzkaller0: entered allmulticast mode [ 362.663145][T16113] tipc: Resetting bearer [ 362.679955][T16113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.741776][T16109] tipc: Resetting bearer [ 362.775746][T16109] tipc: Disabling bearer [ 362.971561][T16122] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 362.990834][T16122] block nbd2: Unsupported socket: should be TCP or UNIX. [ 363.734498][T16137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.990783][T16144] syzkaller1: entered promiscuous mode [ 364.008241][T16144] syzkaller1: entered allmulticast mode [ 364.597757][T16159] bond0: Caught tx_queue_len zero misconfig [ 364.695861][T16176] netlink: 'syz.3.2670': attribute type 49 has an invalid length. [ 364.785117][T16179] netlink: 'syz.3.2670': attribute type 49 has an invalid length. [ 365.161786][T16192] __nla_validate_parse: 9 callbacks suppressed [ 365.161825][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'. [ 365.479485][ T30] audit: type=1804 audit(1771193769.935:4): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2676" name="/newroot/553/memory.events" dev="tmpfs" ino=2833 res=1 errno=0 [ 365.564575][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'. [ 365.597305][ T30] audit: type=1800 audit(1771193769.935:5): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2676" name="memory.events" dev="tmpfs" ino=2833 res=0 errno=0 [ 365.681438][T16214] bond12: entered promiscuous mode [ 365.687391][T16214] bond12: entered allmulticast mode [ 365.693285][T16214] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.811186][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2682'. [ 365.868963][T16224] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.875975][ T980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 365.894811][T16224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.936162][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 365.949869][T16227] netlink: 'syz.0.2681': attribute type 11 has an invalid length. [ 365.964970][T16228] macsec1: left promiscuous mode [ 365.981868][T16228] macsec1: left allmulticast mode [ 365.989184][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'. [ 366.030027][T16228] bond7: left promiscuous mode [ 366.055373][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 366.057163][T16228] bridge2: left allmulticast mode [ 366.069752][T16231] x_tables: unsorted underflow at hook 4 [ 366.106387][T15735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 366.157208][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.184747][T16245] netlink: 'syz.4.2685': attribute type 4 has an invalid length. [ 366.195153][T16245] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2685'. [ 366.209407][T16224] bridge_slave_1 (unregistering): left allmulticast mode [ 366.225531][T16224] bridge_slave_1 (unregistering): left promiscuous mode [ 366.244011][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.293787][T16239] hsr_slave_0: left promiscuous mode [ 366.469884][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 366.498591][T16249] tunl0: Caught tx_queue_len zero misconfig [ 366.899309][T16263] xt_hashlimit: size too large, truncated to 1048576 [ 366.930098][T16267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2692'. [ 367.276564][T16280] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2686'. [ 368.208945][T16325] tipc: Enabled bearer , priority 0 [ 368.269998][T16325] syzkaller0: entered promiscuous mode [ 368.291026][T16325] syzkaller0: entered allmulticast mode [ 368.457455][T16346] syzkaller0: mtu less than device minimum [ 368.543550][T16324] tipc: Resetting bearer [ 368.585075][T16324] tipc: Disabling bearer [ 368.787785][T16359] netlink: 'syz.0.2709': attribute type 3 has an invalid length. [ 368.821078][T16359] netlink: 'syz.0.2709': attribute type 2 has an invalid length. [ 368.843536][T16359] netlink: 'syz.0.2709': attribute type 2 has an invalid length. [ 369.074375][T16375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.129544][T16377] netlink: 'syz.1.2714': attribute type 5 has an invalid length. [ 369.819205][T16405] TC_ACT_REPEAT abuse ? [ 369.827149][T16405] openvswitch: netlink: Flow key attr not present in new flow. [ 370.041294][T16422] tipc: Enabled bearer , priority 0 [ 370.066868][T16422] syzkaller0: entered promiscuous mode [ 370.072404][T16422] syzkaller0: entered allmulticast mode [ 370.138455][T16422] tipc: Resetting bearer [ 370.146738][T16422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.173771][T16429] bridge_slave_0: left allmulticast mode [ 370.181432][T16429] bridge_slave_0: left promiscuous mode [ 370.192114][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.230279][T16429] bond0: (slave bond_slave_0): Releasing backup interface [ 370.242363][T16429] bond0: (slave bond_slave_1): Releasing backup interface [ 370.258794][T16441] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 370.272753][T16429] team_slave_0: left allmulticast mode [ 370.280959][T16429] team0: Port device team_slave_0 removed [ 370.287755][T16429] team_slave_1: left allmulticast mode [ 370.294850][T16429] team0: Port device team_slave_1 removed [ 370.296680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.307265][T16429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.319742][T16429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.328797][T16429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.347556][T16421] tipc: Resetting bearer [ 370.372863][T16421] tipc: Disabling bearer [ 370.421913][T16447] __nla_validate_parse: 13 callbacks suppressed [ 370.421936][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2735'. [ 370.443726][T16447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.451131][T16447] IPv6: NLM_F_CREATE should be set when creating new route [ 370.458451][T16447] IPv6: NLM_F_CREATE should be set when creating new route [ 370.467104][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2735'. [ 370.479253][T16447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.704002][T16462] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2740'. [ 370.816735][T16473] SET target dimension over the limit! [ 370.860602][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2744'. [ 370.888158][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2745'. [ 371.119628][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2749'. [ 371.131300][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 371.132803][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2749'. [ 371.154280][T16495] veth0_to_team: entered promiscuous mode [ 371.163036][T16495] veth0_to_team: left promiscuous mode [ 371.238587][T16493] veth0_to_team: entered promiscuous mode [ 371.264709][T16493] veth0_to_team: left promiscuous mode [ 371.328858][T16500] macsec2: entered promiscuous mode [ 371.334123][T16500] ip6gretap0: entered promiscuous mode [ 371.356715][T16500] macsec2: entered allmulticast mode [ 371.362434][T16500] ip6gretap0: entered allmulticast mode [ 371.375693][T16500] ip6gretap0: left allmulticast mode [ 371.395611][T16500] ip6gretap0: left promiscuous mode [ 371.429140][T16505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2752'. [ 371.444889][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 371.461485][T16504] vlan5: entered promiscuous mode [ 371.962036][T16537] syzkaller0: entered promiscuous mode [ 371.968567][T16537] syzkaller0: entered allmulticast mode [ 372.129461][T16548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 372.142064][T16548] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 372.148396][T16548] pim6reg0: persist disabled [ 372.221172][T16554] sctp: [Deprecated]: syz.3.2767 (pid 16554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.221172][T16554] Use struct sctp_sack_info instead [ 372.246139][T16554] netlink: 'syz.3.2767': attribute type 1 has an invalid length. [ 372.289379][T16554] 8021q: adding VLAN 0 to HW filter on device bond13 [ 372.305712][T16554] 8021q: adding VLAN 0 to HW filter on device bond13 [ 372.318437][T16554] bond13: (slave geneve4): making interface the new active one [ 372.327237][T16554] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 372.337389][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 372.350754][ T9396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 372.366596][ T9396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 372.375609][ T9396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 372.426312][T16561] gretap0: entered allmulticast mode [ 372.592810][T16572] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 372.604736][T16572] netlink: 'syz.0.2771': attribute type 2 has an invalid length. [ 372.966650][T16604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.025982][ T30] audit: type=1800 audit(1771193777.455:6): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2779" name=CB dev="tmpfs" ino=2495 res=0 errno=0 [ 373.698019][T16641] syzkaller0: entered promiscuous mode [ 373.731962][T16641] syzkaller0: entered allmulticast mode [ 374.074795][T16657] nbd: must specify a device to reconfigure [ 374.172017][T16647] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 374.184305][T16647] bond15 (unregistering): Released all slaves [ 374.706695][T16684] xfrm1: entered allmulticast mode [ 374.860346][T16690] bond0: entered promiscuous mode [ 374.874585][T16690] bond0: left promiscuous mode [ 374.894832][T16693] netlink: 'syz.3.2804': attribute type 3 has an invalid length. [ 374.914366][T16694] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 375.611185][T16735] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 375.622611][T16735] __nla_validate_parse: 132 callbacks suppressed [ 375.622631][T16735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2820'. [ 375.760236][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 375.802561][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2823'. [ 375.821081][T16748] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2823'. [ 375.869573][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 376.002621][T16759] netlink: 'syz.3.2825': attribute type 2 has an invalid length. [ 376.029843][T16759] netlink: 'syz.3.2825': attribute type 8 has an invalid length. [ 376.056002][T16759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2825'. [ 376.067598][T16759] netlink: 'syz.3.2825': attribute type 1 has an invalid length. [ 376.110024][T16765] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2827'. [ 376.150496][T16765] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2827'. [ 376.172043][T16770] sctp: [Deprecated]: syz.3.2830 (pid 16770) Use of int in maxseg socket option. [ 376.172043][T16770] Use struct sctp_assoc_value instead [ 376.217092][T16770] netlink: 'syz.3.2830': attribute type 21 has an invalid length. [ 376.233832][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2830'. [ 376.288522][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2831'. [ 376.411360][T16786] delete_channel: no stack [ 376.700228][T16804] lo speed is unknown, defaulting to 1000 [ 376.853792][T16818] Bluetooth: MGMT ver 1.23 [ 377.232720][T16832] sctp: [Deprecated]: syz.2.2846 (pid 16832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.232720][T16832] Use struct sctp_sack_info instead [ 377.275110][T16832] sctp: [Deprecated]: syz.2.2846 (pid 16832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.275110][T16832] Use struct sctp_sack_info instead [ 377.820298][T16864] tipc: Enabling of bearer rejected, failed to enable media [ 378.692917][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.705535][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.716353][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.724597][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.732839][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.786516][T16896] lo speed is unknown, defaulting to 1000 [ 379.691827][T16902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.797133][T16902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.968052][T16902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.097002][T16902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.318465][ T9396] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 380.362266][ T9424] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 380.499336][ T9396] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 380.609767][T16936] tipc: Enabled bearer , priority 0 [ 380.626759][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 380.643072][T16939] syzkaller0: entered promiscuous mode [ 380.654116][T16939] syzkaller0: entered allmulticast mode [ 380.796095][ T5821] Bluetooth: hci5: command tx timeout [ 380.816086][T16936] __nla_validate_parse: 11 callbacks suppressed [ 380.816109][T16936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2871'. [ 380.869527][T16934] tipc: Resetting bearer [ 380.936989][T16931] tipc: Resetting bearer [ 380.997651][T16931] tipc: Disabling bearer [ 381.224358][T16950] lo speed is unknown, defaulting to 1000 [ 381.233062][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 381.243059][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 381.608997][T16896] chnl_net:caif_netlink_parms(): no params data found [ 381.633721][T16972] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2878'. [ 381.966713][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 381.983318][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.006297][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.013863][T16896] bridge_slave_0: entered allmulticast mode [ 382.024605][T16896] bridge_slave_0: entered promiscuous mode [ 382.039455][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.046942][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.054198][T16896] bridge_slave_1: entered allmulticast mode [ 382.063585][T16896] bridge_slave_1: entered promiscuous mode [ 382.078406][T16997] netlink: 'syz.2.2881': attribute type 4 has an invalid length. [ 382.146511][T16982] netlink: 'syz.2.2881': attribute type 4 has an invalid length. [ 382.163926][T17001] netlink: 'syz.3.2884': attribute type 1 has an invalid length. [ 382.233011][T15747] lo speed is unknown, defaulting to 1000 [ 382.241917][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.313775][T17001] 8021q: adding VLAN 0 to HW filter on device bond14 [ 382.321584][T15735] lo speed is unknown, defaulting to 1000 [ 382.331081][T15747] lo speed is unknown, defaulting to 1000 [ 382.353117][T16999] bond14: (slave gretap3): making interface the new active one [ 382.363519][T16999] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 382.376389][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.412104][T16982] x_tables: duplicate underflow at hook 2 [ 382.437972][T17005] veth0: entered promiscuous mode [ 382.504529][T16896] team0: Port device team_slave_0 added [ 382.513233][T17005] bond0: entered promiscuous mode [ 382.520512][T17010] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 382.563188][T17010] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2886'. [ 382.578172][T16896] team0: Port device team_slave_1 added [ 382.583827][T17003] bond0: left promiscuous mode [ 382.590015][T17003] veth0: left promiscuous mode [ 382.596294][T17010] NCSI netlink: No device for ifindex 0 [ 382.710445][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.723517][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.757613][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.771093][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.794034][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.853305][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.868399][T17020] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 382.879298][T17020] netlink: 'syz.0.2888': attribute type 10 has an invalid length. [ 382.892161][ T5821] Bluetooth: hci5: command tx timeout [ 382.909327][T17020] dummy0: entered allmulticast mode [ 382.927033][T17020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 382.936608][T17020] team0: Failed to send options change via netlink (err -105) [ 382.964554][T17020] team0: Port device dummy0 added [ 382.972168][T17021] IPVS: length: 177 != 8 [ 383.017335][T17015] netlink: 'syz.0.2888': attribute type 10 has an invalid length. [ 383.043143][T16896] hsr_slave_0: entered promiscuous mode [ 383.050347][T16896] hsr_slave_1: entered promiscuous mode [ 383.057180][T16896] debugfs: 'hsr0' already exists in 'hsr' [ 383.063065][T16896] Cannot create hsr debugfs directory [ 383.079016][T17015] dummy0: left allmulticast mode [ 383.100742][T17015] team0: Failed to send options change via netlink (err -105) [ 383.109226][T17015] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 383.129349][T17015] team0: Port device dummy0 removed [ 383.150748][T17015] bond0: (slave dummy0): Enslaving as an active interface with a down link [ 383.308413][T17032] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2891'. [ 383.335013][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 383.430404][T17034] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2892'. [ 383.616235][T17043] x_tables: duplicate underflow at hook 2 [ 383.833768][T17047] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 384.224315][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2898'. [ 384.849230][T16896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.979010][T16896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.987176][ T5821] Bluetooth: hci5: command tx timeout [ 385.056649][T16896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.132376][T16896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.524603][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.564105][T17108] vlan4: entered promiscuous mode [ 385.615605][T17109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.650079][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.673378][T17111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.707852][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.715074][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.760096][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.767583][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.237798][T17119] __nla_validate_parse: 126 callbacks suppressed [ 386.237817][T17119] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2910'. [ 386.527232][T17139] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2914'. [ 386.778286][T16896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.870571][T16896] veth0_vlan: entered promiscuous mode [ 386.905565][T16896] veth1_vlan: entered promiscuous mode [ 387.010930][T16896] veth0_macvtap: entered promiscuous mode [ 387.036743][ T5821] Bluetooth: hci5: command tx timeout [ 387.049809][T16896] veth1_macvtap: entered promiscuous mode [ 387.066747][T17159] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 387.109170][T16896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.143423][T16896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.190261][ T9196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.211216][ T9196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.231723][ T9196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.263296][ T9196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.569540][ T9203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.581510][ T9203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.718737][T17174] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2922'. [ 387.771356][T17178] veth0_virt_wifi: entered promiscuous mode [ 387.819998][T17178] veth0_virt_wifi: left promiscuous mode [ 388.131340][T17188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2926'. [ 388.288080][ T9403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.316522][ T9403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.638193][T17200] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2930'. [ 388.676476][T17202] syzkaller0: entered promiscuous mode [ 388.689851][T17202] syzkaller0: entered allmulticast mode [ 388.731012][T17202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2858'. [ 388.759255][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 388.772974][T17204] netlink: 15702 bytes leftover after parsing attributes in process `syz.2.2931'. [ 388.919233][T17206] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2932'. [ 389.111204][T17213] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2934'. [ 389.454969][T17051] Set syz1 is full, maxelem 65536 reached [ 389.626773][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.636562][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.645210][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.654590][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.662817][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.778361][T17220] lo speed is unknown, defaulting to 1000 [ 389.814929][T17224] sctp: [Deprecated]: syz.0.2937 (pid 17224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.814929][T17224] Use struct sctp_sack_info instead [ 390.155130][ T5823] team0: Port device syz_tun removed [ 390.382700][T17246] netlink: 'syz.2.2944': attribute type 10 has an invalid length. [ 390.421506][T11602] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.694836][T17255] netlink: 'syz.0.2946': attribute type 2 has an invalid length. [ 390.920462][T17251] tipc: Enabling of bearer rejected, failed to enable media [ 390.982521][T11602] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.115749][T11602] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.183611][T17271] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 391.196046][T17271] tipc: Enabled bearer , priority 0 [ 391.313352][T11602] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.352844][T17273] __nla_validate_parse: 4 callbacks suppressed [ 391.352867][T17273] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2949'. [ 391.489007][T17276] netlink: 744 bytes leftover after parsing attributes in process `syz.3.2950'. [ 391.763198][ T5821] Bluetooth: hci2: command tx timeout [ 392.063159][T11602] bridge_slave_1: left allmulticast mode [ 392.086453][T11602] bridge_slave_1: left promiscuous mode [ 392.119928][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.180206][T11602] bridge_slave_0: left allmulticast mode [ 392.206257][T11602] bridge_slave_0: left promiscuous mode [ 392.235251][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.301603][T17301] netlink: 'syz.0.2956': attribute type 3 has an invalid length. [ 392.336859][T17301] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2956'. [ 392.734810][T11602] ..0{X (unregistering): left promiscuous mode [ 392.797683][T11602] dvmrp1 (unregistering): left allmulticast mode [ 392.868320][T11602] team0: Port device geneve0 removed [ 392.951584][T11602] bond1 (unregistering): (slave bridge1): Releasing active interface [ 393.142129][T11602] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 393.242661][T11602] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 393.350942][T11602] bond0 (unregistering): left promiscuous mode [ 393.358233][T11602] bond_slave_0: left promiscuous mode [ 393.363918][T11602] bond_slave_1: left promiscuous mode [ 393.383052][T11602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.394119][T11602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.409111][T11602] bond0 (unregistering): Released all slaves [ 393.424357][T11602] bond1 (unregistering): Released all slaves [ 393.448797][T11602] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 393.460121][T11602] bond2 (unregistering): Released all slaves [ 393.486588][T11602] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 393.497128][T11602] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 393.506608][T11602] bond3 (unregistering): Released all slaves [ 393.532104][T11602] bond4 (unregistering): Released all slaves [ 393.551679][T11602] bond5 (unregistering): Released all slaves [ 393.574174][T11602] bond6 (unregistering): Released all slaves [ 393.602301][T11602] bond7 (unregistering): Released all slaves [ 393.642679][T17302] pim6reg: entered allmulticast mode [ 393.667413][T15746] tipc: Node number set to 36919162 [ 393.816950][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 393.842104][ T5821] Bluetooth: hci2: command tx timeout [ 393.980963][T17220] chnl_net:caif_netlink_parms(): no params data found [ 394.257314][T17324] tipc: Resetting bearer [ 394.712606][T17351] lo speed is unknown, defaulting to 1000 [ 394.769417][T17220] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.777350][T17220] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.784650][T17220] bridge_slave_0: entered allmulticast mode [ 394.793917][T17220] bridge_slave_0: entered promiscuous mode [ 394.839097][T17220] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.942541][T17373] netlink: 'syz.0.2966': attribute type 83 has an invalid length. [ 395.053752][T17220] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.072812][T17220] bridge_slave_1: entered allmulticast mode [ 395.082945][T17220] bridge_slave_1: entered promiscuous mode [ 395.184749][T17373] ip6gre1: entered promiscuous mode [ 395.206448][T17373] ip6gre1: entered allmulticast mode [ 395.264509][T17220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.327097][T17220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.443492][T17220] team0: Port device team_slave_0 added [ 395.489503][T17220] team0: Port device team_slave_1 added [ 395.614285][T17392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2970'. [ 395.682370][T17220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.698172][T17220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.769771][T17220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.782944][T11602] tipc: Left network mode [ 395.799643][T17220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.808206][T11602] IPVS: stopping backup sync thread 7056 ... [ 395.816250][T17220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.885565][T17220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.915445][T17403] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 395.926003][ T5821] Bluetooth: hci2: command tx timeout [ 396.147744][T17220] hsr_slave_0: entered promiscuous mode [ 396.160195][T17220] hsr_slave_1: entered promiscuous mode [ 396.188244][T17220] debugfs: 'hsr0' already exists in 'hsr' [ 396.196278][T17220] Cannot create hsr debugfs directory [ 396.547242][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2978'. [ 396.592032][T17427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2978'. [ 396.634393][T17427] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2978'. [ 397.104743][T17449] lo speed is unknown, defaulting to 1000 [ 397.996473][ T5821] Bluetooth: hci2: command tx timeout [ 398.222984][T17493] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2989'. [ 398.970947][T17507] lo speed is unknown, defaulting to 1000 [ 398.976942][T17507] lo speed is unknown, defaulting to 1000 [ 399.086448][T17507] lo speed is unknown, defaulting to 1000 [ 399.187288][T17507] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 399.408761][T17507] lo speed is unknown, defaulting to 1000 [ 399.439646][T17507] lo speed is unknown, defaulting to 1000 [ 399.624205][T17507] lo speed is unknown, defaulting to 1000 [ 399.642480][T17507] lo speed is unknown, defaulting to 1000 [ 399.745301][T17507] lo speed is unknown, defaulting to 1000 [ 399.797629][T17507] lo speed is unknown, defaulting to 1000 [ 399.805309][T17507] lo speed is unknown, defaulting to 1000 [ 400.273511][T17539] netem: change failed [ 400.486010][T17484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.237209][T11602] hsr_slave_0: left promiscuous mode [ 401.271043][T11602] hsr_slave_1: left promiscuous mode [ 401.293488][T11602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.682509][T11602] team0 (unregistering): Port device team_slave_1 removed [ 401.708712][T11602] team0 (unregistering): Port device team_slave_0 removed [ 401.905106][T17220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.923951][T17220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.022699][T17574] tap0: tun_chr_ioctl cmd 1074025680 [ 402.093571][T17220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.131982][T17220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.373298][T17591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2997'. [ 402.466096][T17606] bridge_slave_0: left allmulticast mode [ 402.508744][T17606] bridge_slave_0: left promiscuous mode [ 402.514729][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.561745][T17606] bridge_slave_1: left allmulticast mode [ 402.583870][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 402.593485][T17606] bridge_slave_1: left promiscuous mode [ 402.608582][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.626374][T15745] IPVS: starting estimator thread 0... [ 402.662326][T17606] bond0: (slave bond_slave_0): Releasing backup interface [ 402.705007][T17606] bond0: (slave bond_slave_1): Releasing backup interface [ 402.748115][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2998'. [ 402.752855][T17619] IPVS: using max 25 ests per chain, 60000 per kthread [ 402.870711][T17606] team0: Port device team_slave_0 removed [ 402.885199][T17606] team0: Port device team_slave_1 removed [ 402.902800][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.922348][T17606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.937842][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.950359][T17606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.961293][T17606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.028518][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2999'. [ 403.028548][T15747] lo speed is unknown, defaulting to 1000 [ 403.092398][T17600] lo speed is unknown, defaulting to 1000 [ 403.303847][T17220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.377259][T17640] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3004'. [ 403.393138][T17642] tipc: Enabling of bearer rejected, already enabled [ 403.409476][T11602] IPVS: stop unused estimator thread 0... [ 403.415572][T17642] tipc: Resetting bearer [ 403.424757][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 403.450014][T17220] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.491034][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.498274][ T9396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.558818][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.566037][ T9396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.811375][T17654] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3007'. [ 403.871675][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 403.881453][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 404.108967][T17664] netlink: 'syz.3.3009': attribute type 3 has an invalid length. [ 404.126231][T17664] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 404.166363][T17664] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3009'. [ 404.358267][T17679] SET target dimension over the limit! [ 404.510405][T17220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.330649][T17220] veth0_vlan: entered promiscuous mode [ 405.370153][T17220] veth1_vlan: entered promiscuous mode [ 405.415855][T17220] veth0_macvtap: entered promiscuous mode [ 405.429037][T17220] veth1_macvtap: entered promiscuous mode [ 405.459216][T17220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.475456][T17220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.493672][ T9403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.510915][ T9403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.531933][T17600] lo speed is unknown, defaulting to 1000 [ 405.559452][ T9403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.648910][ T9403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.993928][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.004197][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.173652][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.203787][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.494687][T17754] netlink: 'syz.3.3028': attribute type 10 has an invalid length. [ 407.496468][T17791] __nla_validate_parse: 6 callbacks suppressed [ 407.496488][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 407.543896][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 407.568945][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.579473][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.595207][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.605381][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.614573][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.639794][T17791] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 407.649098][T17792] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 407.708316][T17797] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3037'. [ 407.808820][T17799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3038'. [ 407.879223][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 407.908532][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3039'. [ 407.910707][T17788] lo speed is unknown, defaulting to 1000 [ 407.926486][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3039'. [ 407.941144][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 408.050887][T17808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3040'. [ 408.060111][T17808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3040'. [ 408.413561][T17807] lo speed is unknown, defaulting to 1000 [ 409.686462][ T5831] Bluetooth: hci3: command tx timeout [ 409.717065][T17788] lo speed is unknown, defaulting to 1000 [ 410.016546][T17891] syzkaller1: entered promiscuous mode [ 410.022089][T17891] syzkaller1: entered allmulticast mode [ 410.097772][T17788] chnl_net:caif_netlink_parms(): no params data found [ 410.514447][T17807] lo speed is unknown, defaulting to 1000 [ 410.557939][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.565326][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.578965][T17788] bridge_slave_0: entered allmulticast mode [ 410.598341][T17788] bridge_slave_0: entered promiscuous mode [ 410.637705][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.645117][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.653076][T17788] bridge_slave_1: entered allmulticast mode [ 410.661429][T17788] bridge_slave_1: entered promiscuous mode [ 410.762657][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.855703][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.926819][T17915] : entered promiscuous mode [ 410.971516][T17788] team0: Port device team_slave_0 added [ 410.997837][T17788] team0: Port device team_slave_1 added [ 411.305631][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.323223][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.354062][T17932] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 411.375263][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.474307][T17932] bond11: entered promiscuous mode [ 411.479644][T17932] bond11: entered allmulticast mode [ 411.485509][T17932] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.501077][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.513420][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.539772][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.586387][T17935] erspan2: entered allmulticast mode [ 411.627197][T17935] bond11: (slave erspan2): making interface the new active one [ 411.635155][T17935] erspan2: entered promiscuous mode [ 411.642755][T17935] bond11: (slave erspan2): Enslaving as an active interface with an up link [ 411.766373][ T5831] Bluetooth: hci3: command tx timeout [ 411.953289][T17788] hsr_slave_0: entered promiscuous mode [ 411.962506][T17788] hsr_slave_1: entered promiscuous mode [ 411.971488][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 411.977959][T17788] Cannot create hsr debugfs directory [ 411.986461][T17940] tipc: Started in network mode [ 411.991599][T17940] tipc: Node identity 02458d3316b7, cluster identity 4711 [ 412.004443][T17940] tipc: Enabled bearer , priority 0 [ 412.026348][T17942] tipc: Enabling of bearer rejected, already enabled [ 412.038674][T17940] syzkaller0: entered promiscuous mode [ 412.044709][T17940] syzkaller0: entered allmulticast mode [ 412.164747][T17939] tipc: Resetting bearer [ 412.208566][T17939] tipc: Disabling bearer [ 412.309830][T17952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.356923][T17958] netlink: 'syz.4.3083': attribute type 2 has an invalid length. [ 412.439448][T17962] netlink: 'syz.4.3083': attribute type 2 has an invalid length. [ 412.516572][T17966] geneve4: entered promiscuous mode [ 412.551553][T17970] SET target dimension over the limit! [ 412.565574][ T9397] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 50706 - 0 [ 412.628605][ T9397] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 50706 - 0 [ 412.650994][ T9397] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 50706 - 0 [ 412.672639][ T9397] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 50706 - 0 [ 412.715141][T17977] __nla_validate_parse: 14 callbacks suppressed [ 412.715169][T17977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3088'. [ 412.755648][T17978] xt_hashlimit: size too large, truncated to 1048576 [ 412.764553][T17978] xt_hashlimit: max too large, truncated to 1048576 [ 412.857965][T17984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.868558][T17984] team0: Port device bond1 added [ 412.891288][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'. [ 413.187044][T17999] delete_channel: no stack [ 413.334243][T17788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.350986][T17788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.381903][T17788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.431085][T17788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 413.836115][ T5831] Bluetooth: hci3: command tx timeout [ 413.841898][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.863839][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3102'. [ 414.055678][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.144081][T17788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.167847][T17788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.473223][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.480508][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.502884][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.510209][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.752368][T18050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3105'. [ 414.936129][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.971311][T18061] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 414.982813][T18061] bond0: (slave gre0): Error -95 calling set_mac_address [ 415.073102][T17788] veth0_vlan: entered promiscuous mode [ 415.151943][T17788] veth1_vlan: entered promiscuous mode [ 415.161189][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3110'. [ 415.229570][T17788] veth0_macvtap: entered promiscuous mode [ 415.257964][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'. [ 415.285181][T17788] veth1_macvtap: entered promiscuous mode [ 415.334169][T18074] bond0: (slave rose0): Enslaving as an active interface with an up link [ 415.358368][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.379087][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.420151][ T9397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.451819][ T9397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.473853][ T9397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.504283][ T9397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.738883][ T9420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.759507][ T9420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.808433][T18094] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3115'. [ 415.852005][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.879501][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.918772][ T5831] Bluetooth: hci3: command tx timeout [ 416.390956][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 416.551877][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.564825][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.577780][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.587737][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.598819][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.750272][T18128] lo speed is unknown, defaulting to 1000 [ 416.808614][T18131] nbd4: detected capacity change from 0 to 63 [ 417.097946][ T5821] block nbd4: Receive control failed (result -104) [ 417.444122][T18151] : renamed from veth0_to_bond (while UP) [ 417.609230][T18163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3132'. [ 417.662168][T18151] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.669961][T18151] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.828418][ T5821] block nbd2: Receive control failed (result -32) [ 417.898190][T18151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.915039][T18151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.930585][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 418.045071][T18174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3137'. [ 418.058110][T18174] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 418.078495][T18157] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 418.084511][T18157] pim6reg1: linktype set to 805 [ 418.164205][ T9397] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.186176][ T9397] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.278680][ T9397] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.297135][ T9397] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.489185][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 418.520155][T18128] lo speed is unknown, defaulting to 1000 [ 418.636481][ T5821] Bluetooth: hci1: command tx timeout [ 419.244657][T18128] chnl_net:caif_netlink_parms(): no params data found [ 419.586633][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.619990][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.647054][T18128] bridge_slave_0: entered allmulticast mode [ 419.663340][T18128] bridge_slave_0: entered promiscuous mode [ 419.680808][T18128] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.697310][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.712399][T18128] bridge_slave_1: entered allmulticast mode [ 419.729225][T18128] bridge_slave_1: entered promiscuous mode [ 419.840133][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.875720][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.910969][T18221] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3148'. [ 419.989177][T18128] team0: Port device team_slave_0 added [ 420.029281][T18128] team0: Port device team_slave_1 added [ 420.140401][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.153942][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.211678][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.235044][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.256161][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.343434][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.371717][T18230] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.3151'. [ 420.427857][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 420.719553][ T5821] Bluetooth: hci1: command tx timeout [ 421.011079][T18128] hsr_slave_0: entered promiscuous mode [ 421.037313][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 421.047934][T18128] hsr_slave_1: entered promiscuous mode [ 421.067605][T18128] debugfs: 'hsr0' already exists in 'hsr' [ 421.074633][T18128] Cannot create hsr debugfs directory [ 421.107146][T18239] lo speed is unknown, defaulting to 1000 [ 421.293042][T18240] syzkaller0: entered promiscuous mode [ 421.299451][T18240] syzkaller0: entered allmulticast mode [ 421.425536][T18252] tipc: Started in network mode [ 421.438000][T18252] tipc: Node identity 6e4553b8bf36, cluster identity 4711 [ 421.458428][T18252] tipc: Enabled bearer , priority 0 [ 421.700050][T18250] tipc: Disabling bearer [ 421.867562][T18128] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 421.905559][T18262] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 421.952387][T18257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3159'. [ 421.955133][T18128] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 422.017828][T18257] syzkaller0: entered promiscuous mode [ 422.023581][T18257] syzkaller0: entered allmulticast mode [ 422.123997][T18128] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 422.154479][T18239] lo speed is unknown, defaulting to 1000 [ 422.292236][T18128] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 422.312163][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 422.640221][T18293] lo speed is unknown, defaulting to 1000 [ 422.757753][T18308] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 422.798298][ T5821] Bluetooth: hci1: command tx timeout [ 422.970086][T18128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.040498][T18128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.079578][T18128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.104567][T18128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.405763][T18128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.524587][T18128] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.544886][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.552160][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.598774][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.606014][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.973278][T18366] netlink: 'syz.0.3185': attribute type 5 has an invalid length. [ 424.082154][T18372] netlink: 'syz.4.3187': attribute type 1 has an invalid length. [ 424.164876][T18376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3188'. [ 424.199722][T18379] netlink: 'syz.4.3187': attribute type 29 has an invalid length. [ 424.242043][T18372] bond1: entered promiscuous mode [ 424.262795][T18372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.310126][T18380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3188'. [ 424.351090][T18375] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.366521][T18380] nbd: device at index 64 is going down [ 424.386089][T18375] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 424.463659][T18375] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 424.650498][T17164] udevd[17164]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 424.694078][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 424.751608][T18393] : entered promiscuous mode [ 424.788838][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.879714][ T5821] Bluetooth: hci1: command tx timeout [ 424.925176][T18128] veth0_vlan: entered promiscuous mode [ 424.963478][T18128] veth1_vlan: entered promiscuous mode [ 425.051016][T18128] veth0_macvtap: entered promiscuous mode [ 425.075265][T18128] veth1_macvtap: entered promiscuous mode [ 425.141259][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.164453][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.185639][ T9424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.200454][ T9424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.273853][ T9424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.288770][ T9424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.330644][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3196'. [ 425.362894][T18293] lo speed is unknown, defaulting to 1000 [ 426.007768][T18426] netlink: 'syz.4.3198': attribute type 1 has an invalid length. [ 426.318779][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 426.329604][T18432] netlink: 620 bytes leftover after parsing attributes in process `syz.4.3198'. [ 426.857414][T18426] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 426.942156][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.992950][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.135651][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.159251][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.191359][T18445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3202'. [ 427.224516][T18439] bridge_slave_0: left allmulticast mode [ 427.237375][T18445] netlink: 'syz.1.3202': attribute type 5 has an invalid length. [ 427.247710][T18439] bridge_slave_0: left promiscuous mode [ 427.254782][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 427.268160][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.345362][T18439] bridge_slave_1: left allmulticast mode [ 427.358762][T18439] bridge_slave_1: left promiscuous mode [ 427.364613][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.422070][T18439] bond0: (slave bond_slave_0): Releasing backup interface [ 427.455362][T18439] bond0: (slave bond_slave_1): Releasing backup interface [ 427.479157][T18439] team0: Port device team_slave_0 removed [ 427.496814][T18439] team0: Port device team_slave_1 removed [ 427.503001][T18439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.512843][T18439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.555802][T18439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.672861][T18463] syzkaller0: entered promiscuous mode [ 427.681244][T18463] syzkaller0: entered allmulticast mode [ 428.013706][T18468] syzkaller0: entered promiscuous mode [ 428.019524][T18468] syzkaller0: entered allmulticast mode [ 428.370761][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 428.394131][T18480] xt_nat: multiple ranges no longer supported [ 429.750319][T18490] lo speed is unknown, defaulting to 1000 [ 430.373054][T18531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3222'. [ 430.391979][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3223'. [ 430.413450][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3223'. [ 430.435543][T18533] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 430.443659][T18534] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 430.452445][T18533] netlink: 'syz.0.3223': attribute type 3 has an invalid length. [ 430.460426][T18533] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 430.477136][T18534] netlink: 'syz.0.3223': attribute type 3 has an invalid length. [ 430.507632][T18533] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3223'. [ 430.540063][T18534] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 430.575376][T18534] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3223'. [ 430.712296][T18547] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 430.822333][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 430.832146][T18555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3228'. [ 430.851824][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3228'. [ 430.922777][T18555] vlan2: entered allmulticast mode [ 430.928355][T18555] dummy0: entered allmulticast mode [ 431.255161][T18573] gretap1: entered promiscuous mode [ 431.345086][T18573] batman_adv: batadv0: Adding interface: gretap1 [ 431.381908][T18573] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 431.458936][T18573] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 431.603705][T18587] openvswitch: netlink: IP tunnel dst address not specified [ 431.707494][T18490] lo speed is unknown, defaulting to 1000 [ 431.865736][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 432.130556][T18589] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 432.194997][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'. [ 432.289678][T18611] macvlan4: entered allmulticast mode [ 433.133509][T18644] bond0: (slave sit0): Error: Device type is different from other slaves [ 433.244813][T18648] xt_policy: output policy not valid in PREROUTING and INPUT [ 433.882294][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.892439][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.901501][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.916804][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.925226][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.965765][T18668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.006069][T18673] mac80211_hwsim hwsim53 wlan0: default FDB implementation only supports local addresses [ 434.066195][T18676] mac80211_hwsim hwsim53 wlan0: default FDB implementation only supports local addresses [ 434.242982][T18677] lo speed is unknown, defaulting to 1000 [ 434.310610][T18690] netlink: 'syz.4.3257': attribute type 5 has an invalid length. [ 434.334428][T18689] team0: Port device gtp0 added [ 434.621037][ T5824] bond2: (slave syz_tun): Releasing backup interface [ 434.647602][T18696] tipc: Enabled bearer , priority 14 [ 434.818385][ T1110] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.849687][ T1110] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.883207][ T1110] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50706 - 0 [ 434.966413][T18707] syzkaller0: entered promiscuous mode [ 434.972051][T18707] syzkaller0: entered allmulticast mode [ 435.025762][ T1110] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.064176][ T1110] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.097432][ T1110] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50706 - 0 [ 435.318869][ T1110] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.344370][ T1110] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.416150][ T1110] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50706 - 0 [ 435.593856][ T1110] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.636963][ T1110] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.667742][ T1110] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50706 - 0 [ 435.776050][T15735] tipc: Node number set to 351440179 [ 435.996929][ T5821] Bluetooth: hci0: command tx timeout [ 436.167283][ T1110] bridge_slave_0: left allmulticast mode [ 436.172995][ T1110] bridge_slave_0: left promiscuous mode [ 436.211796][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.504969][T18754] netlink: 'syz.3.3270': attribute type 96 has an invalid length. [ 437.253689][ T1110] bond11 (unregistering): (slave erspan2): Releasing active interface [ 437.265399][ T1110] erspan2 (unregistering): left promiscuous mode [ 437.774545][ T1110] bond0 (unregistering): (slave c5): Releasing backup interface [ 437.792249][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.804514][ T1110] bond0 (unregistering): Released all slaves [ 437.823013][ T1110] bond1 (unregistering): Released all slaves [ 437.841622][ T1110] bond2 (unregistering): Released all slaves [ 437.872587][ T1110] bond3 (unregistering): Released all slaves [ 437.894900][ T1110] bond4 (unregistering): Released all slaves [ 437.923742][ T1110] bond5 (unregistering): Released all slaves [ 437.952995][ T1110] bond6 (unregistering): Released all slaves [ 437.973708][ T1110] bond7 (unregistering): (slave veth5): Releasing active interface [ 437.984982][ T1110] bond7 (unregistering): (slave veth7): Releasing active interface [ 438.002700][ T1110] bond7 (unregistering): (slave veth9): Releasing active interface [ 438.017680][ T1110] bond7 (unregistering): Released all slaves [ 438.037657][ T1110] bond8 (unregistering): Released all slaves [ 438.056544][ T1110] bond9 (unregistering): Released all slaves [ 438.077230][ T5821] Bluetooth: hci0: command tx timeout [ 438.093978][ T1110] bond10 (unregistering): Released all slaves [ 438.117397][ T1110] bond11 (unregistering): Released all slaves [ 438.138403][ T1110] bond12 (unregistering): Released all slaves [ 438.162713][T18760] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 438.176568][T18677] lo speed is unknown, defaulting to 1000 [ 438.186628][T18760] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 438.213051][T18760] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 438.274699][T18768] __nla_validate_parse: 7 callbacks suppressed [ 438.274718][T18768] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3273'. [ 438.381112][T18765] tipc: Resetting bearer [ 438.419382][T18773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 438.440620][ T1110] tipc: Left network mode [ 438.450887][T18765] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 438.462665][T18769] lo speed is unknown, defaulting to 1000 [ 438.473420][T18765] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 438.810539][T18765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 438.822248][T18765] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 438.854059][T18765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.884738][T18765] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 439.055358][T18765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.078747][T18765] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 439.376163][T18765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 439.382177][T18765] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 439.531945][T18798] sctp: [Deprecated]: syz.0.3277 (pid 18798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.531945][T18798] Use struct sctp_sack_info instead [ 439.638152][T18800] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3276'. [ 439.677227][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 439.689767][T18800] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3276'. [ 439.700291][T18677] chnl_net:caif_netlink_parms(): no params data found [ 440.322804][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.356843][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.364183][T18677] bridge_slave_0: entered allmulticast mode [ 440.412434][T18677] bridge_slave_0: entered promiscuous mode [ 440.441584][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.466153][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.483841][T18677] bridge_slave_1: entered allmulticast mode [ 440.501425][T18677] bridge_slave_1: entered promiscuous mode [ 440.634830][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.677102][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.694481][T18834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3283'. [ 442.228132][T18769] lo speed is unknown, defaulting to 1000 [ 442.370757][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3287'. [ 442.421570][T18866] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 442.429621][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.473477][T18677] team0: Port device team_slave_0 added [ 442.558074][T18677] team0: Port device team_slave_1 added [ 442.725075][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.752223][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.796931][T18875] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3291'. [ 442.806090][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.830610][T18875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3291'. [ 442.846296][T18875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3291'. [ 442.980507][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.005789][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.057121][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.507628][T18900] __nla_validate_parse: 3 callbacks suppressed [ 443.507657][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 443.512318][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3295'. [ 443.724739][ T1110] hsr_slave_0: left promiscuous mode [ 443.751534][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.790131][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.897826][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.928697][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.068233][ T1110] hsr0: left allmulticast mode [ 444.088621][ T1110] veth1_macvtap: left promiscuous mode [ 444.114818][ T1110] veth0_macvtap: left promiscuous mode [ 444.129004][ T1110] veth1_vlan: left promiscuous mode [ 444.140773][ T1110] veth0_vlan: left promiscuous mode [ 444.400459][ T1110] pim6reg (unregistering): left allmulticast mode [ 444.704736][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 444.732777][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 444.742900][ T36] smc: removing ib device !yz! [ 444.854035][ T9424] smc: removing ib device sqz0 [ 444.948265][T15749] lo speed is unknown, defaulting to 1000 [ 444.954083][T15749] sqz0: Port: 1 Link DOWN [ 445.114367][T18677] hsr_slave_0: entered promiscuous mode [ 445.172585][T18677] hsr_slave_1: entered promiscuous mode [ 445.187896][T18677] debugfs: 'hsr0' already exists in 'hsr' [ 445.193719][T18677] Cannot create hsr debugfs directory [ 445.917048][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3303'. [ 446.425833][T18967] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 446.443434][T18967] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3308'. [ 446.491496][T18950] vlan2: entered promiscuous mode [ 446.512022][T18950] vlan2: entered allmulticast mode [ 446.524228][T18950] hsr_slave_1: entered allmulticast mode [ 446.707224][T18973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.827092][T18977] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 446.839847][T18977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3311'. [ 446.926091][T18984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3313'. [ 447.039543][ T5202] block nbd4: Possible stuck request ffff8880266c0000: control (read@0,1024B). Runtime 30 seconds [ 447.051936][ T5202] block nbd4: Possible stuck request ffff8880266c0200: control (read@1024,1024B). Runtime 30 seconds [ 447.063605][ T5202] block nbd4: Possible stuck request ffff8880266c0400: control (read@2048,1024B). Runtime 30 seconds [ 447.075529][ T5202] block nbd4: Possible stuck request ffff8880266c0600: control (read@3072,1024B). Runtime 30 seconds [ 447.618981][T19015] sctp: [Deprecated]: syz.3.3320 (pid 19015) Use of int in max_burst socket option deprecated. [ 447.618981][T19015] Use struct sctp_assoc_value instead [ 448.499269][T19051] netlink: 'syz.1.3327': attribute type 21 has an invalid length. [ 448.516045][T19051] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3327'. [ 448.596110][T19051] netlink: 'syz.1.3327': attribute type 5 has an invalid length. [ 448.626560][T19051] netlink: 'syz.1.3327': attribute type 6 has an invalid length. [ 448.634351][T19051] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3327'. [ 449.624600][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 449.927855][T19100] netlink: 'syz.1.3338': attribute type 9 has an invalid length. [ 449.940429][T19100] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 450.343892][T19091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.687104][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 450.781664][T19128] Bluetooth: MGMT ver 1.23 [ 451.010080][T19135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3343'. [ 451.353140][T18677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.364674][ T1110] IPVS: stop unused estimator thread 0... [ 451.456476][T18677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.495279][T18677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.539346][T18677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.771094][T19165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3346'. [ 451.788634][T19165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3346'. [ 451.916684][T19125] lo speed is unknown, defaulting to 1000 [ 451.967640][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'. [ 452.017897][T18677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.148665][T18677] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.197572][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.204773][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.232289][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.240016][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.949629][T19219] syzkaller1: entered promiscuous mode [ 452.964845][T19219] syzkaller1: entered allmulticast mode [ 452.991751][T19221] netem: change failed [ 453.074747][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.321473][T18677] veth0_vlan: entered promiscuous mode [ 453.412773][T18677] veth1_vlan: entered promiscuous mode [ 453.528958][T19243] bond0: (slave sit0): Error: Device type is different from other slaves [ 453.619300][T18677] veth0_macvtap: entered promiscuous mode [ 453.649290][T18677] veth1_macvtap: entered promiscuous mode [ 453.770772][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.824564][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.866197][ T9397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.905558][ T9397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.959199][ T9397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.969666][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3368'. [ 453.982458][ T9397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.000832][T19268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3368'. [ 454.061744][T19268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3368'. [ 454.279727][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.322478][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.596722][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.627737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.743970][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3377'. [ 454.807245][T19305] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3378'. [ 455.015947][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 455.172116][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 455.365053][T19337] tipc: Enabling of bearer rejected, failed to enable media [ 455.511241][T19337] vlan3: entered promiscuous mode [ 455.548815][T19337] bridge0: entered promiscuous mode [ 455.651584][T19308] lo speed is unknown, defaulting to 1000 [ 455.920093][T19358] tipc: Can't bind to reserved service type 2 [ 455.941133][T19352] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3387'. [ 455.954014][T19359] netlink: 9876 bytes leftover after parsing attributes in process `syz.4.3388'. [ 456.273100][T19370] netlink: 'syz.4.3391': attribute type 1 has an invalid length. [ 456.504069][T19371] bond3: entered promiscuous mode [ 456.546171][T19371] bond3: entered allmulticast mode [ 456.562522][T19371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.990662][T19296] lo speed is unknown, defaulting to 1000 [ 457.064407][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 457.568101][T19426] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 457.831208][T19435] batadv_slave_1: entered promiscuous mode [ 457.850875][T19434] batadv_slave_1: left promiscuous mode [ 457.888797][T19432] tap0: tun_chr_ioctl cmd 1074025692 [ 458.327390][T19452] sctp: [Deprecated]: syz.2.3413 (pid 19452) Use of int in maxseg socket option. [ 458.327390][T19452] Use struct sctp_assoc_value instead [ 458.521866][T19477] syz_tun: entered allmulticast mode [ 458.581885][T19475] delete_channel: no stack [ 458.586843][T19475] syz_tun: left allmulticast mode [ 458.664011][T19484] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 458.678400][T19484] openvswitch: netlink: Message has 8 unknown bytes. [ 458.848050][T19490] syzkaller0: entered promiscuous mode [ 458.853644][T19490] syzkaller0: entered allmulticast mode [ 459.057484][T19505] __nla_validate_parse: 9 callbacks suppressed [ 459.057505][T19505] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3429'. [ 459.353062][T19517] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 459.388628][T19517] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 459.540162][T19526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3435'. [ 459.825645][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 459.848223][T19539] ksmbd: Daemon and kernel module version mismatch. ksmbd: 187, kernel module: 1. User-space ksmbd should terminate. [ 460.094091][T19548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3440'. [ 460.190554][T19518] lo speed is unknown, defaulting to 1000 [ 460.219068][T19556] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3441'. [ 460.282770][T19559] netlink: 'syz.0.3442': attribute type 13 has an invalid length. [ 460.385784][T19559] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.393593][T19559] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.521949][T19559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.536806][T19559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.675427][ T9403] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.685452][ T9403] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.756741][ T9403] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.765705][ T9403] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.831020][T19566] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3445'. [ 460.842600][T19566] gretap0: entered promiscuous mode [ 460.859669][T19566] gretap0: left promiscuous mode [ 460.949548][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.003678][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.102018][T19566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.440416][T19584] xt_hashlimit: size too large, truncated to 1048576 [ 462.273649][T19640] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3464'. [ 462.457119][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3463'. [ 462.516674][T19659] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3469'. [ 462.536670][T19659] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 462.558985][T19659] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3469'. [ 462.597792][T19659] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 462.693135][T19666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.772421][T19666] bond2: (slave ip6gretap1): making interface the new active one [ 462.802747][T19666] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 463.070841][T19684] netlink: 'syz.0.3476': attribute type 21 has an invalid length. [ 464.065466][T19744] netlink: 'syz.1.3492': attribute type 4 has an invalid length. [ 464.256518][T19748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.275714][T19749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.291225][T19722] lo speed is unknown, defaulting to 1000 [ 464.686370][T19765] __nla_validate_parse: 5 callbacks suppressed [ 464.686394][T19765] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3497'. [ 465.393974][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 465.408580][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 465.735700][T19795] netlink: 'syz.1.3496': attribute type 3 has an invalid length. [ 465.763657][T19795] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 465.785996][T19795] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3496'. [ 465.800578][T19795] NCSI netlink: No device for ifindex 813332851 [ 465.839094][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3496'. [ 465.997579][T19807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 466.025274][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 466.063830][T19807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 466.455653][T19768] lo speed is unknown, defaulting to 1000 [ 466.465249][T19821] netlink: 'syz.3.3513': attribute type 1 has an invalid length. [ 466.639703][T19821] pimreg: entered allmulticast mode [ 466.649258][T19764] lo speed is unknown, defaulting to 1000 [ 466.649343][T19821] pimreg: left allmulticast mode [ 467.013612][T19844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3519'. [ 467.033766][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3519'. [ 467.696337][T19876] netlink: 'syz.4.3526': attribute type 10 has an invalid length. [ 467.705616][T19876] tipc: Enabling of bearer rejected, failed to enable media [ 468.067658][T19892] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 468.207805][T19900] xt_hashlimit: size too large, truncated to 1048576 [ 468.708393][T19929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.744606][T19931] tipc: Started in network mode [ 468.751847][T19931] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 468.761418][T19931] tipc: Enabling of bearer rejected, failed to enable media [ 468.856208][T19929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.934440][T19954] openvswitch: netlink: Key type 4864 is out of range max 32 [ 469.012435][T19929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.079937][T19961] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 469.105315][T19960] netlink: 'syz.3.3548': attribute type 33 has an invalid length. [ 469.137896][T19929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.337625][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.377122][ T1110] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.401107][ T1110] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.424113][ T1110] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.687811][T19980] netlink: 'syz.2.3554': attribute type 12 has an invalid length. [ 469.695699][T19980] netlink: 'syz.2.3554': attribute type 29 has an invalid length. [ 469.713014][T19980] __nla_validate_parse: 5 callbacks suppressed [ 469.713032][T19980] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3554'. [ 469.729542][T19980] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 469.737549][T19980] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 469.762328][T19980] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3554'. [ 469.773641][T19964] lo speed is unknown, defaulting to 1000 [ 470.033717][T19996] x_tables: duplicate entry at hook 2 [ 470.072191][T20008] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3557'. [ 470.121624][T19991] netlink: 'syz.4.3557': attribute type 29 has an invalid length. [ 470.132445][T20001] netlink: 'syz.4.3557': attribute type 29 has an invalid length. [ 470.146873][T19998] syzkaller0: entered promiscuous mode [ 470.152691][T19998] syzkaller0: entered allmulticast mode [ 470.196076][T20010] tipc: Enabled bearer , priority 0 [ 470.217212][T20000] syzkaller0: entered promiscuous mode [ 470.233365][T20000] syzkaller0: entered allmulticast mode [ 470.463114][T20010] tipc: Resetting bearer [ 470.490831][T20000] netlink: 'syz.0.3559': attribute type 4 has an invalid length. [ 470.499059][T20000] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3559'. [ 470.518624][T19997] tipc: Resetting bearer [ 470.539720][T19997] tipc: Disabling bearer [ 471.044119][T20024] lo speed is unknown, defaulting to 1000 [ 471.172804][T20042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3568'. [ 471.207432][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3568'. [ 471.421995][T20054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3571'. [ 471.626820][T20060] netlink: 'syz.3.3573': attribute type 11 has an invalid length. [ 471.803671][T20040] lo speed is unknown, defaulting to 1000 [ 472.521468][T20110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.653099][T20112] macsec1: entered promiscuous mode [ 472.664439][T20112] macsec1: entered allmulticast mode [ 472.679289][T20079] lo speed is unknown, defaulting to 1000 [ 472.794643][T20112] erspan1: entered promiscuous mode [ 472.802150][T20112] erspan1: entered allmulticast mode [ 472.830557][T20118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3588'. [ 472.854230][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3588'. [ 472.909892][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 473.216540][T20130] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 473.831768][T20126] lo speed is unknown, defaulting to 1000 [ 473.944151][T20154] vlan3: entered promiscuous mode [ 473.959826][T20154] geneve1: entered promiscuous mode [ 473.977152][T20154] vlan3: entered allmulticast mode [ 473.986236][T20154] geneve1: entered allmulticast mode [ 474.035051][T20164] syzkaller0: entered promiscuous mode [ 474.040779][T20164] syzkaller0: entered allmulticast mode [ 474.082390][T20164] tipc: Enabled bearer , priority 0 [ 474.128648][T20164] tipc: Resetting bearer [ 474.205806][T20157] tipc: Resetting bearer [ 474.230317][T20157] tipc: Disabling bearer [ 474.389391][T20173] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.449126][T20181] validate_nla: 3 callbacks suppressed [ 474.449144][T20181] netlink: 'syz.2.3605': attribute type 10 has an invalid length. [ 474.477119][T20182] netlink: 'syz.2.3605': attribute type 10 has an invalid length. [ 474.520852][T20173] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.701529][T20173] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.747412][T20193] __nla_validate_parse: 5 callbacks suppressed [ 474.747432][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 474.824947][T20173] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.883677][T20193] syzkaller0: entered promiscuous mode [ 474.889811][T20193] syzkaller0: entered allmulticast mode [ 474.965152][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.493098][T20196] lo speed is unknown, defaulting to 1000 [ 476.513225][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.610109][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.680615][ T1110] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.868336][T20232] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3617'. [ 476.886368][T20227] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3617'. [ 477.102455][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3618'. [ 477.124490][ T5202] block nbd4: Possible stuck request ffff8880266c0000: control (read@0,1024B). Runtime 60 seconds [ 477.135585][ T5202] block nbd4: Possible stuck request ffff8880266c0200: control (read@1024,1024B). Runtime 60 seconds [ 477.146729][ T5202] block nbd4: Possible stuck request ffff8880266c0400: control (read@2048,1024B). Runtime 60 seconds [ 477.158334][ T5202] block nbd4: Possible stuck request ffff8880266c0600: control (read@3072,1024B). Runtime 60 seconds [ 477.170988][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3618'. [ 477.199967][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.206025][T20237] tc_dump_action: action bad kind [ 477.284558][T20237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.566750][T20230] infiniband syz1: set active [ 477.571693][T20230] infiniband syz1: added syz_tun [ 477.588010][T20230] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 477.596848][T20230] infiniband syz1: Couldn't open port 1 [ 477.663668][T20230] RDS/IB: syz1: added [ 477.668287][T20230] smc: adding ib device syz1 with port count 1 [ 477.684800][T20230] smc: ib device syz1 port 1 has no pnetid [ 478.287927][T20291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.298301][T20291] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3631'. [ 478.341497][T20293] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 478.427369][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3635'. [ 478.619018][T20297] netlink: 'syz.2.3636': attribute type 3 has an invalid length. [ 478.659990][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3638'. [ 478.669105][T20300] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.808397][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'. [ 478.826082][T20305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3640'. [ 479.412048][T15747] lo speed is unknown, defaulting to 1000 [ 479.891088][T20346] __nla_validate_parse: 1 callbacks suppressed [ 479.891108][T20346] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3653'. [ 479.933640][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'. [ 479.970924][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'. [ 480.159278][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 480.176874][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 480.223296][T20354] netlink: 'syz.3.3656': attribute type 13 has an invalid length. [ 480.267876][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 480.329589][T20362] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 480.396951][T20369] netlink: 'syz.2.3659': attribute type 4 has an invalid length. [ 480.496318][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 480.505251][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 480.535367][T20365] netlink: 'syz.1.3657': attribute type 6 has an invalid length. [ 480.603832][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 480.620816][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 480.636341][T20365] netlink: 'syz.1.3657': attribute type 6 has an invalid length. [ 480.646161][ T9403] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.655647][ T9420] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.686860][ T9420] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.708425][ T9420] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.907127][T20363] lo speed is unknown, defaulting to 1000 [ 481.605106][T20358] lo speed is unknown, defaulting to 1000 [ 481.656735][T20394] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 481.800924][T20403] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 481.820897][T20403] netlink: 'syz.3.3669': attribute type 20 has an invalid length. [ 482.276332][T20413] netlink: 'syz.3.3674': attribute type 11 has an invalid length. [ 482.297396][T20413] netlink: 'syz.3.3674': attribute type 23 has an invalid length. [ 482.431234][T20413] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.437959][T20413] syzkaller1: linktype set to 778 [ 482.499964][T20416] syzkaller0: entered promiscuous mode [ 482.505672][T20416] syzkaller0: entered allmulticast mode [ 483.864561][T20453] veth1_macvtap: renamed from veth0_vlan [ 484.350242][T20484] pim6reg: entered allmulticast mode [ 484.374631][T20485] pim6reg: left allmulticast mode [ 484.424241][T20486] tipc: Enabling of bearer rejected, failed to enable media [ 484.790376][T20505] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 484.973885][T20470] lo speed is unknown, defaulting to 1000 [ 485.327130][T20525] __nla_validate_parse: 7 callbacks suppressed [ 485.327150][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 485.369840][T20525] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3701'. [ 485.419744][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 485.485383][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 485.688611][T20504] lo speed is unknown, defaulting to 1000 [ 485.916706][ T5483] veth1_macvtap: left promiscuous mode [ 486.072995][ T5483] veth1_macvtap: entered promiscuous mode [ 486.888751][T20583] netlink: 'syz.1.3709': attribute type 3 has an invalid length. [ 486.923333][T20593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.158844][T20602] sctp: [Deprecated]: syz.4.3713 (pid 20602) Use of int in max_burst socket option deprecated. [ 487.158844][T20602] Use struct sctp_assoc_value instead [ 487.553060][T20612] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 487.567871][T20612] bond1 (unregistering): Released all slaves [ 487.668818][T20605] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 487.826136][T20621] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 487.845165][T20622] tipc: Started in network mode [ 487.857510][T20622] tipc: Node identity 4, cluster identity 4711 [ 487.871428][T20622] tipc: Node number set to 4 [ 488.302539][T20650] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3722'. [ 488.352757][T20650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3722'. [ 488.390327][T20652] xt_cgroup: path and classid specified [ 489.057664][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 489.072288][T20691] netlink: 'syz.2.3731': attribute type 66 has an invalid length. [ 489.095212][T20692] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 489.108370][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 489.127663][T20692] bond4 (unregistering): Released all slaves [ 489.196775][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3725'. [ 489.252525][T20691] team0: No ports can be present during mode change [ 489.455110][T20713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3734'. [ 489.991148][T20727] ------------[ cut here ]------------ [ 489.997370][T20727] !rwb [ 489.997396][T20727] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0x148/0x1a0, CPU#1: syz.2.3737/20727 [ 490.010606][T20727] Modules linked in: [ 490.014879][T20727] CPU: 1 UID: 0 PID: 20727 Comm: syz.2.3737 Not tainted syzkaller #0 PREEMPT(full) [ 490.024406][T20727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.034652][T20727] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 490.040425][T20671] lo speed is unknown, defaulting to 1000 [ 490.042517][T20727] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 14 25 09 07 e8 6f b7 2d fd eb 18 e8 68 b7 2d fd eb 0d e8 61 b7 2d fd 4c 89 ff e8 09 f5 8a fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 a3 0a 07 [ 490.066929][T20727] RSP: 0018:ffffc9000c30ee48 EFLAGS: 00010292 [ 490.073044][T20727] RAX: e99041ff02bb6000 RBX: 1ffff1100d28fa04 RCX: 0000000000000046 [ 490.081258][T20727] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 490.089376][T20727] RBP: dffffc0000000000 R08: ffffffff90109077 R09: 1ffffffff202120e [ 490.097471][T20727] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff88806947d020 [ 490.105481][T20727] R13: 0000000000000000 R14: ffff88807c00e000 R15: ffff88806947d000 [ 490.113570][T20727] FS: 00007f9c395066c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 490.123014][T20727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.129726][T20727] CR2: 0000001b33123ffc CR3: 0000000011902000 CR4: 00000000003526f0 [ 490.137820][T20727] Call Trace: [ 490.141135][T20727] [ 490.144538][T20727] blk_register_queue+0x36a/0x3f0 [ 490.150574][T20727] __add_disk+0x677/0xd50 [ 490.154974][T20727] ? down_read+0x272/0x2e0 [ 490.160342][T20727] add_disk_fwnode+0xfb/0x480 [ 490.165072][T20727] nbd_dev_add+0x72c/0xb50 [ 490.170176][T20727] ? __pfx_nbd_dev_add+0x10/0x10 [ 490.175231][T20727] ? bpf_lsm_capable+0x9/0x20 [ 490.180562][T20727] ? security_capable+0x7e/0x2c0 [ 490.185553][T20727] ? radix_tree_lookup+0x25c/0x290 [ 490.191315][T20727] nbd_genl_connect+0x962/0x1cf0 [ 490.196834][T20727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 490.202316][T20727] ? rcu_is_watching+0x15/0xb0 [ 490.207555][T20727] ? __nla_parse+0x40/0x60 [ 490.212021][T20727] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 490.218580][T20727] genl_family_rcv_msg_doit+0x22a/0x330 [ 490.224208][T20727] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.230402][T20727] ? __lock_acquire+0x6b5/0x2cf0 [ 490.235419][T20727] genl_rcv_msg+0x61c/0x7a0 [ 490.240191][T20727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.245270][T20727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 490.251232][T20727] netlink_rcv_skb+0x232/0x4b0 [ 490.256445][T20727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.261588][T20727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.267024][T20727] ? genl_rcv+0x19/0x40 [ 490.271283][T20727] ? down_read+0x272/0x2e0 [ 490.275748][T20727] ? genl_rcv+0xd/0x40 [ 490.279951][T20727] genl_rcv+0x28/0x40 [ 490.284027][T20727] netlink_unicast+0x80f/0x9b0 [ 490.288942][T20727] ? __pfx_netlink_unicast+0x10/0x10 [ 490.294283][T20727] ? netlink_sendmsg+0x650/0xb40 [ 490.299372][T20727] ? skb_put+0x11b/0x210 [ 490.303668][T20727] netlink_sendmsg+0x813/0xb40 [ 490.308576][T20727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.313911][T20727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.319074][T20727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.324432][T20727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.329907][T20727] ____sys_sendmsg+0xa68/0xad0 [ 490.334732][T20727] ? __might_fault+0xaf/0x130 [ 490.339561][T20727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.344932][T20727] ? import_iovec+0x73/0xa0 [ 490.350068][T20727] ___sys_sendmsg+0x2a5/0x360 [ 490.354820][T20727] ? __lock_acquire+0x6b5/0x2cf0 [ 490.360311][T20727] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.365572][T20727] ? futex_wake+0x4ac/0x580 [ 490.370234][T20727] ? __fget_files+0x2a/0x420 [ 490.374865][T20727] ? __fget_files+0x3a0/0x420 [ 490.379721][T20727] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.384799][T20727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.390409][T20727] ? rcu_is_watching+0x15/0xb0 [ 490.395329][T20727] do_syscall_64+0x14d/0xf80 [ 490.400295][T20727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.406479][T20727] ? trace_irq_disable+0x37/0x100 [ 490.411553][T20727] ? clear_bhb_loop+0x40/0x90 [ 490.416405][T20727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.422350][T20727] RIP: 0033:0x7f9c3859bf79 [ 490.426891][T20727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.446682][T20727] RSP: 002b:00007f9c39506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.455627][T20727] RAX: ffffffffffffffda RBX: 00007f9c38816090 RCX: 00007f9c3859bf79 [ 490.464031][T20727] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 490.472163][T20727] RBP: 00007f9c386327e0 R08: 0000000000000000 R09: 0000000000000000 [ 490.480675][T20727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.488747][T20727] R13: 00007f9c38816128 R14: 00007f9c38816090 R15: 00007fff27d65688 [ 490.496843][T20727] [ 490.500004][T20727] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.507425][T20727] CPU: 1 UID: 0 PID: 20727 Comm: syz.2.3737 Not tainted syzkaller #0 PREEMPT(full) [ 490.516873][T20727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.526999][T20727] Call Trace: [ 490.530314][T20727] [ 490.533292][T20727] vpanic+0x1e0/0x670 [ 490.537329][T20727] panic+0xc5/0xd0 [ 490.541092][T20727] ? __pfx_panic+0x10/0x10 [ 490.545587][T20727] __warn+0x315/0x4a0 [ 490.549610][T20727] ? wbt_init_enable_default+0x148/0x1a0 [ 490.555302][T20727] ? wbt_init_enable_default+0x148/0x1a0 [ 490.560986][T20727] __report_bug+0x29a/0x540 [ 490.565535][T20727] ? nbd_dev_add+0x72c/0xb50 [ 490.570172][T20727] ? nbd_genl_connect+0x962/0x1cf0 [ 490.575314][T20727] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 490.581081][T20727] ? wbt_init_enable_default+0x148/0x1a0 [ 490.586868][T20727] ? __pfx___report_bug+0x10/0x10 [ 490.591960][T20727] ? wbt_init_enable_default+0x148/0x1a0 [ 490.597649][T20727] report_bug+0x16a/0x220 [ 490.602032][T20727] ? wbt_init_enable_default+0x148/0x1a0 [ 490.607982][T20727] ? wbt_init_enable_default+0x14a/0x1a0 [ 490.613752][T20727] handle_bug+0x98/0x200 [ 490.618031][T20727] exc_invalid_op+0x1a/0x50 [ 490.622669][T20727] asm_exc_invalid_op+0x1a/0x20 [ 490.627563][T20727] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 490.633832][T20727] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 14 25 09 07 e8 6f b7 2d fd eb 18 e8 68 b7 2d fd eb 0d e8 61 b7 2d fd 4c 89 ff e8 09 f5 8a fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 a3 0a 07 [ 490.653458][T20727] RSP: 0018:ffffc9000c30ee48 EFLAGS: 00010292 [ 490.659552][T20727] RAX: e99041ff02bb6000 RBX: 1ffff1100d28fa04 RCX: 0000000000000046 [ 490.667580][T20727] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 490.675576][T20727] RBP: dffffc0000000000 R08: ffffffff90109077 R09: 1ffffffff202120e [ 490.683753][T20727] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff88806947d020 [ 490.691746][T20727] R13: 0000000000000000 R14: ffff88807c00e000 R15: ffff88806947d000 [ 490.699759][T20727] ? wbt_init_enable_default+0x147/0x1a0 [ 490.705430][T20727] blk_register_queue+0x36a/0x3f0 [ 490.710484][T20727] __add_disk+0x677/0xd50 [ 490.714846][T20727] ? down_read+0x272/0x2e0 [ 490.719376][T20727] add_disk_fwnode+0xfb/0x480 [ 490.724085][T20727] nbd_dev_add+0x72c/0xb50 [ 490.728530][T20727] ? __pfx_nbd_dev_add+0x10/0x10 [ 490.733501][T20727] ? bpf_lsm_capable+0x9/0x20 [ 490.738201][T20727] ? security_capable+0x7e/0x2c0 [ 490.743166][T20727] ? radix_tree_lookup+0x25c/0x290 [ 490.748310][T20727] nbd_genl_connect+0x962/0x1cf0 [ 490.753303][T20727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 490.758762][T20727] ? rcu_is_watching+0x15/0xb0 [ 490.763574][T20727] ? __nla_parse+0x40/0x60 [ 490.768027][T20727] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 490.774403][T20727] genl_family_rcv_msg_doit+0x22a/0x330 [ 490.780090][T20727] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.786193][T20727] ? __lock_acquire+0x6b5/0x2cf0 [ 490.791161][T20727] genl_rcv_msg+0x61c/0x7a0 [ 490.795703][T20727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.800763][T20727] ? __pfx_nbd_genl_connect+0x10/0x10 [ 490.806170][T20727] netlink_rcv_skb+0x232/0x4b0 [ 490.810966][T20727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.816014][T20727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.821346][T20727] ? genl_rcv+0x19/0x40 [ 490.825540][T20727] ? down_read+0x272/0x2e0 [ 490.829980][T20727] ? genl_rcv+0xd/0x40 [ 490.834076][T20727] genl_rcv+0x28/0x40 [ 490.838089][T20727] netlink_unicast+0x80f/0x9b0 [ 490.842980][T20727] ? __pfx_netlink_unicast+0x10/0x10 [ 490.848302][T20727] ? netlink_sendmsg+0x650/0xb40 [ 490.853292][T20727] ? skb_put+0x11b/0x210 [ 490.857579][T20727] netlink_sendmsg+0x813/0xb40 [ 490.862385][T20727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.867725][T20727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.872695][T20727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.878011][T20727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.883321][T20727] ____sys_sendmsg+0xa68/0xad0 [ 490.888125][T20727] ? __might_fault+0xaf/0x130 [ 490.892833][T20727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.898153][T20727] ? import_iovec+0x73/0xa0 [ 490.902682][T20727] ___sys_sendmsg+0x2a5/0x360 [ 490.907389][T20727] ? __lock_acquire+0x6b5/0x2cf0 [ 490.912352][T20727] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.917593][T20727] ? futex_wake+0x4ac/0x580 [ 490.922142][T20727] ? __fget_files+0x2a/0x420 [ 490.926746][T20727] ? __fget_files+0x3a0/0x420 [ 490.931449][T20727] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.936416][T20727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.941902][T20727] ? rcu_is_watching+0x15/0xb0 [ 490.946703][T20727] do_syscall_64+0x14d/0xf80 [ 490.951322][T20727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.957407][T20727] ? trace_irq_disable+0x37/0x100 [ 490.962456][T20727] ? clear_bhb_loop+0x40/0x90 [ 490.967150][T20727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.973057][T20727] RIP: 0033:0x7f9c3859bf79 [ 490.977503][T20727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.997128][T20727] RSP: 002b:00007f9c39506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.005562][T20727] RAX: ffffffffffffffda RBX: 00007f9c38816090 RCX: 00007f9c3859bf79 [ 491.013553][T20727] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 491.021543][T20727] RBP: 00007f9c386327e0 R08: 0000000000000000 R09: 0000000000000000 [ 491.029532][T20727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.037519][T20727] R13: 00007f9c38816128 R14: 00007f9c38816090 R15: 00007fff27d65688 [ 491.045545][T20727] [ 491.049207][T20727] Kernel Offset: disabled [ 491.053552][T20727] Rebooting in 86400 seconds..