last executing test programs: 4m3.049719064s ago: executing program 3 (id=1842): r0 = socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4m2.920549631s ago: executing program 3 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'team_slave_0\x00', {0x1}, 0xcf48}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x52a, 0x346, 0x5}}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x3, 0x7b8, {{0x14, 0x4, 0x0, 0x2a, 0x50, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3a}, {[@noop, @generic={0x89, 0x4, "9398"}, @lsrr={0x83, 0x23, 0xb9, [@loopback, @broadcast, @broadcast, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x14, 0x1e, 0x0, 0x6, [0x7, 0xff, 0xa2b, 0x7]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0xe0, 0x6, 0x3, 0x9, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x700, 0x8000, 0x1e5, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58040000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="2c0102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010400003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400deb0a2ac08000100", @ANYRES32=r7, @ANYBLOB="b800028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040008007fef20d3000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b401028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000607006652a6848528962de778cb63000400040008000600", @ANYRES32=r13, @ANYBLOB], 0x458}, 0x1, 0x0, 0x0, 0x20004004}, 0x40) socket$netlink(0x10, 0x3, 0xc) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r14, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa7964b78f508e0ec}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20004804) 4m2.553552184s ago: executing program 3 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'syzkaller1', 0x32, 0x36}, 0xd) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x20000000) 4m2.519940494s ago: executing program 3 (id=1853): r0 = socket$key(0xf, 0x3, 0x2) sendto(r0, &(0x7f0000000040)="b2967a009f77645d7060582cabdaf1f550103c57aca24e4162be2c2c300268dcac0fbf373f370681ef3b0575b06c98ec8643f404e25a4deb06fbde16b4aaec85b31cc708371cfcced63b7e43a27af1e9006a680873990d3165100e5af5bf3f225f32b5ec2cb7ee00b17998f7dc5a9f68a575550e82ff118f9f2a4d48cc6973a80c5b871b56c936c58a51c9", 0x8b, 0xc010, &(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x1, 0xffff}}, 0x80) (async) sendto(r0, &(0x7f0000000040)="b2967a009f77645d7060582cabdaf1f550103c57aca24e4162be2c2c300268dcac0fbf373f370681ef3b0575b06c98ec8643f404e25a4deb06fbde16b4aaec85b31cc708371cfcced63b7e43a27af1e9006a680873990d3165100e5af5bf3f225f32b5ec2cb7ee00b17998f7dc5a9f68a575550e82ff118f9f2a4d48cc6973a80c5b871b56c936c58a51c9", 0x8b, 0xc010, &(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x1, 0xffff}}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 4m2.435476859s ago: executing program 3 (id=1855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) (async) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="140004c3", @ANYRES16=r1, @ANYBLOB="030726bd700300000000000000002217d9acbcb2f9b0acb488"], 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) 4m2.330063077s ago: executing program 3 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050e72210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4044816) 3m3.14220943s ago: executing program 32 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050e72210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4044816) 2m44.616620248s ago: executing program 1 (id=2302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6erspan0\x00', &(0x7f00000000c0)=@ethtool_dump={0x3f, 0x8, 0x1, 0x70, "de0d530dcdb819b551cfe6d2bc72a7a05ee3ababb284127c2bfe2d234da9e78afd6266ca328107067f69e0ec90db6ff3210dd68d304b5d31f6b27ff3d359baba5deab51c1753bcab6c3fbf99ae9423f8f63e914c89940b2c859ab9ec85ba7d96220fc06a2e46889b7126284b5c75155d"}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4881, 0x0) 2m44.402093777s ago: executing program 1 (id=2307): r0 = socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 2m43.488465321s ago: executing program 1 (id=2330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xc2d00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 2m43.387665718s ago: executing program 1 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (rerun: 64) 2m43.252817541s ago: executing program 1 (id=2336): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x2e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "e3e9526cec224e34f9f6ded2b7ea37bd22d12d75b14653cef62bd79163d4f8a2534b5c"}}, @TIPC_NLA_NODE_ID={0xea, 0x3, "2153099216ecf0dc3359f4e951bf75a2c512059470a42c849efddecff4be730385473a4f0f566484ca253f19c525cc008cbc4712289ca5b063259aecff7ccbcda2ba4dd9d3913bdba800776c469488958ed4093caa411e9da042ca2c52bb558efd223cab7e1246aee823c97f0bfcc9eda520b7e974b4dc5fd76169ee4018ca959133b5196c29441ad6c0c6cc3b14506937b14a30b9bc620b938256eea2364055bdec43c58afd1094c0cf89b681212a7ef2379575930725aaf16e43ae09fa5cb23f25779d61e99814ba8f4a734973a0abfefa871dc64f92667f3ab4f5aa30e635c640bbb7c118"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "20fb6f35113c3edf2e5c0a9d550c2fd566c992f0911e7a2089b2c9e8b23ada1b"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "3a5b723dee52fd57c6bc2dda2c7fcb0e991724d48efc5c65b5ef1c02126e01af40"}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff268f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xad7}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96, 0x3, "42f503093eca31e3ef70e1fa8361bf81e72e300c9296f9f0f8f2b7af8c79bb57e22b0b7ea07f7b491a6d8659fff2836991c1b04a905facceefb9fca6bfd21251c5d118cf3a1d60d9d6151baf7fd5e86b29de9f049ff93c91f7749cab9f708ce6d768b8d0a706e25db57a8c6596243c2c0b7f9b8016f0271f1cb457b8b94337fe71e2b50f2b235cd43c2a88ebfb9bf67d7113"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x2, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x1}, {0x4, 0x2, 0x2}, {0x1, 0x0, 0x3a}, {0x2, 0x5b69, 0x8000}, {0x5, 0x40, 0x6}, {0x1, 0x0, 0xf328}, {0x5, 0x0, 0x2}], "dc"}]}}, 0x0, 0x7e, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) r5 = socket(0x2a, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0xbc, r8, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x65}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}]}, 0xbc}}, 0x20004800) bind$xdp(r5, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) 2m43.017080808s ago: executing program 1 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r1, &(0x7f00000000c0)=@ax25={{0x3, @default}, [@remote, @null, @rose, @remote, @remote, @bcast, @default, @netrom]}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x101, 0x70bd27, 0x25dffbf8, {0xa, 0x3c, 0x19, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m5.14356567s ago: executing program 33 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r1, &(0x7f00000000c0)=@ax25={{0x3, @default}, [@remote, @null, @rose, @remote, @remote, @bcast, @default, @netrom]}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x101, 0x70bd27, 0x25dffbf8, {0xa, 0x3c, 0x19, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 3.288823323s ago: executing program 6 (id=3615): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x10000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 3.017605734s ago: executing program 0 (id=3620): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x7, 0x0, 0x2, 0xa, 0x1, 0x18, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_val={0x18, 0xe, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x24, &(0x7f0000000100)=""/36, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0x26a, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x1, 0x9, 0x9}], 0x10, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000440)=@raw=[@alu={0x4, 0x0, 0xb, 0x4, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @generic={0xf3, 0x1, 0x0, 0x4, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffff9}, @jmp={0x5, 0x1, 0x9, 0x8, 0x8, 0x1}], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x5, 0xe430, 0x262}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rtc_irq_set_state\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@initdev, 0x0}, &(0x7f0000000600)=0x14) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18310000010000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000060000000000b705268936a5fc0000"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x58, &(0x7f0000000540)=""/88, 0x40f00, 0xb, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[r5, 0xffffffffffffffff, r5], &(0x7f0000000740)=[{0x1, 0x2, 0x81, 0x6}, {0x1, 0x1, 0xc, 0x5}, {0x0, 0x4, 0x1, 0x4}, {0x1, 0x3, 0xa, 0x3}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x3, 0x0, 0x1}, {0x3, 0x1, 0xf, 0x7}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x9}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a40)={'gretap0\x00', r6, 0x7, 0x7800, 0x3, 0x32, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @private=0xa010100}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r8, &(0x7f0000000ac0)="83af5a54adbdaa1e33085464d884f1be4938b609943ec8172b789d610b63d61f1b6fc028656735267584f94f6d23eb0a016e4f", &(0x7f0000000b00)=""/192, 0x4}, 0x20) 2.856624319s ago: executing program 0 (id=3622): r0 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2dc, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x4, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0xb}}, {0x4}}]}]}, 0x2dc}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00008188a6b62acca1f8483d0000005e14060200000000000098de1000fa00b4302a360daa00028000000000", 0x47}], 0x1}, 0x0) 2.838153457s ago: executing program 4 (id=3623): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x558, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) 2.669904901s ago: executing program 4 (id=3624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa00"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="e909d9f025f1022d020073797a300000000008004100000000bc1c6f00d2000000000049a41e35a66b2d8ad9c198efe492e3cace82c6c3734542c3e2c10bb86065f37330aa0e351313299029a858ed8401e8dc8e684cb74b8e7ea191d8940a30fba867c36ed6cb8c"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000002070000000000070000060000000000000000000c000c400000000000000200"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.590047096s ago: executing program 0 (id=3627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'bridge0\x00', 0x1}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x24000080) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd2a, 0x2, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_open_procfs$namespace(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r9, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000480)=0x4) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x60, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fc9213812f6b"}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6d107f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004051}, 0x50) sendmsg$nl_xfrm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r7], 0xe0}}, 0x20008000) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}, 0x8, 0x5, 0x16c8, 0x80, 0xdf6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000100)={r13, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000001c0)=0x84) 2.462557403s ago: executing program 2 (id=3628): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.333516947s ago: executing program 2 (id=3630): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000940)}, 0x20) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) (async) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x1, 0x1, 0x1, 0x3, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ldst={0x2, 0x1, 0x0, 0x0, 0x5, 0x40, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x400, 0x7, &(0x7f0000000b00)=""/7, 0x1e00, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000b80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0x0, 0xff, 0x2961fab}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c00)=[{0x4, 0x4, 0x3, 0xb}], 0x10, 0xe}, 0x94) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3a0, 0x0, 0xe8, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xa1, 0x8001}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x20, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'team0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x7, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xa0fc, 0x6bb0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r13 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) setsockopt$inet_tcp_int(r12, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r12, 0x0) (async) recvmmsg(r12, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0x7, &(0x7f0000000140)={0x4b4a, 0x2, 0x6, 0x7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}}, 0x90) 2.230432678s ago: executing program 4 (id=3631): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)='%pK \x00'}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) poll(&(0x7f0000000380)=[{r2, 0xa0}, {r1, 0x4020}, {r1, 0x2}, {r0, 0x9000}, {r0, 0x2201}], 0x5, 0xffffff7f) r5 = accept(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "d0e382"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6be1b93d50b23fdbacde29e344"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6e9a50df64"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000140)={0xd0, 0x1, 0x0, 0x70bd2b, 0x0, "", [@generic="95a2c685832603f3714916c8fbfba416c2f2944653af8ea3289b0465c83d12a25eb4d7cb0027ca78c0723e4e14ccbe8e9fb7ac15fe2fb4239b2b229d08de6f0f95cc42905734ad0241ac9c6d10fdf5c3be4f193f45ce46f6f6ebd370a99fc27c41b121eed63e4d662b78ba2e9289d64d7a715c4d45105b0d3516a55bfd30dae77b366417ab59409f2b775f957539a2e8d6528f30cd2d2b4d36a8664b5199bc607e3ceaf975a289609a90d9703ee12440da287438f30abad28fac39eff3dcb1e5"]}, 0xd0}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x3e8, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 2.093142822s ago: executing program 2 (id=3632): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240000a0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15e2c}]}}]}, 0x44}}, 0x20004094) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 2.09241911s ago: executing program 4 (id=3633): r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40011}, 0x81) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x0, 0xe3, "9b1a74efd1d3862ba58e68a4d87cf102163c1762f6bb45d7ce5db0ce4c20fd849c72f1d29e43fe1d2be8439f4c1baa31f219b28f8ef379dff3f7210297ca58c3023b6cc7f0635e7372976391c1b320f568b1ce0d59d51e74982b96c9ede80d24f10c12782480c14ce320f4b2bb693617f9f2c5780190b7808be4df9563c299ce4d9919034973db44f327d49160691631d21f05363bc976d30431fba39edcb68d150e8d3a2a4767a52cc1190c03a12aa2dfb417d946d510424102f6d32db25fe056b47373bc75c94f2dbbac4a9ed82d29b98ad0e094c675ee3b949c3357afab354343a1"}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r1, &(0x7f0000000280)="c9eeb98c848f7bb6db2cdd584cb94fdc3886fa18eef4930011d041aa2899490b0e352ea086b921fbb78588dc1f917bbdc28c77f8507a9ea6aac0d21053bc95218566cb5795d04c4008ee7a6276acf215ce12da67ab3f1648f851d996873603441ab255def82c885adc5cc67ad7532b1a7e76b8cd21a8eb1ad2710ddb2b775ed0a172d95c280d390519ef0b99a9d459be1d90033e18b39ff9feefcc4c27c9457143d5ee14d88c526069a37f6b11a5f2615248fb9986b20236a9154eb3091db1491db5a5a1f5b265acea8d2438d56e224cb5e191fd3b428416574f7e2dc5fb2de3c2520e43bdd96ad0c63c9d0177", 0xed) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r3, 0x2, 0x14, 0x3}) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000004c0)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@delneigh={0x64, 0x1d, 0x200, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, r5, 0x0, 0x80, 0xe40774ded5e03e4b}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_PROTOCOL={0x5, 0xc, 0x45}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x880) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x4, 0x0, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) r7 = openat$cgroup_devices(r4, &(0x7f0000001840)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000001880)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001900)={&(0x7f00000018c0)}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001940)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r4) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000019c0)={0x1, 0x0, 0x7, 0xdab, @vifc_lcl_ifindex=r5, @multicast2}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a40), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, r8, 0xa, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xf}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x626}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x400}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001c00)={0x0, @multicast2, @multicast1}, &(0x7f0000001c40)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x48, r10, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r4, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@bridge_getvlan={0x38, 0x72, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x54804) 2.047654337s ago: executing program 6 (id=3634): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x58, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000680), 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e27, @rand_addr=0x64010102}, 0x10) 2.001038699s ago: executing program 5 (id=3635): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r5, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) 1.922181237s ago: executing program 4 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xd, [{@loopback, 0x100000}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000004640bee72200180092800800e6ff726974000c0002800800140000100000bc4100d3a514110de827ddde9347934bec154ce805f6f2253aff312065a8d68d830de59c1a4dfa98ed7b190347eeb77f9e381e8001956f912be4b70bc0ad8081b1ddaa01570133f7f20b6aacb43f110008000000000000b39339b2d0237d688feec06d1e89818d44cbfac3eff7e11d18e0a9"], 0x38}}, 0x0) 1.839975804s ago: executing program 0 (id=3637): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7800000055003d0926bd70000200000007000000", @ANYRES32=r1, @ANYBLOB="20000200", @ANYRES32=r1, @ANYBLOB="00010400000000000000000000000000000000008edd000020000100", @ANYRES32=r1, @ANYBLOB="000200006401010200000000000000000000000086dd"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfff1}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4071}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.064445789s ago: executing program 5 (id=3638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 917.756105ms ago: executing program 5 (id=3639): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 414.182507ms ago: executing program 6 (id=3640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x400400c5}, 0x24040000) 410.17341ms ago: executing program 4 (id=3641): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340), 0x0, 0x24080001) (async) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000580)=""/61, 0x3d}, {&(0x7f0000000700)=""/169, 0xa9}], 0x5, &(0x7f00000002c0)=""/28, 0x1c}, 0xffffffff}], 0x1, 0x102, 0x0) 357.920831ms ago: executing program 0 (id=3642): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}, 0x1c) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @random="e15e1cfb536c"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$unix(0x1, 0x2, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe, 0x0, 0x6364, 0x1, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0xfffffffa, 0x4) 357.337113ms ago: executing program 5 (id=3643): recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/224, 0xe0}, {&(0x7f0000000180)=""/102, 0x66}], 0x2, &(0x7f0000000240)=""/4096, 0x1000}, 0x40010100) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f00000012c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xa, 0x3, {{0x1a, 0x4, 0x1, 0x14, 0x68, 0x65, 0x0, 0xfc, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x1f, 0x60, [@remote, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x28, 0x3, [{0x4, 0x11, "4b06e920e69384e3a80640228d421e"}, {0x0, 0x8, "cc5b77d29e97"}, {0x1, 0x9, "4f624102bfb956"}]}, @generic={0x88, 0xa, "a8288dc4402a7a17"}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffe0, 0xfff3}, {0x7, 0xe}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001480)='cgroup.stat\x00', 0x0, 0x0) bind$packet(r2, &(0x7f00000014c0)={0x11, 0x7, r1, 0x1, 0x83, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000001500)={0x2, 0x1000, 0x1}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001540)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001580)={r2, r2, 0x2b, 0x0, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r2, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0], 0x0, 0xd5, &(0x7f0000001680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0x95, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000018c0)={r3}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001900)={r2}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl(r6, 0x70371383, &(0x7f0000001940)="4a4ea5e019337b2607aef92ef34625c1f801ce6a441648c76b87a23e52eeda1a9f7c42989833735d33d8e494a193291fad1f2874734fe1ea8b9e2e65f56f00c73fbf183aa43da3c550dd029d9eb27f1fd78a5cead0d3a8b34915c29064a2c451cb9b19f82ec772f5869db83664d72d50055f7c0dc8edace7ae59dfaa4f54e5f1924eb8965f06a84ba09d") r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a40), r2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x12c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x5c, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x2c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4be7fdc0e3"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) r10 = socket$inet(0x2, 0xa, 0x7) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x408000, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001f40)={'pimreg0\x00', @broadcast}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001f80)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000002000)={'veth0_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000002040), &(0x7f0000002080)=0x4) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x48, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '#\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x12, 0x1, 'veth0_to_team\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000002200)={r5, r2}) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40084) 356.314176ms ago: executing program 2 (id=3644): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xc, @remote, 0x8}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x16, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 300.034034ms ago: executing program 6 (id=3645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 284.661661ms ago: executing program 5 (id=3646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async, rerun: 32) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x4, 0xcc) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000b06030000000000000000000200000605000100070000000900020073797a3200000000180007800900120073797a310000000008001c40000000c067da09f3f90a0fde1362f2641925ae1608f0944be90eba989b7a2567e5fc87a526013901950233bbfb2be556c4836c41e78bc776351ca3e5bb1d9434bc657bf5f606f2cc42629f71a32140d4de56d435f80614455f"], 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 214.106447ms ago: executing program 2 (id=3647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3, 0xe4}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) 193.09922ms ago: executing program 5 (id=3648): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000003200)={'ip6tnl0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 174.983827ms ago: executing program 6 (id=3649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x43059294f10fa146) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={r3, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0x0) listen(r5, 0x1) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000000040)={0xa8, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x77, 0x8, "f28a9698c3c8f1cfdc92b7ca698e08de91c8718f3fee68be749497d69a2fb41a6ea6f9d1f344d26ee1754684d4efdc6f92df0da97b7265559fe8b8aae0c143b4ff3da8f8ab07df90ef5734d60ec1b74ab9e69c2fbf863ccaabb6df165e213715007203efe7ccabea2839a020822a060e841ea8"}]}, 0xa8}}, 0x4) 65.489419ms ago: executing program 2 (id=3650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x81000) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000940)=@newtaction={0x1098, 0x30, 0x9, 0x0, 0x0, {}, [{0x1084, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xcf}}]}, {0x4}, {0xc, 0xa, {0x1}}, {0xc, 0x9, {0x3b}}}}, @m_pedit={0x1030, 0x1e, 0x0, 0x0, {{0xa}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1098}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r2, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$netrom(r4, &(0x7f0000000040)={{}, [@netrom, @default, @default, @netrom, @netrom, @rose, @remote, @default]}, &(0x7f00000000c0)=0x48) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) 26.7136ms ago: executing program 6 (id=3651): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe48, 0x100, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x64, 0x0, 0x8, 0x0, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0xa, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@empty, 0xb7be}, {@broadcast, 0x2}]}]}}}}}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100"], 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) 0s ago: executing program 0 (id=3652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 200.783132][T13013] bridge_slave_1 (unregistering): left allmulticast mode [ 200.790392][T13013] bridge_slave_1 (unregistering): left promiscuous mode [ 200.798102][T13013] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.857263][T13015] IPVS: Error connecting to the multicast addr [ 200.925409][T13022] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 201.094833][T13030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1976'. [ 250.457063][T13063] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1984'. [ 250.512843][T13063] xt_policy: neither incoming nor outgoing policy selected [ 250.891855][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.904625][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.912874][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.920956][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.929167][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.948350][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.955815][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.963571][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.971791][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.983692][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.068521][T13081] lo speed is unknown, defaulting to 1000 [ 251.175718][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1990'. [ 251.219119][T13096] bridge8: entered promiscuous mode [ 251.243836][T13096] bridge8: entered allmulticast mode [ 251.267148][T13096] team0: Port device bridge8 added [ 251.282344][T13099] bridge0: port 2(team0) entered blocking state [ 251.303323][T13099] bridge0: port 2(team0) entered disabled state [ 251.309881][T13099] team0: entered allmulticast mode [ 251.341772][T13099] team_slave_0: entered allmulticast mode [ 251.352755][T13099] team_slave_1: entered allmulticast mode [ 251.358509][T13099] macvlan2: entered allmulticast mode [ 251.366221][T13099] team0: entered promiscuous mode [ 251.372160][T13099] team_slave_0: entered promiscuous mode [ 251.380635][T13099] team_slave_1: entered promiscuous mode [ 251.386757][T13099] macvlan2: entered promiscuous mode [ 251.403149][T13081] lo speed is unknown, defaulting to 1000 [ 251.424787][ T4605] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 251.527649][T13111] x_tables: unsorted underflow at hook 4 [ 251.695078][T13128] xt_hashlimit: size too large, truncated to 1048576 [ 251.855896][T13137] validate_nla: 4 callbacks suppressed [ 251.855913][T13137] netlink: 'syz.2.2002': attribute type 2 has an invalid length. [ 251.879421][T13137] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2002'. [ 251.895618][T13138] netlink: 'syz.2.2002': attribute type 2 has an invalid length. [ 251.910912][T13138] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2002'. [ 252.156804][T13081] chnl_net:caif_netlink_parms(): no params data found [ 252.326747][T13154] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2005'. [ 252.350091][T13081] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.359400][T13081] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.366787][T13081] bridge_slave_0: entered allmulticast mode [ 252.374789][T13081] bridge_slave_0: entered promiscuous mode [ 252.384554][T13156] netlink: 'syz.2.2006': attribute type 12 has an invalid length. [ 252.392558][T13156] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2006'. [ 252.405493][T13081] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.415556][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.430650][T13081] bridge_slave_1: entered allmulticast mode [ 252.447665][T13081] bridge_slave_1: entered promiscuous mode [ 252.529076][T13081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.551486][T13081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.569032][T13132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 252.647765][T13081] team0: Port device team_slave_0 added [ 252.666935][T13081] team0: Port device team_slave_1 added [ 252.756924][T13081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.765949][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.795403][T13081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.823892][T13081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.838813][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.888551][T13081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.031487][T13081] hsr_slave_0: entered promiscuous mode [ 253.043020][ T5153] Bluetooth: hci5: command tx timeout [ 253.058505][T13081] hsr_slave_1: entered promiscuous mode [ 253.078722][T13081] debugfs: 'hsr0' already exists in 'hsr' [ 253.103765][T13081] Cannot create hsr debugfs directory [ 253.104542][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 253.136406][T13201] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 253.158283][T13202] bond7: option xmit_hash_policy: invalid value (64) [ 253.170273][T13202] bond7 (unregistering): Released all slaves [ 253.309492][T13212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2020'. [ 253.883431][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 254.176702][T13081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.212157][T13081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.239825][T13081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.268130][T13081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.392148][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'. [ 254.535627][T13081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.556811][T13285] netlink: 'syz.4.2036': attribute type 19 has an invalid length. [ 254.593686][T13081] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.624127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.631284][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.657394][ T1931] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.664556][ T1931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.972198][T13307] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 255.126622][ T5153] Bluetooth: hci5: command tx timeout [ 255.138464][T13324] dvmrp8: left allmulticast mode [ 255.298069][T13081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.543034][T13351] __nla_validate_parse: 5 callbacks suppressed [ 255.543054][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 255.673721][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 255.772101][T13364] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 255.786641][T13368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.796243][T13364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.989178][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 256.001376][T13081] veth0_vlan: entered promiscuous mode [ 256.029216][T13081] veth1_vlan: entered promiscuous mode [ 256.110815][T13081] veth0_macvtap: entered promiscuous mode [ 256.138712][T13081] veth1_macvtap: entered promiscuous mode [ 256.188102][T13081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.197242][T13389] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2069'. [ 256.219584][T13081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.228741][T13391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2071'. [ 256.228982][T13394] x_tables: duplicate underflow at hook 3 [ 256.246435][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.261713][T13391] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 256.274043][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.283530][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.354267][T13391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.375051][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.415695][T13392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.425525][T13392] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 256.436743][T13392] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 256.598923][ T1931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.606970][T13413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2076'. [ 256.623350][ T1931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.651539][T13416] openvswitch: netlink: IP tunnel dst address not specified [ 256.664095][T13413] bond7 (unregistering): Released all slaves [ 256.809559][ T8447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.817700][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.833313][ T8447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.845766][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.906151][T13428] netdevsim netdevsim4 v: renamed from netdevsim0 [ 257.064009][T13436] tipc: Enabling of bearer rejected, already enabled [ 257.105837][T13436] tipc: Resetting bearer [ 257.130132][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2086'. [ 257.164876][T13447] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2086'. [ 257.174154][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 257.204799][ T5153] Bluetooth: hci5: command tx timeout [ 257.392930][T13459] netlink: 'syz.2.2090': attribute type 2 has an invalid length. [ 257.442259][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 257.796274][T13490] netlink: 'syz.0.2102': attribute type 83 has an invalid length. [ 257.802183][T13496] netlink: 'syz.1.2103': attribute type 14 has an invalid length. [ 257.823369][T13496] netlink: 'syz.1.2103': attribute type 13 has an invalid length. [ 258.463992][T13526] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20004 [ 258.798282][T13553] : entered promiscuous mode [ 258.842873][T13561] xt_hashlimit: size too large, truncated to 1048576 [ 258.905574][T13568] netlink: 'syz.2.2121': attribute type 28 has an invalid length. [ 258.937351][T13568] netlink: 'syz.2.2121': attribute type 3 has an invalid length. [ 258.995730][T13571] netlink: 'syz.5.2126': attribute type 1 has an invalid length. [ 259.082114][T13577] x_tables: duplicate underflow at hook 2 [ 259.234052][T13588] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 259.243705][T13588] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 259.283135][ T5153] Bluetooth: hci5: command tx timeout [ 259.376626][T13598] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 259.647132][T13619] tipc: Started in network mode [ 259.652031][T13619] tipc: Node identity 9ea6ea2768f7, cluster identity 4711 [ 259.667929][T13619] tipc: Enabled bearer , priority 0 [ 259.755440][T13628] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 259.771380][T13628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.782729][T13619] syzkaller0: entered promiscuous mode [ 259.788319][T13619] syzkaller0: entered allmulticast mode [ 259.795548][T13619] tipc: Resetting bearer [ 260.148225][T13655] netlink: 'syz.2.2157': attribute type 29 has an invalid length. [ 260.307642][ T8449] tipc: Resetting bearer [ 260.358180][T13609] tipc: Resetting bearer [ 260.667191][T13692] SET target dimension over the limit! [ 260.747519][T13694] unsupported nla_type 33542 [ 262.012674][T13609] tipc: Disabling bearer [ 262.029156][ T10] tipc: Node number set to 4132563495 [ 262.051976][T13709] erspan0: entered allmulticast mode [ 262.206597][T13718] tipc: Enabled bearer , priority 0 [ 262.234021][T13718] syzkaller0: entered promiscuous mode [ 262.249774][T13718] syzkaller0: entered allmulticast mode [ 262.276598][T13721] xt_addrtype: ipv6 does not support BROADCAST matching [ 262.285700][T13718] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 262.291048][T13725] __nla_validate_parse: 12 callbacks suppressed [ 262.291064][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2174'. [ 262.355713][T13732] tipc: Resetting bearer [ 262.419482][T13715] tipc: Resetting bearer [ 262.468940][T13715] tipc: Disabling bearer [ 262.562179][T13748] Bluetooth: hci2: Opcode 0x0c20 failed: -22 [ 262.717206][T13758] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.724768][T13759] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 262.781873][T13759] bond7: (slave gretap4): making interface the new active one [ 262.790657][T13759] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 262.801464][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 263.429186][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2192'. [ 263.471724][T13786] sock: sock_set_timeout: `syz.1.2192' (pid 13786) tries to set negative timeout [ 263.598385][T13796] bridge0: port 2(syz_tun) entered blocking state [ 263.626386][T13796] bridge0: port 2(syz_tun) entered disabled state [ 263.643788][T13796] syz_tun: entered allmulticast mode [ 263.653947][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2197'. [ 263.675602][T13796] syz_tun: entered promiscuous mode [ 263.713363][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 263.723683][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2197'. [ 263.883808][T13810] netlink: 'syz.1.2199': attribute type 7 has an invalid length. [ 263.953594][T13821] openvswitch: netlink: Unknown key attributes 2 [ 264.038896][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 264.094151][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 264.224050][T13839] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 264.232687][T13838] tipc: Enabling of bearer rejected, already enabled [ 264.257000][T13843] netlink: 'syz.0.2209': attribute type 23 has an invalid length. [ 264.273385][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2207'. [ 264.282518][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 264.361369][T13838] tipc: Resetting bearer [ 264.900461][T13889] tipc: Enabling of bearer rejected, failed to enable media [ 264.993726][T13894] xt_ecn: cannot match TCP bits for non-tcp packets [ 265.014135][T13894] macsec4: entered promiscuous mode [ 265.019373][T13894] bridge0: entered promiscuous mode [ 265.043118][T13894] macsec4: entered allmulticast mode [ 265.059869][T13894] bridge0: entered allmulticast mode [ 265.066841][T13894] bridge0: port 3(macsec4) entered blocking state [ 265.089964][T13894] bridge0: port 3(macsec4) entered disabled state [ 265.146262][T13894] bridge0: left allmulticast mode [ 265.161370][T13894] bridge0: left promiscuous mode [ 265.483382][T13928] pim6reg1: entered promiscuous mode [ 265.488720][T13928] pim6reg1: entered allmulticast mode [ 266.047867][T13955] block nbd0: not configured, cannot reconfigure [ 266.327985][T13977] bridge6: entered promiscuous mode [ 266.335084][T13977] bridge6: entered allmulticast mode [ 266.429009][T13980] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.541674][T13980] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.610403][T13980] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.679968][T13980] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.781333][T14012] netlink: 'syz.0.2258': attribute type 23 has an invalid length. [ 266.788858][ T3470] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.813306][ T3470] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.840424][ T8449] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.849693][T14012] netlink: 'syz.0.2258': attribute type 23 has an invalid length. [ 266.878760][ T3470] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.938252][T14016] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.005110][T14020] netlink: 'syz.5.2259': attribute type 5 has an invalid length. [ 267.026272][T14020] geneve2: entered promiscuous mode [ 267.032005][T14020] geneve2: entered allmulticast mode [ 267.055939][T14016] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.070634][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 267.079913][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 267.496242][T14034] xt_policy: output policy not valid in PREROUTING and INPUT [ 267.664768][T14046] __nla_validate_parse: 8 callbacks suppressed [ 267.664786][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 267.682280][T14046] netlink: zone id is out of range [ 267.688018][T14046] netlink: zone id is out of range [ 267.693579][T14046] netlink: zone id is out of range [ 267.698945][T14046] netlink: zone id is out of range [ 267.704802][T14046] netlink: zone id is out of range [ 267.710664][T14046] netlink: zone id is out of range [ 267.716376][T14046] netlink: zone id is out of range [ 267.759460][T14050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.835484][T14053] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2272'. [ 268.206083][T14087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2282'. [ 268.310036][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 268.326607][T14093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2285'. [ 268.461538][ T8449] nci: nci_rsp_packet: unknown rsp opcode 0x805 [ 268.759845][T14016] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.770317][T14016] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 268.839053][T14016] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.849557][T14016] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 268.931329][ T3470] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 268.939728][ T3470] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.956148][ T3470] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 268.964568][ T3470] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.986762][ T8448] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 268.995189][ T8448] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.029153][ T3470] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 269.040945][ T3470] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.108295][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2290'. [ 269.122265][T14108] wg1: entered promiscuous mode [ 269.127660][T14108] wg1: entered allmulticast mode [ 269.435894][T14131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.670542][T14151] netlink: 'syz.4.2301': attribute type 13 has an invalid length. [ 269.722775][T14151] macvtap0: entered allmulticast mode [ 269.733751][T14151] macvtap0: refused to change device tx_queue_len [ 269.825129][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 269.969723][T14181] netem: change failed [ 269.994299][T14187] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 270.224237][T14201] netlink: 576 bytes leftover after parsing attributes in process `syz.5.2315'. [ 270.297533][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2317'. [ 270.546622][T14229] net_ratelimit: 48 callbacks suppressed [ 270.546641][T14229] openvswitch: netlink: EtherType 50a is less than min 600 [ 270.599600][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2323'. [ 270.611540][T14230] tipc: Enabled bearer , priority 0 [ 270.689254][T14230] syzkaller0: entered promiscuous mode [ 270.719566][T14230] syzkaller0: entered allmulticast mode [ 270.743754][T14230] tipc: Resetting bearer [ 270.788314][T14228] tipc: Resetting bearer [ 270.842760][T14228] tipc: Disabling bearer [ 271.110549][T14271] netlink: 'syz.0.2338': attribute type 4 has an invalid length. [ 271.124209][T14271] openvswitch: netlink: IP tunnel dst address not specified [ 271.323434][T14278] netlink: 'syz.0.2340': attribute type 20 has an invalid length. [ 271.331661][T14278] netlink: 'syz.0.2340': attribute type 20 has an invalid length. [ 271.580692][T14303] macvlan0: entered promiscuous mode [ 271.902716][T14326] 8021q: VLANs not supported on gre0 [ 271.980690][T14330] xfrm2: entered allmulticast mode [ 272.030816][T14335] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 272.130928][T14337] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 272.144400][T14337] bond8 (unregistering): Released all slaves [ 272.170046][T14339] netlink: 'syz.2.2357': attribute type 13 has an invalid length. [ 272.233170][T14339] netlink: 'syz.2.2357': attribute type 3 has an invalid length. [ 272.338894][T14348] vlan2: entered promiscuous mode [ 272.346139][T14348] geneve1: entered promiscuous mode [ 272.354055][T14348] vlan2: entered allmulticast mode [ 272.359731][T14348] geneve1: entered allmulticast mode [ 272.540952][T14365] vlan3: entered promiscuous mode [ 272.546258][T14365] gretap0: entered promiscuous mode [ 272.659894][T14376] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 272.808924][T14386] netlink: 'syz.4.2371': attribute type 83 has an invalid length. [ 272.823173][T14389] __nla_validate_parse: 10 callbacks suppressed [ 272.823192][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 272.840470][T14389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2372'. [ 272.937471][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 273.164330][T14410] syzkaller0: entered promiscuous mode [ 273.169961][T14410] syzkaller0: entered allmulticast mode [ 273.252193][T14410] netlink: 'syz.0.2379': attribute type 2 has an invalid length. [ 273.269327][T14410] : entered promiscuous mode [ 273.318317][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 273.472790][T14432] tunl0: entered promiscuous mode [ 273.482996][T14432] netlink: 'syz.0.2384': attribute type 3 has an invalid length. [ 273.501834][T14432] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2384'. [ 273.575671][ T5834] lo speed is unknown, defaulting to 1000 [ 273.581627][ T5834] syz2: Port: 1 Link ACTIVE [ 273.650071][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 273.749381][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 273.808728][T14458] macvtap1: entered allmulticast mode [ 273.815550][T14458] veth0_macvtap: entered allmulticast mode [ 273.955260][T14465] veth3: entered promiscuous mode [ 274.208762][T14477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2395'. [ 274.366232][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2398'. [ 274.405162][T14489] bond1: option xmit_hash_policy: invalid value (64) [ 274.414498][T14489] bond1 (unregistering): Released all slaves [ 274.628917][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2400'. [ 275.093214][T14512] validate_nla: 4 callbacks suppressed [ 275.093232][T14512] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 275.386966][T14525] pim6reg: entered allmulticast mode [ 275.413713][T14525] pim6reg: left allmulticast mode [ 275.607483][T14542] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.637414][T14546] nbd: nbd64 already in use [ 275.645348][T14545] block nbd64: NBD_DISCONNECT [ 275.793269][T14557] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 275.850346][T14545] udevd[14545]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 275.992465][T14563] bridge2: entered promiscuous mode [ 275.997703][T14563] bridge2: entered allmulticast mode [ 276.014122][T14563] team0: Port device bridge2 added [ 276.130996][T14575] wireguard1: entered promiscuous mode [ 276.139524][T14575] wireguard1: entered allmulticast mode [ 276.366201][T14593] syzkaller1: entered promiscuous mode [ 276.380865][T14593] syzkaller1: entered allmulticast mode [ 276.447118][T14599] netlink: 'syz.4.2425': attribute type 23 has an invalid length. [ 276.878419][T14628] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 277.360983][T14660] netlink: 'syz.0.2442': attribute type 13 has an invalid length. [ 277.375694][T14660] netlink: 'syz.0.2442': attribute type 58 has an invalid length. [ 277.436115][T14662] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 277.486789][T14662] 8021q: adding VLAN 0 to HW filter on device bond8 [ 277.913684][T14670] __nla_validate_parse: 9 callbacks suppressed [ 277.913702][T14670] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2445'. [ 277.931104][T14670] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2445'. [ 277.941457][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2445'. [ 278.065136][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.072822][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.103398][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2445'. [ 278.143031][T14676] netlink: 'syz.2.2446': attribute type 12 has an invalid length. [ 278.169947][T14670] wg1: left promiscuous mode [ 278.178433][T14670] wg1: left allmulticast mode [ 278.256557][T14670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.275102][T14670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.519801][T14670] geneve2: left promiscuous mode [ 278.527782][T14670] geneve2: left allmulticast mode [ 278.539399][T14670] veth0_macvtap: left allmulticast mode [ 278.545595][T14670] macvtap1: left allmulticast mode [ 278.553052][T14670] bridge2: left promiscuous mode [ 278.558138][T14670] bridge2: left allmulticast mode [ 278.574007][ T3488] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 278.587605][ T3488] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 278.647671][ T3488] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 278.663536][ T3488] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 278.701266][ T3488] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 278.732483][ T3488] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 278.740909][ T3488] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 278.750812][ T3488] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.125348][T14697] vlan1: left allmulticast mode [ 309.128298][T14700] xt_TCPMSS: Only works on TCP SYN packets [ 309.130290][T14697] veth0_vlan: left allmulticast mode [ 309.192621][T14697] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 309.304690][T14711] syzkaller1: entered promiscuous mode [ 309.313201][T14711] syzkaller1: entered allmulticast mode [ 309.349432][T14713] geneve2: entered promiscuous mode [ 309.354868][T14713] geneve2: entered allmulticast mode [ 309.405559][ T1931] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.425025][ T1931] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.439939][ T1931] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.473186][T14717] syz.2.2458: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.477491][ T1931] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.527173][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.2.2458 Not tainted syzkaller #0 PREEMPT(full) [ 309.527202][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.527217][T14717] Call Trace: [ 309.527228][T14717] [ 309.527237][T14717] dump_stack_lvl+0x189/0x250 [ 309.527275][T14717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.527296][T14717] ? __pfx__printk+0x10/0x10 [ 309.527319][T14717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.527346][T14717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.527374][T14717] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 309.527401][T14717] warn_alloc+0x214/0x310 [ 309.527422][T14717] ? stack_depot_save_flags+0x40/0x850 [ 309.527447][T14717] ? __pfx_warn_alloc+0x10/0x10 [ 309.527471][T14717] ? kasan_save_track+0x3e/0x80 [ 309.527492][T14717] ? __kasan_kmalloc+0x93/0xb0 [ 309.527515][T14717] ? xsk_setsockopt+0x4dc/0x8d0 [ 309.527532][T14717] ? do_sock_setsockopt+0x17c/0x1b0 [ 309.527555][T14717] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 309.527575][T14717] ? do_syscall_64+0xfa/0xf80 [ 309.527593][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.527618][T14717] __vmalloc_node_range_noprof+0x125/0x12d0 [ 309.527668][T14717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.527694][T14717] ? __kasan_kmalloc+0x93/0xb0 [ 309.527727][T14717] vmalloc_user_noprof+0xad/0xf0 [ 309.527750][T14717] ? xskq_create+0xbf/0x170 [ 309.527770][T14717] xskq_create+0xbf/0x170 [ 309.527793][T14717] xsk_init_queue+0xb0/0x110 [ 309.527815][T14717] xsk_setsockopt+0x4dc/0x8d0 [ 309.527836][T14717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.527857][T14717] ? __pfx_aa_sk_perm+0x10/0x10 [ 309.527885][T14717] ? aa_sock_opt_perm+0xff/0x1a0 [ 309.527906][T14717] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 309.527929][T14717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.527950][T14717] do_sock_setsockopt+0x17c/0x1b0 [ 309.527979][T14717] __x64_sys_setsockopt+0x13f/0x1b0 [ 309.528009][T14717] do_syscall_64+0xfa/0xf80 [ 309.528032][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.528049][T14717] ? clear_bhb_loop+0x60/0xb0 [ 309.528071][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.528087][T14717] RIP: 0033:0x7f959198f749 [ 309.528110][T14717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.528126][T14717] RSP: 002b:00007f959286c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.528146][T14717] RAX: ffffffffffffffda RBX: 00007f9591be5fa0 RCX: 00007f959198f749 [ 309.528166][T14717] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 309.528177][T14717] RBP: 00007f9591a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 309.528188][T14717] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.528200][T14717] R13: 00007f9591be6038 R14: 00007f9591be5fa0 R15: 00007ffefb3a6038 [ 309.528233][T14717] [ 309.528246][T14717] Mem-Info: [ 309.588841][T14720] syzkaller1: entered promiscuous mode [ 309.638084][T14717] active_anon:5209 inactive_anon:0 isolated_anon:0 [ 309.638084][T14717] active_file:2958 inactive_file:39979 isolated_file:0 [ 309.638084][T14717] unevictable:768 dirty:35 writeback:0 [ 309.638084][T14717] slab_reclaimable:13023 slab_unreclaimable:126354 [ 309.638084][T14717] mapped:39285 shmem:1368 pagetables:1275 [ 309.638084][T14717] sec_pagetables:0 bounce:0 [ 309.638084][T14717] kernel_misc_reclaimable:0 [ 309.638084][T14717] free:1273935 free_pcp:15845 free_cma:0 [ 309.689587][T14729] netlink: 'syz.4.2459': attribute type 13 has an invalid length. [ 309.704243][T14720] syzkaller1: entered allmulticast mode [ 309.722798][T14717] Node 0 active_anon:21036kB inactive_anon:0kB active_file:11832kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157140kB dirty:140kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13780kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.767717][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.781279][T14717] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.792618][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.793515][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.802871][T14717] Node 0 [ 309.812164][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.817925][T14717] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.824376][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.848163][T14717] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 310.042272][T14717] Node 0 DMA32 free:1188848kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21056kB inactive_anon:0kB active_file:11832kB inactive_file:159728kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:41832kB local_pcp:22648kB free_cma:0kB [ 310.083099][T14717] lowmem_reserve[]: 0 0 0 0 0 [ 310.088164][T14717] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.118702][T14717] lowmem_reserve[]: 0 0 0 0 0 [ 310.124203][T14717] Node 1 Normal free:3891572kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:10176kB free_cma:0kB [ 310.166174][T14717] lowmem_reserve[]: 0 0 0 0 0 [ 310.181203][T14717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.202256][T14725] lo speed is unknown, defaulting to 1000 [ 310.232453][T14717] Node 0 DMA32: 878*4kB (UME) 247*8kB (ME) 263*16kB (M) 61*32kB (UM) 84*64kB (UM) 282*128kB (UME) 281*256kB (UME) 261*512kB (UME) 238*1024kB (U) 5*2048kB (UME) 165*4096kB (UM) = 1188480kB [ 310.290192][T14742] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2463'. [ 310.312471][T14717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.363965][T14717] Node 1 Normal: 171*4kB (UE) 57*8kB (UME) 42*16kB (UME) 79*32kB (UME) 28*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891572kB [ 310.432636][T14717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.461678][T14717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.484991][T14717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.502550][T14717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.532246][T14717] 44805 total pagecache pages [ 310.542421][T14717] 0 pages in swap cache [ 310.547126][T14717] Free swap = 124996kB [ 310.551331][T14717] Total swap = 124996kB [ 310.563066][T14717] 2097051 pages RAM [ 310.566970][T14717] 0 pages HighMem/MovableOnly [ 310.571652][T14717] 424280 pages reserved [ 310.592028][T14717] 0 pages cma reserved [ 310.706915][T14725] lo speed is unknown, defaulting to 1000 [ 310.875423][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 311.003518][T14770] bond1: option xmit_hash_policy: invalid value (64) [ 311.036522][T14770] bond1 (unregistering): Released all slaves [ 311.512693][T14805] netlink: 'syz.5.2481': attribute type 8 has an invalid length. [ 311.547682][T14805] netlink: 'syz.5.2481': attribute type 8 has an invalid length. [ 311.608562][T14807] syzkaller0: entered promiscuous mode [ 311.632507][T14807] syzkaller0: entered allmulticast mode [ 311.645544][T14725] chnl_net:caif_netlink_parms(): no params data found [ 311.703814][T14818] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2486'. [ 311.715781][T14807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.734753][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2486'. [ 311.878845][T14725] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.887179][T14725] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.896080][T14725] bridge_slave_0: entered allmulticast mode [ 311.904346][T14725] bridge_slave_0: entered promiscuous mode [ 311.915322][T14725] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.924497][T14725] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.925784][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 311.931803][T14725] bridge_slave_1: entered allmulticast mode [ 311.949317][T14725] bridge_slave_1: entered promiscuous mode [ 311.958554][T14832] netlink: 'syz.0.2491': attribute type 21 has an invalid length. [ 311.976766][T14832] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2491'. [ 312.001335][T14725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.015569][T14725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.083866][ T5153] Bluetooth: hci6: command tx timeout [ 312.093734][T14725] team0: Port device team_slave_0 added [ 312.103595][T14725] team0: Port device team_slave_1 added [ 312.127459][T14838] veth0_to_bridge: entered promiscuous mode [ 312.160542][T14725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.178126][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.206063][T14725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.236944][T14837] veth0_to_bridge: left promiscuous mode [ 312.244339][T14725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.251509][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.278680][T14725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.312797][T14845] netlink: 'syz.0.2496': attribute type 1 has an invalid length. [ 312.320816][T14845] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2496'. [ 312.350381][T14843] macvlan2 (unregistering): left promiscuous mode [ 312.360487][T14843] macvlan2 (unregistering): left allmulticast mode [ 312.373712][T14843] team0: Port device macvlan2 removed [ 312.411721][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2497'. [ 312.478502][T14725] hsr_slave_0: entered promiscuous mode [ 312.490748][T14725] hsr_slave_1: entered promiscuous mode [ 312.497864][T14725] debugfs: 'hsr0' already exists in 'hsr' [ 312.503782][T14725] Cannot create hsr debugfs directory [ 312.633767][T14853] syzkaller1: entered promiscuous mode [ 312.663063][T14853] syzkaller1: entered allmulticast mode [ 313.142054][T14878] SET target dimension over the limit! [ 313.300253][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 313.552880][T14891] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 313.611042][T14725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.700124][T14725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.777606][T14725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.876691][T14893] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 313.891227][T14893] netem: change failed [ 313.903167][T14725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.908612][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 314.074308][T14917] team0: Caught tx_queue_len zero misconfig [ 314.080500][T14917] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 314.163625][ T5153] Bluetooth: hci6: command tx timeout [ 314.170610][T14921] netlink: 'syz.0.2518': attribute type 16 has an invalid length. [ 314.193453][T14921] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 314.211021][T14725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.263552][T14922] tipc: Enabled bearer , priority 0 [ 314.290983][T14725] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.323119][T14928] veth7: entered promiscuous mode [ 314.386908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.394231][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.441552][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.448809][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.726465][T14955] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 314.833778][T14725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.957867][T14975] Bluetooth: MGMT ver 1.23 [ 315.015777][T14918] tipc: Disabling bearer [ 315.297818][T14989] __nla_validate_parse: 10 callbacks suppressed [ 315.297837][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 315.332721][T14989] netlink: 'syz.4.2537': attribute type 30 has an invalid length. [ 315.341145][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2537'. [ 315.376984][T14995] openvswitch: netlink: Message has 592 unknown bytes. [ 315.392719][T14995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.461343][T14998] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2540'. [ 315.488728][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'. [ 315.655406][T15009] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2542'. [ 316.245772][ T5153] Bluetooth: hci6: command tx timeout [ 316.894930][T15009] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 316.895836][T15011] syzkaller0: entered promiscuous mode [ 316.920749][T15011] syzkaller0: entered allmulticast mode [ 317.099426][T15026] netlink: 'syz.5.2546': attribute type 12 has an invalid length. [ 317.111958][T15026] netlink: 'syz.5.2546': attribute type 29 has an invalid length. [ 317.120187][T15026] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2546'. [ 317.140471][T15026] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2546'. [ 317.156739][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2547'. [ 317.168618][T15026] x_tables: duplicate underflow at hook 1 [ 317.199010][T14725] veth0_vlan: entered promiscuous mode [ 317.231100][T14725] veth1_vlan: entered promiscuous mode [ 317.278527][T15037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2549'. [ 317.366988][T14725] veth0_macvtap: entered promiscuous mode [ 317.400670][T14725] veth1_macvtap: entered promiscuous mode [ 317.480509][T14725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.537186][T14725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.562243][ T8452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.584041][ T8452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.637610][ T2129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.650043][ T2129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.834112][ T3969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.850881][ T3969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.930155][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.952138][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.115548][T15078] netlink: 'syz.6.2451': attribute type 11 has an invalid length. [ 318.161295][ T10] IPVS: starting estimator thread 0... [ 318.187271][T15077] netlink: 'syz.5.2558': attribute type 11 has an invalid length. [ 318.214769][T15077] netlink: 153568 bytes leftover after parsing attributes in process `syz.5.2558'. [ 318.272892][T15079] IPVS: using max 38 ests per chain, 91200 per kthread [ 318.323408][ T5153] Bluetooth: hci6: command tx timeout [ 318.456444][T15088] syzkaller0: entered promiscuous mode [ 318.462102][T15088] syzkaller0: entered allmulticast mode [ 318.493341][T15091] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 318.500127][T15091] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 318.604738][T15094] netlink: 'syz.5.2564': attribute type 2 has an invalid length. [ 318.934981][T15114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.977278][T15116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.294382][T15134] syzkaller0: entered promiscuous mode [ 319.307186][T15134] syzkaller0: entered allmulticast mode [ 319.331829][T15134] netlink: 'syz.6.2575': attribute type 7 has an invalid length. [ 319.474207][T15143] vxcan0: entered allmulticast mode [ 319.966497][T15178] netlink: 'syz.5.2587': attribute type 10 has an invalid length. [ 320.001748][T15178] team0: Port device geneve0 added [ 320.017295][T15181] pim6reg: entered allmulticast mode [ 320.025625][T15178] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 320.035735][ T2129] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.063314][ T2129] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.081315][ T2129] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.099943][ T2129] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.304370][T15205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.591003][T15222] __nla_validate_parse: 13 callbacks suppressed [ 320.591023][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 320.629016][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2600'. [ 320.699636][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 320.773169][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 320.966311][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2601'. [ 321.101993][T15246] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2610'. [ 321.333228][T15259] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2612'. [ 321.404228][T15260] lo speed is unknown, defaulting to 1000 [ 321.935412][T15278] bond9: ARP target 1.0.0.0 is already present [ 321.941618][T15278] bond9: option arp_ip_target: invalid value (1) [ 321.961623][T15278] bond9 (unregistering): Released all slaves [ 321.997620][T15260] lo speed is unknown, defaulting to 1000 [ 322.423916][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 322.444798][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 322.536907][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 346.888516][T15340] __nla_validate_parse: 5 callbacks suppressed [ 346.888535][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 346.931032][T15354] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 346.981377][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2635'. [ 347.032797][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2635'. [ 347.037200][T15354] bond9: entered promiscuous mode [ 347.047376][T15365] netlink: 'syz.2.2640': attribute type 17 has an invalid length. [ 347.047474][T15354] bond9: entered allmulticast mode [ 347.061091][T15354] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.069125][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 347.078345][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'. [ 347.103647][T15363] macvlan2: entered promiscuous mode [ 347.109040][T15363] macvlan2: entered allmulticast mode [ 347.116898][T15363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 347.146237][T15360] sit0: entered promiscuous mode [ 347.158103][T15360] netlink: 'syz.6.2635': attribute type 1 has an invalid length. [ 347.172843][T15360] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2635'. [ 347.355349][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 347.368082][T15378] netlink: 'syz.0.2642': attribute type 11 has an invalid length. [ 347.377762][T15378] netlink: 'syz.0.2642': attribute type 11 has an invalid length. [ 347.386313][T15378] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2642'. [ 347.421464][T15382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2646'. [ 347.434814][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2646'. [ 347.449710][T15378] siw: device registration error -23 [ 347.639736][T15400] netlink: 'syz.5.2650': attribute type 6 has an invalid length. [ 347.851719][T15413] sctp: [Deprecated]: syz.0.2655 (pid 15413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.851719][T15413] Use struct sctp_sack_info instead [ 348.078892][T15432] syz_tun: entered allmulticast mode [ 348.115640][T15431] syz_tun: left allmulticast mode [ 348.126761][T15435] IPv6: NLM_F_REPLACE set, but no existing node found! [ 348.256015][T15442] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 348.310676][T15451] netlink: 'syz.6.2671': attribute type 1 has an invalid length. [ 348.459193][T15451] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 348.658350][T15482] syz_tun: entered allmulticast mode [ 348.737505][T15480] syz_tun: left allmulticast mode [ 348.946344][T15508] netlink: 'syz.4.2686': attribute type 21 has an invalid length. [ 348.975726][T15511] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 349.479487][T15544] bridge8: entered promiscuous mode [ 349.487929][T15544] bridge8: entered allmulticast mode [ 349.561332][T15543] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 349.589705][T15546] pim6reg1: entered promiscuous mode [ 349.600591][T15546] pim6reg1: entered allmulticast mode [ 349.633513][T15554] veth0: entered promiscuous mode [ 349.642101][T15550] xt_hashlimit: size too large, truncated to 1048576 [ 349.852196][T15549] veth0: left promiscuous mode [ 350.014949][T15571] bond_slave_0: Caught tx_queue_len zero misconfig [ 350.265887][T15592] syz_tun: entered allmulticast mode [ 350.307483][T15591] syz_tun: left allmulticast mode [ 350.411779][T15606] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 350.421069][T15609] netlink: 'syz.5.2719': attribute type 1 has an invalid length. [ 350.449823][T15607] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 350.538332][T15618] bond0: Error: Cannot enslave bond to itself. [ 351.710329][T15674] xt_hashlimit: size too large, truncated to 1048576 [ 352.108122][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.118274][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.129396][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.167907][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.181266][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.194416][ T5835] syz_tun (unregistering): left allmulticast mode [ 352.225157][T15691] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 352.286626][T15691] __nla_validate_parse: 22 callbacks suppressed [ 352.286644][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 352.351559][T15684] lo speed is unknown, defaulting to 1000 [ 352.466794][T15709] macsec0: entered promiscuous mode [ 352.483541][T15709] macsec0: entered allmulticast mode [ 352.753814][T15712] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 352.829662][T15684] lo speed is unknown, defaulting to 1000 [ 352.968358][T15731] netlink: 'syz.0.2757': attribute type 30 has an invalid length. [ 353.017805][T15731] bond9: option arp_missed_max: invalid value (0) [ 353.024978][T15731] bond9: option arp_missed_max: allowed values 1 - 255 [ 353.045822][T15731] bond9 (unregistering): Released all slaves [ 353.090634][T15737] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2760'. [ 353.219078][T15746] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2762'. [ 353.228657][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 353.238158][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 353.363141][T15749] syz_tun: entered allmulticast mode [ 353.397182][T15748] syz_tun: left allmulticast mode [ 353.478089][T15684] chnl_net:caif_netlink_parms(): no params data found [ 353.625520][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 353.634947][T15759] netlink: 'syz.6.2767': attribute type 18 has an invalid length. [ 353.646124][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2767'. [ 353.688296][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 353.717774][T15759] netlink: 'syz.6.2767': attribute type 18 has an invalid length. [ 353.733212][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2767'. [ 353.753294][ T8446] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.770744][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.778929][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.786320][T15684] bridge_slave_0: entered allmulticast mode [ 353.798629][T15684] bridge_slave_0: entered promiscuous mode [ 353.811606][ T8446] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.835535][ T8446] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.858422][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.866983][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.879484][T15684] bridge_slave_1: entered allmulticast mode [ 353.900175][T15684] bridge_slave_1: entered promiscuous mode [ 353.910618][ T8446] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.066140][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.078822][T15789] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2775'. [ 354.096735][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.109808][T15786] can: request_module (can-proto-0) failed. [ 354.197471][T15684] team0: Port device team_slave_0 added [ 354.216827][T15684] team0: Port device team_slave_1 added [ 354.242515][ T5153] Bluetooth: hci3: command tx timeout [ 354.336038][T15810] xt_ecn: cannot match TCP bits for non-tcp packets [ 354.367027][T15808] netlink: 'syz.0.2779': attribute type 2 has an invalid length. [ 354.375935][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.386046][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.396791][T15815] netlink: 'syz.6.2781': attribute type 62 has an invalid length. [ 354.412795][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.441070][T15808] 9: entered promiscuous mode [ 354.449452][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.464671][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.517698][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.574326][T15818] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 354.635092][T15684] hsr_slave_0: entered promiscuous mode [ 354.647039][T15684] hsr_slave_1: entered promiscuous mode [ 354.656082][T15684] debugfs: 'hsr0' already exists in 'hsr' [ 354.663529][T15684] Cannot create hsr debugfs directory [ 354.715828][T15826] syzkaller1: entered promiscuous mode [ 354.721458][T15826] syzkaller1: entered allmulticast mode [ 354.916234][T15684] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.928598][T15684] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.954178][T15839] tunl0: left promiscuous mode [ 354.959109][T15839] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 355.000728][T15684] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.010718][T15684] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.039471][T15839] syzkaller1: entered promiscuous mode [ 355.045306][T15839] syzkaller1: entered allmulticast mode [ 355.087125][T15684] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.098706][T15684] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.155621][T15684] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.180269][T15684] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.552604][T15684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.573337][T15684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.595629][T15684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.620673][T15684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.909217][T15684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.964600][T15684] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.981449][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.988650][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.035460][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.042713][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.322605][ T5153] Bluetooth: hci3: command tx timeout [ 356.554727][T15684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.666210][T15684] veth0_vlan: entered promiscuous mode [ 356.709511][T15684] veth1_vlan: entered promiscuous mode [ 356.761952][T15961] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 356.771096][T15961] team0: Device macvtap2 is already an upper device of the team interface [ 356.820163][T15970] x_tables: duplicate underflow at hook 1 [ 356.881600][T15684] veth0_macvtap: entered promiscuous mode [ 356.914086][T15684] veth1_macvtap: entered promiscuous mode [ 356.943873][T15979] veth0: entered promiscuous mode [ 356.962282][T15979] veth0: left promiscuous mode [ 356.994060][T15977] bridge_slave_1: left allmulticast mode [ 357.002038][T15977] bridge_slave_1: left promiscuous mode [ 357.019004][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.071431][T15684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.091347][T15684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.134568][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.144585][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.166025][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.181209][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.331053][ T8449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.361211][ T8449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.424922][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.436951][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.539394][T16008] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 357.560533][T16013] sctp: [Deprecated]: syz.6.2840 (pid 16013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.560533][T16013] Use struct sctp_sack_info instead [ 357.583807][T16013] veth0: entered promiscuous mode [ 357.591196][T16001] netlink: 'syz.6.2840': attribute type 1 has an invalid length. [ 357.603404][T16001] __nla_validate_parse: 10 callbacks suppressed [ 357.603422][T16001] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2840'. [ 357.642777][T16001] NCSI netlink: No device for ifindex 0 [ 357.713924][T16018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2844'. [ 358.065759][ T5834] IPVS: starting estimator thread 0... [ 358.170395][T16034] IPVS: using max 33 ests per chain, 79200 per kthread [ 358.207049][T15994] veth0: left promiscuous mode [ 358.209568][T16038] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2852'. [ 358.297744][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 358.338097][T16044] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2854'. [ 358.339674][T16038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.364029][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 358.394604][T16038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.402617][ T5153] Bluetooth: hci3: command tx timeout [ 358.405543][T16038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.436535][T16038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.452856][T16048] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 358.473618][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.490955][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.499417][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.513528][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.521193][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.600334][T16048] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.645838][T16052] bond9: (slave veth9): Enslaving as an active interface with a down link [ 358.661117][T16044] veth0_to_bond: left allmulticast mode [ 358.676148][T16044] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 358.711245][T16048] bond9: entered promiscuous mode [ 358.731126][T16048] bond9: entered allmulticast mode [ 358.801752][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2860'. [ 358.849620][T16049] lo speed is unknown, defaulting to 1000 [ 358.967103][T16076] netlink: 'syz.5.2862': attribute type 12 has an invalid length. [ 359.116002][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 359.165631][ T1007] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.186561][T16049] lo speed is unknown, defaulting to 1000 [ 359.228572][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.298746][ T3470] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.349019][ T50] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.366134][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 359.389785][ T8449] team0: left allmulticast mode [ 359.398376][ T8449] team_slave_0: left allmulticast mode [ 359.404671][ T8449] team_slave_1: left allmulticast mode [ 359.410260][ T8449] team0: left promiscuous mode [ 359.415280][ T8449] team_slave_0: left promiscuous mode [ 359.420955][ T8449] team_slave_1: left promiscuous mode [ 359.429002][ T8449] bridge0: port 2(team0) entered disabled state [ 359.441675][ T8449] bridge_slave_0: left allmulticast mode [ 359.454020][ T8449] bridge_slave_0: left promiscuous mode [ 359.462496][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.656558][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 359.680560][T16111] netlink: 'syz.6.2872': attribute type 15 has an invalid length. [ 359.897397][ T8449] bond1 (unregistering): (slave geneve2): Releasing active interface [ 360.308612][ T8449] team0: Port device bridge8 removed [ 360.482754][ T5153] Bluetooth: hci3: command tx timeout [ 360.564457][ T5153] Bluetooth: hci4: command tx timeout [ 360.575797][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.585912][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.595905][ T8449] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 360.607236][ T8449] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 360.617169][ T8449] bond0 (unregistering): Released all slaves [ 360.703982][ T8449] bond1 (unregistering): Released all slaves [ 360.789359][ T8449] bond2 (unregistering): Released all slaves [ 360.801498][ T8449] bond3 (unregistering): Released all slaves [ 360.813903][ T8449] bond4 (unregistering): Released all slaves [ 360.826696][ T8449] bond5 (unregistering): Released all slaves [ 360.841314][ T8449] bond6 (unregistering): Released all slaves [ 360.855881][ T8449] bond7 (unregistering): Released all slaves [ 360.870247][ T8449] bond8 (unregistering): Released all slaves [ 360.974385][ T8449] bond9 (unregistering): Released all slaves [ 360.995021][T16100] macvlan2: entered promiscuous mode [ 361.006776][T16106] macvlan3: entered promiscuous mode [ 361.025161][T16108] vlan2: entered allmulticast mode [ 361.181315][ T8449] : left promiscuous mode [ 361.218923][T16120] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 361.317005][ T8449] tipc: Disabling bearer [ 361.364370][ T8449] tipc: Left network mode [ 361.429873][ T1931] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.447678][ T1931] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.537339][ T4605] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.568761][ T4605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.588133][T16143] netlink: 'syz.2.2883': attribute type 7 has an invalid length. [ 361.599571][T16143] netlink: 'syz.2.2883': attribute type 8 has an invalid length. [ 361.714104][T16147] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 361.754679][T16141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.767855][T16141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.778680][T16141] bond0 (unregistering): Released all slaves [ 361.802926][ T4605] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.811324][ T4605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.971550][ T3488] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.992728][ T3488] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.017615][T16163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.153006][T16170] netlink: 'syz.6.2889': attribute type 17 has an invalid length. [ 362.186989][T16170] netlink: 'syz.6.2889': attribute type 17 has an invalid length. [ 362.207633][T16170] netlink: 'syz.6.2889': attribute type 17 has an invalid length. [ 362.240503][T16049] chnl_net:caif_netlink_parms(): no params data found [ 362.282768][T16170] netlink: 'syz.6.2889': attribute type 17 has an invalid length. [ 362.294802][T16169] syzkaller1: entered promiscuous mode [ 362.300411][T16169] syzkaller1: entered allmulticast mode [ 362.563604][ T5153] Bluetooth: hci3: command tx timeout [ 362.615112][T16170] __nla_validate_parse: 65 callbacks suppressed [ 362.615126][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2889'. [ 362.631005][T16170] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2889'. [ 362.651742][ T5153] Bluetooth: hci4: command tx timeout [ 362.674631][T16190] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 362.678258][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2896'. [ 362.695364][T16190] bond10 (unregistering): Released all slaves [ 362.734956][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2889'. [ 362.735651][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.751573][T16170] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2889'. [ 362.757201][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.768606][T16049] bridge_slave_0: entered allmulticast mode [ 362.784353][T16049] bridge_slave_0: entered promiscuous mode [ 362.853197][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2896'. [ 362.888285][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.924012][T16049] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.946037][T16049] bridge_slave_1: entered allmulticast mode [ 362.967678][T16049] bridge_slave_1: entered promiscuous mode [ 362.999693][T16200] veth0: entered promiscuous mode [ 363.114241][T16200] veth0: left promiscuous mode [ 363.194479][T16049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.253071][T16049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.361162][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2905'. [ 363.383812][T16228] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2905'. [ 363.429666][ T8449] hsr_slave_0: left promiscuous mode [ 363.437188][ T8449] hsr_slave_1: left promiscuous mode [ 363.445851][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.455982][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.524762][ T8449] pimreg3 (unregistering): left allmulticast mode [ 363.975401][ T8449] team0 (unregistering): Port device team_slave_1 removed [ 364.019142][ T8449] team0 (unregistering): Port device team_slave_0 removed [ 364.304140][T16049] team0: Port device team_slave_0 added [ 364.312951][ T5916] lo speed is unknown, defaulting to 1000 [ 364.317835][T16049] team0: Port device team_slave_1 added [ 364.330962][ T5916] syz2: Port: 1 Link DOWN [ 364.495648][T16049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.522678][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.576529][T16049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.595957][T16260] validate_nla: 30 callbacks suppressed [ 364.595974][T16260] netlink: 'syz.0.2914': attribute type 13 has an invalid length. [ 364.597277][T16049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.601625][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 364.611279][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.678529][T16049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.692895][T16260] netlink: 'syz.0.2914': attribute type 13 has an invalid length. [ 364.700734][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 364.723855][ T5153] Bluetooth: hci4: command tx timeout [ 364.734180][T16267] pim6reg527: entered allmulticast mode [ 364.878487][T16049] hsr_slave_0: entered promiscuous mode [ 364.888642][T16049] hsr_slave_1: entered promiscuous mode [ 364.898768][T16049] debugfs: 'hsr0' already exists in 'hsr' [ 364.905745][T16049] Cannot create hsr debugfs directory [ 364.977064][ T8449] IPVS: stop unused estimator thread 0... [ 365.347606][T16049] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.465432][T16049] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.578240][T16049] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.691859][T16049] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.874320][T16343] tipc: Started in network mode [ 365.896276][T16343] tipc: Node identity e60338324e7d, cluster identity 4711 [ 365.933059][T16343] tipc: Enabled bearer , priority 0 [ 365.975146][T16353] syzkaller0: entered promiscuous mode [ 365.980656][T16353] syzkaller0: entered allmulticast mode [ 366.013227][T16343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 366.050976][T16350] lo speed is unknown, defaulting to 1000 [ 366.065547][T16349] tipc: Resetting bearer [ 366.107279][T16343] tipc: Resetting bearer [ 366.157846][T16342] tipc: Resetting bearer [ 366.185746][T16342] tipc: Disabling bearer [ 366.229696][T16049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.279206][T16360] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 366.302647][T16049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.339116][T16049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.368296][T16049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.594810][T16349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 366.600756][T16349] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 366.635242][T16349] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 366.658097][T16377] bridge0: port 2(ipvlan3) entered blocking state [ 366.663798][T16349] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 366.673412][T16377] bridge0: port 2(ipvlan3) entered disabled state [ 366.680076][T16377] ipvlan3: entered allmulticast mode [ 366.703309][T16377] bridge0: entered allmulticast mode [ 366.714824][T16377] ipvlan3: left allmulticast mode [ 366.732601][T16377] bridge0: left allmulticast mode [ 366.812534][ T5153] Bluetooth: hci4: command tx timeout [ 366.842253][T16349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.853037][T16049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.867729][T16349] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 366.931093][T16349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.949358][T16349] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 367.023294][T16049] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.052102][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.053265][T16391] netlink: 'syz.0.2948': attribute type 12 has an invalid length. [ 367.059294][ T8449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.207981][T16391] bond10: option primary_reselect: invalid value (255) [ 367.221694][T16391] bond10 (unregistering): Released all slaves [ 367.377685][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.384907][ T8452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.439648][T16404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.775572][T16417] xt_NFQUEUE: number of total queues is 0 [ 367.791801][T16417] xt_NFQUEUE: number of total queues is 0 [ 367.947122][T16049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.168550][T16049] veth0_vlan: entered promiscuous mode [ 368.179552][T16049] veth1_vlan: entered promiscuous mode [ 368.205457][T16049] veth0_macvtap: entered promiscuous mode [ 368.214881][T16049] veth1_macvtap: entered promiscuous mode [ 368.231111][T16049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.249262][T16049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.262043][ T8449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.272124][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.282256][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.291819][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.374063][ T8452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.381942][ T8452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.439490][ T8452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.448103][ T8452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.645145][T16448] __nla_validate_parse: 10 callbacks suppressed [ 385.645174][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2961'. [ 385.736266][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 385.794002][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 386.170169][T16472] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2965'. [ 386.294013][T16487] pim6reg1: entered promiscuous mode [ 386.299496][T16487] pim6reg1: entered allmulticast mode [ 386.436941][ T5832] syz_tun (unregistering): left allmulticast mode [ 386.535922][T16495] sctp: [Deprecated]: syz.6.2972 (pid 16495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.535922][T16495] Use struct sctp_sack_info instead [ 386.602018][T16502] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 386.608928][ T8446] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.640883][ T8446] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.660896][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.673137][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.717164][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.750350][ T8446] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.760554][ T8446] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.770988][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.778890][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.828259][ T8446] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.840382][ T8446] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.889691][T16505] lo speed is unknown, defaulting to 1000 [ 386.920751][ T8446] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.953182][ T8446] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.178874][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.224933][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.290789][ T8452] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.373590][ T1931] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.422919][ T8446] bridge_slave_0: left allmulticast mode [ 387.428593][ T8446] bridge_slave_0: left promiscuous mode [ 387.472642][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.772052][ T8446] tipc: Disabling bearer [ 387.803908][ T8446] bond7 (unregistering): (slave gretap4): Releasing active interface [ 387.819149][T16538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2981'. [ 387.852985][ T8446] dvmrp8 (unregistering): left allmulticast mode [ 387.877490][ T8446] bond6 (unregistering): (slave geneve2): Releasing active interface [ 388.078409][ T8446] bond1 (unregistering): Released all slaves [ 388.174851][ T8446] bond2 (unregistering): Released all slaves [ 388.188061][ T8446] bond0 (unregistering): Released all slaves [ 388.201198][ T8446] bond3 (unregistering): (slave bond4): Releasing backup interface [ 388.209788][ T8446] bond3 (unregistering): Released all slaves [ 388.303665][ T8446] bond4 (unregistering): Released all slaves [ 388.316510][ T8446] bond5 (unregistering): Released all slaves [ 388.411830][ T8446] bond6 (unregistering): Released all slaves [ 388.424485][ T8446] bond7 (unregistering): Released all slaves [ 388.516709][ T8446] bond8 (unregistering): Released all slaves [ 388.601937][ T8446] bond9 (unregistering): (slave veth9): Releasing active interface [ 388.611849][ T8446] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 388.622618][ T8446] bond9 (unregistering): Released all slaves [ 388.822754][ T8446] : left promiscuous mode [ 388.891191][ T5153] Bluetooth: hci2: command tx timeout [ 388.914741][ T8446] 9: left promiscuous mode [ 388.984765][ T8446] tipc: Left network mode [ 389.135769][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'. [ 389.139938][T16571] netlink: 'syz.6.2990': attribute type 1 has an invalid length. [ 389.181959][T16576] netlink: 'syz.6.2990': attribute type 1 has an invalid length. [ 389.420664][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 389.465867][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2993'. [ 389.803538][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.848685][T16606] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2998'. [ 389.876805][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 390.132789][T16630] sctp: [Deprecated]: syz.4.3003 (pid 16630) Use of int in max_burst socket option deprecated. [ 390.132789][T16630] Use struct sctp_assoc_value instead [ 390.284937][T16505] chnl_net:caif_netlink_parms(): no params data found [ 390.616072][T16653] netlink: 'syz.6.3008': attribute type 3 has an invalid length. [ 390.756432][ T8446] hsr_slave_0: left promiscuous mode [ 390.766354][ T8446] hsr_slave_1: left promiscuous mode [ 390.773816][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.781540][ T8446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.791351][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.799773][ T8446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.836168][ T8446] veth1_macvtap: left promiscuous mode [ 390.844064][ T8446] veth0_vlan: left promiscuous mode [ 390.858312][T16664] __nla_validate_parse: 2 callbacks suppressed [ 390.858328][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3011'. [ 390.973229][ T5153] Bluetooth: hci2: command tx timeout [ 391.407512][ T8446] team0 (unregistering): Port device team_slave_1 removed [ 391.442762][ T8446] team0 (unregistering): Port device team_slave_0 removed [ 391.521220][ T1007] smc: removing ib device sy [ 391.798360][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 391.814247][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.821410][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.837259][T16505] bridge_slave_0: entered allmulticast mode [ 391.863476][T16505] bridge_slave_0: entered promiscuous mode [ 391.959402][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.968521][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.990950][T16505] bridge_slave_1: entered allmulticast mode [ 392.039503][T16505] bridge_slave_1: entered promiscuous mode [ 392.290920][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3018'. [ 392.378798][T16696] syzkaller1: entered promiscuous mode [ 392.385613][T16696] syzkaller1: entered allmulticast mode [ 392.451326][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.585492][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.799734][T16703] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 392.875625][T16708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3021'. [ 393.037829][T16505] team0: Port device team_slave_0 added [ 393.042490][ T5153] Bluetooth: hci2: command tx timeout [ 393.055787][T16505] team0: Port device team_slave_1 added [ 393.211934][T16722] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 393.305763][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3029'. [ 393.329004][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.348787][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.429127][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.463363][T16738] netlink: 'syz.5.3029': attribute type 1 has an invalid length. [ 393.572960][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.583685][T16742] netlink: 'syz.6.3030': attribute type 27 has an invalid length. [ 393.591690][T16742] netlink: 'syz.6.3030': attribute type 4 has an invalid length. [ 393.592488][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.625548][T16742] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3030'. [ 393.634990][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.650776][T16748] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 393.664725][T16748] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 393.675993][T16748] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 393.756592][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3030'. [ 394.089945][T16505] hsr_slave_0: entered promiscuous mode [ 394.110794][T16505] hsr_slave_1: entered promiscuous mode [ 394.277915][ T8446] IPVS: stop unused estimator thread 0... [ 394.460079][T16772] tipc: New replicast peer: 255.255.255.255 [ 394.481648][T16772] tipc: Enabled bearer , priority 10 [ 394.648544][T16787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3044'. [ 394.658226][T16788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3044'. [ 394.733545][T16505] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.808928][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3046'. [ 394.830386][T16505] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.889791][T16505] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.954966][T16505] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.123423][ T5153] Bluetooth: hci2: command tx timeout [ 395.229375][T16505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.276399][T16505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.301308][T16505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.328481][T16505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.333215][T16825] netlink: 'syz.6.3054': attribute type 1 has an invalid length. [ 395.384265][T16823] veth3: entered promiscuous mode [ 395.473954][ T5916] tipc: Node number set to 2826844210 [ 395.509633][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.541491][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.567236][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.574482][ T8446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.608903][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.616110][ T8449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.667017][T16848] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 396.149975][T16879] xt_connbytes: Forcing CT accounting to be enabled [ 396.201954][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.209650][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.365687][T16872] bridge_slave_0: left allmulticast mode [ 396.371593][T16872] bridge_slave_0: left promiscuous mode [ 396.377669][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.406972][T16872] bridge_slave_1: left allmulticast mode [ 396.414552][T16872] bridge_slave_1: left promiscuous mode [ 396.420361][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.434611][T16872] bond0: (slave bond_slave_0): Releasing backup interface [ 396.446910][T16872] bond0: (slave bond_slave_1): Releasing backup interface [ 396.460480][T16872] team0: Port device team_slave_0 removed [ 396.473874][T16872] team0: Port device team_slave_1 removed [ 396.483551][T16872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.494600][T16872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.505693][T16872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.516519][T16872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.531485][T16872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.555665][T16889] __nla_validate_parse: 5 callbacks suppressed [ 396.555680][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 396.605688][T16894] netlink: 'syz.5.3070': attribute type 3 has an invalid length. [ 396.616718][T16894] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3070'. [ 396.724567][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.859770][T16505] veth0_vlan: entered promiscuous mode [ 396.917958][T16505] veth1_vlan: entered promiscuous mode [ 397.034616][T16505] veth0_macvtap: entered promiscuous mode [ 397.050793][T16505] veth1_macvtap: entered promiscuous mode [ 397.084680][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.125163][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.155889][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.182783][ T1007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.220745][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.232269][ T1007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.359184][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3084'. [ 397.380929][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 397.504772][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 397.520703][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.549579][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.627073][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3088'. [ 397.667213][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.689941][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.937240][T16973] wireguard0: entered promiscuous mode [ 397.974961][T16973] wireguard0: entered allmulticast mode [ 397.995030][T16973] team0: Device wireguard0 is of different type [ 398.150336][T16996] netlink: 'syz.4.3101': attribute type 3 has an invalid length. [ 398.217536][T17004] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3103'. [ 398.223408][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3102'. [ 398.227063][T17001] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3103'. [ 398.371409][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 398.607072][T17026] syzkaller0: entered promiscuous mode [ 398.612848][T17026] syzkaller0: entered allmulticast mode [ 399.101970][T17065] tipc: Started in network mode [ 399.110175][T17065] tipc: Node identity f50000000000000005, cluster identity 4711 [ 399.249756][T17075] netlink: 'syz.0.3122': attribute type 7 has an invalid length. [ 399.580925][T17100] netlink: 'syz.5.3128': attribute type 24 has an invalid length. [ 399.666958][T17107] syzkaller1: entered promiscuous mode [ 399.676811][T17107] syzkaller1: entered allmulticast mode [ 399.999904][T17139] netlink: 'syz.2.3139': attribute type 11 has an invalid length. [ 401.401833][T17196] netlink: 'syz.6.3155': attribute type 1 has an invalid length. [ 401.457187][T17198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.308928][T17251] ip6gre1: entered allmulticast mode [ 402.469213][T17267] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 402.574026][T17274] netlink: 'syz.4.3178': attribute type 5 has an invalid length. [ 402.629285][T17281] netlink: 'syz.6.3180': attribute type 1 has an invalid length. [ 402.762584][T17289] netlink: 'syz.0.3183': attribute type 11 has an invalid length. [ 402.781676][T17289] netlink: 'syz.0.3183': attribute type 11 has an invalid length. [ 402.801040][T17289] __nla_validate_parse: 7 callbacks suppressed [ 402.801058][T17289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3183'. [ 402.892074][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 402.924812][T17293] vxcan4: entered allmulticast mode [ 403.084297][T17305] syzkaller1: entered promiscuous mode [ 403.109377][T17305] syzkaller1: entered allmulticast mode [ 403.140014][T17312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3190'. [ 403.361762][ T1931] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 403.458321][T17342] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3197'. [ 403.467722][T17342] 0{X: renamed from gretap0 (while UP) [ 403.477868][T17342] 0{X: entered allmulticast mode [ 403.484075][T17342] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 403.669916][T17353] netlink: 'syz.6.3201': attribute type 1 has an invalid length. [ 403.694647][T17353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.704813][T17353] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 403.717617][T17353] bond3: entered allmulticast mode [ 403.738671][T17353] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 404.243582][T17363] nbd: must specify a size in bytes for the device [ 404.261909][T17365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3205'. [ 404.266352][T17368] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 404.289288][T17367] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 404.330132][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.357609][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.375076][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.430511][T17368] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 404.449395][ T30] audit: type=1804 audit(1764861287.201:2): pid=17377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3209" name="/newroot/54/cgroup.controllers" dev="tmpfs" ino=293 res=1 errno=0 [ 404.508781][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.517760][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.528964][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.555179][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.575923][ T30] audit: type=1800 audit(1764861287.201:3): pid=17377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3209" name="cgroup.controllers" dev="tmpfs" ino=293 res=0 errno=0 [ 404.629645][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.650271][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.667100][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.719756][T17368] wlan0 speed is unknown, defaulting to 1000 [ 404.795353][T17402] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 404.876574][T17406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3215'. [ 404.917018][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3219'. [ 404.929911][T17410] tipc: Started in network mode [ 404.935927][T17410] tipc: Node identity , cluster identity 4711 [ 404.942158][T17410] tipc: Failed to set node id, please configure manually [ 404.954604][T17410] tipc: Enabling of bearer rejected, failed to enable media [ 405.052680][T17422] netlink: 'syz.4.3221': attribute type 2 has an invalid length. [ 405.411685][T17435] bond4: Removing last ns target with arp_interval on [ 405.525933][T17445] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3227'. [ 405.596159][T17447] netlink: 'syz.4.3228': attribute type 12 has an invalid length. [ 405.624276][T17447] syzkaller1: entered promiscuous mode [ 405.638065][T17447] syzkaller1: entered allmulticast mode [ 405.679478][T17454] bond1: entered promiscuous mode [ 405.685502][T17454] bond1: entered allmulticast mode [ 405.691043][T17454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.738581][T17458] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3232'. [ 405.858607][T17466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3235'. [ 405.895982][T17468] syzkaller0: entered promiscuous mode [ 405.901484][T17468] syzkaller0: entered allmulticast mode [ 405.960962][T17470] sctp: [Deprecated]: syz.2.3236 (pid 17470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.960962][T17470] Use struct sctp_sack_info instead [ 406.070272][T17477] bond5: Unable to set down delay as MII monitoring is disabled [ 406.223102][T17477] bond5 (unregistering): Released all slaves [ 406.316246][ T30] audit: type=1800 audit(1764861289.061:4): pid=17489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3241" name="memory.events" dev="tmpfs" ino=1241 res=0 errno=0 [ 406.348957][ T30] audit: type=1804 audit(1764861289.071:5): pid=17489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3241" name="/newroot/239/memory.events" dev="tmpfs" ino=1241 res=1 errno=0 [ 406.609195][T17509] veth0: entered promiscuous mode [ 406.632929][T17511] netlink: 'syz.5.3249': attribute type 6 has an invalid length. [ 406.640672][T17511] netlink: 'syz.5.3249': attribute type 5 has an invalid length. [ 406.679238][T17509] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 406.769376][T17520] netlink: 'syz.6.3251': attribute type 7 has an invalid length. [ 406.777725][T17520] netlink: 'syz.6.3251': attribute type 8 has an invalid length. [ 406.915885][T17524] netlink: 'syz.6.3251': attribute type 10 has an invalid length. [ 406.934737][T17524] team0: entered promiscuous mode [ 406.940119][T17524] team_slave_0: entered promiscuous mode [ 406.954909][T17524] team_slave_1: entered promiscuous mode [ 406.961099][T17524] bridge0: port 3(team0) entered blocking state [ 406.980214][T17524] bridge0: port 3(team0) entered disabled state [ 406.989337][T17520] xt_TCPMSS: Only works on TCP SYN packets [ 406.997328][T17524] team0: entered allmulticast mode [ 407.007565][T17535] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 407.007722][T17524] team_slave_0: entered allmulticast mode [ 407.025103][T17524] team_slave_1: entered allmulticast mode [ 407.034649][T17524] bridge0: port 3(team0) entered blocking state [ 407.041050][T17524] bridge0: port 3(team0) entered forwarding state [ 407.254581][T17555] netlink: 'syz.4.3262': attribute type 30 has an invalid length. [ 407.304181][T17555] bond1: option arp_missed_max: invalid value (0) [ 407.310741][T17555] bond1: option arp_missed_max: allowed values 1 - 255 [ 407.321414][T17555] bond1 (unregistering): Released all slaves [ 407.550751][T17575] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 407.609062][T17577] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 407.673981][T17586] IPv6: sit1: Disabled Multicast RS [ 407.680573][T17586] sit1: entered allmulticast mode [ 407.967756][T17597] __nla_validate_parse: 14 callbacks suppressed [ 407.967775][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 408.009314][T17599] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 408.017986][T17599] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.127023][T17605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3276'. [ 408.209044][T17610] wg1: entered promiscuous mode [ 408.215274][T17610] wg1: entered allmulticast mode [ 408.372260][T17617] bond0: (slave caif0): Error: Device type is different from other slaves [ 408.419686][T17621] veth1_macvtap: entered allmulticast mode [ 408.429264][T17617] syzkaller0: entered promiscuous mode [ 408.440234][T17617] syzkaller0: entered allmulticast mode [ 408.491229][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 408.797934][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3288'. [ 409.045044][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 409.149089][T17662] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 409.175919][T17665] sctp: [Deprecated]: syz.0.3298 (pid 17665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.175919][T17665] Use struct sctp_sack_info instead [ 409.409376][T17678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.441931][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 409.480966][T17679] sctp: [Deprecated]: syz.0.3300 (pid 17679) Use of int in max_burst socket option. [ 409.480966][T17679] Use struct sctp_assoc_value instead [ 409.537074][T17687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 409.715172][T17687] nbd2: detected capacity change from 0 to 63 [ 409.756616][ T5153] block nbd2: Receive control failed (result -104) [ 409.870985][T17707] netlink: 'syz.0.3308': attribute type 9 has an invalid length. [ 409.908195][T17713] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 409.915888][T17713] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 409.963238][T17713] bond1: (slave gretap1): making interface the new active one [ 409.971645][T17713] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.177712][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3315'. [ 410.314295][ T30] audit: type=1107 audit(1764861293.071:6): pid=17733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 410.322991][T17739] netlink: 'syz.6.3318': attribute type 28 has an invalid length. [ 410.425046][T17739] netlink: 'syz.6.3318': attribute type 3 has an invalid length. [ 410.432900][T17739] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3318'. [ 410.477697][T17730] veth1_macvtap: left allmulticast mode [ 410.671228][T17745] xt_NFQUEUE: number of total queues is 0 [ 410.704871][ T3470] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.784181][ T3470] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.830490][ T3470] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.843982][T17755] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 410.852207][ T3470] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.926614][T17755] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3322'. [ 411.387123][T17793] pim6reg: entered allmulticast mode [ 411.401658][T17793] pim6reg: left allmulticast mode [ 411.879373][T17816] netlink: 'syz.5.3342': attribute type 13 has an invalid length. [ 411.948778][T17817] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 411.957477][T17822] bond0: Caught tx_queue_len zero misconfig [ 411.966345][T17822] netlink: 'syz.5.3342': attribute type 4 has an invalid length. [ 411.984729][T17817] tipc: Started in network mode [ 411.990314][T17817] tipc: Node identity ac14140f, cluster identity 4711 [ 411.999622][T17817] tipc: New replicast peer: 255.255.255.255 [ 412.009925][T17817] tipc: Enabled bearer , priority 10 [ 412.288524][T17847] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 412.298823][T17847] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.309898][T17847] gretap2: entered promiscuous mode [ 412.315351][T17847] gretap2: entered allmulticast mode [ 412.668872][T17877] netlink: 'syz.0.3361': attribute type 1 has an invalid length. [ 412.807910][T17884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.002594][ T5916] tipc: Node number set to 2886997007 [ 413.593082][T17910] __nla_validate_parse: 10 callbacks suppressed [ 413.593099][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3368'. [ 413.698930][T17919] netlink: 'syz.6.3368': attribute type 18 has an invalid length. [ 413.708964][T17903] 0{X: left allmulticast mode [ 413.841408][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.864886][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.878202][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.014609][ T180] IPVS: starting estimator thread 0... [ 414.020904][T17925] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 414.102397][T17928] IPVS: using max 28 ests per chain, 67200 per kthread [ 414.209766][T17910] infiniband syz2: set down [ 414.217021][ T180] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.235336][T17910] infiniband syz2: added ip6_vti0 [ 414.326025][T17910] RDS/IB: syz2: added [ 414.330084][T17910] smc: adding ib device syz2 with port count 1 [ 414.421690][T17910] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 414.455521][ T5834] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.489839][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.725369][T17953] tipc: Enabled bearer , priority 0 [ 414.737770][T17957] netlink: 'syz.5.3382': attribute type 25 has an invalid length. [ 414.762595][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3382'. [ 414.783433][T17953] syzkaller0: entered promiscuous mode [ 414.788932][T17953] syzkaller0: entered allmulticast mode [ 414.835774][T17957] netlink: 'syz.5.3382': attribute type 25 has an invalid length. [ 414.851254][ T4605] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.861605][ T4605] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.869963][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3382'. [ 414.893321][T17953] tipc: Resetting bearer [ 414.912980][ T4605] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.955037][T17951] tipc: Resetting bearer [ 414.994646][T17951] tipc: Disabling bearer [ 415.029696][ T4605] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.046239][T17973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3388'. [ 415.075066][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.236744][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3390'. [ 415.278394][T17983] lo: Caught tx_queue_len zero misconfig [ 415.294562][T17983] mac80211_hwsim hwsim25 syzkaller0: Caught tx_queue_len zero misconfig [ 415.410601][T17991] lo speed is unknown, defaulting to 1000 [ 415.510568][T18004] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 415.565182][T18005] netlink: 'syz.2.3397': attribute type 1 has an invalid length. [ 415.582699][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3397'. [ 415.606484][T18007] netlink: 'syz.5.3396': attribute type 4 has an invalid length. [ 415.621827][T18007] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3396'. [ 415.632984][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 415.713684][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 415.713915][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 415.807541][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.071602][T17991] wlan0 speed is unknown, defaulting to 1000 [ 416.257883][T18036] x_tables: duplicate underflow at hook 1 [ 416.280380][T18036] sctp: [Deprecated]: syz.0.3404 (pid 18036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.280380][T18036] Use struct sctp_sack_info instead [ 416.309006][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.406469][T18045] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 416.533706][T18045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.639659][T18058] netlink: 'syz.2.3411': attribute type 3 has an invalid length. [ 416.722075][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.168581][T18085] netem: unknown loss type 0 [ 417.174638][T18085] netem: change failed [ 417.180256][T18088] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 417.199193][T18088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.220264][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.449532][T18101] lo speed is unknown, defaulting to 1000 [ 417.546534][T18108] can: request_module (can-proto-0) failed. [ 417.656604][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.736536][T18113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.891951][T18113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.914594][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 418.005341][T18113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.117727][T18113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.286538][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.312958][T18128] x_tables: duplicate underflow at hook 1 [ 418.326307][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.342373][T17910] ip6_vti0 speed is unknown, defaulting to 1000 [ 418.368418][ T8446] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.421440][ T8452] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.441783][T18135] validate_nla: 1 callbacks suppressed [ 418.441799][T18135] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 418.633179][T18142] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 418.742723][T18147] netlink: 'syz.5.3437': attribute type 7 has an invalid length. [ 419.243957][T18174] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.271370][T18179] netlink: 'syz.0.3445': attribute type 16 has an invalid length. [ 419.288774][T18174] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.302731][T18178] __nla_validate_parse: 8 callbacks suppressed [ 419.302749][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'. [ 419.319599][T18179] netlink: 'syz.0.3445': attribute type 17 has an invalid length. [ 419.416910][T18176] pimreg: entered allmulticast mode [ 419.470581][T18179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.508648][ T5916] wlan0 speed is unknown, defaulting to 1000 [ 419.554931][T18186] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 419.747793][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3453'. [ 419.825227][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3451'. [ 419.862518][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3451'. [ 419.904437][T18212] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3456'. [ 419.914539][T18212] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 420.277719][T18236] netlink: 23 bytes leftover after parsing attributes in process `syz.6.3463'. [ 420.291005][T18237] xt_addrtype: ipv6 does not support BROADCAST matching [ 420.291007][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3464'. [ 420.340521][T18239] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3464'. [ 420.351782][T18239] netlink: 'syz.5.3464': attribute type 1 has an invalid length. [ 420.445543][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 420.517850][T18247] bridge2: port 1(veth0_to_bond) entered blocking state [ 420.527453][T18247] bridge2: port 1(veth0_to_bond) entered disabled state [ 420.553892][T18247] veth0_to_bond: entered allmulticast mode [ 420.574438][T18247] veth0_to_bond: entered promiscuous mode [ 420.819316][T18266] tipc: Enabled bearer , priority 0 [ 420.856127][T18266] syzkaller0: entered allmulticast mode [ 420.873161][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'. [ 420.928233][T18266] tipc: Resetting bearer [ 420.978877][T18265] tipc: Resetting bearer [ 421.036221][T18265] tipc: Disabling bearer [ 421.090655][T18285] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 421.092580][T18279] netlink: 'syz.4.3478': attribute type 4 has an invalid length. [ 421.161349][T18289] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 421.287868][T18302] bond0: (slave tunl0): Error: Device type is different from other slaves [ 421.558794][T18316] rdma_op ffff88807e7749f0 conn xmit_rdma 0000000000000000 [ 422.253840][T18345] tipc: Started in network mode [ 422.266591][T18345] tipc: Node identity 96525421136b, cluster identity 4711 [ 422.285943][T18345] tipc: Enabled bearer , priority 0 [ 422.297134][T18345] syzkaller0: entered promiscuous mode [ 422.316606][T18345] syzkaller0: entered allmulticast mode [ 422.351602][T18343] tipc: Resetting bearer [ 422.361132][T18354] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 422.387623][T18343] tipc: Disabling bearer [ 422.460183][T18361] openvswitch: netlink: IP tunnel dst address not specified [ 422.470578][T18361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.546827][T18364] netlink: 'syz.4.3503': attribute type 3 has an invalid length. [ 422.675538][ T5834] IPVS: starting estimator thread 0... [ 422.684023][T18368] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.762497][T18374] IPVS: using max 28 ests per chain, 67200 per kthread [ 422.808611][T18376] syzkaller0: entered promiscuous mode [ 422.815359][T18376] syzkaller0: entered allmulticast mode [ 424.709369][T18414] tipc: Enabled bearer , priority 0 [ 424.732235][T18414] syzkaller0: entered allmulticast mode [ 424.764151][T18422] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 424.781999][T18421] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 424.928949][T18437] tipc: Resetting bearer [ 424.992943][T18438] netlink: 'syz.6.3521': attribute type 4 has an invalid length. [ 425.062935][T18413] tipc: Resetting bearer [ 425.144445][T18413] tipc: Disabling bearer [ 425.886080][T18498] netlink: 'syz.0.3534': attribute type 10 has an invalid length. [ 425.904281][T18498] __nla_validate_parse: 11 callbacks suppressed [ 425.904302][T18498] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3534'. [ 425.919905][T18498] team0: entered promiscuous mode [ 425.926389][T18498] team_slave_0: entered promiscuous mode [ 425.932230][T18498] team_slave_1: entered promiscuous mode [ 425.941367][T18498] bridge0: port 3(team0) entered blocking state [ 425.952798][T18498] bridge0: port 3(team0) entered disabled state [ 425.960365][T18498] team0: entered allmulticast mode [ 425.976342][T18498] team_slave_0: entered allmulticast mode [ 425.982097][T18498] team_slave_1: entered allmulticast mode [ 426.005454][T18503] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3535'. [ 426.216559][T18518] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3540'. [ 426.266367][T18520] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3542'. [ 426.284013][T18520] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3542'. [ 426.389886][T18529] netlink: 'syz.2.3544': attribute type 11 has an invalid length. [ 426.400637][T18529] netlink: 'syz.2.3544': attribute type 11 has an invalid length. [ 426.417156][T18531] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3545'. [ 426.417865][T18529] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3544'. [ 426.439108][T18531] netlink: 'syz.6.3545': attribute type 2 has an invalid length. [ 426.490454][T18531] netlink: 'syz.6.3545': attribute type 8 has an invalid length. [ 426.532106][T18531] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3545'. [ 426.612900][T18538] ipvlan2: entered promiscuous mode [ 426.647324][T18541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.683759][T18541] netlink: 183120 bytes leftover after parsing attributes in process `syz.5.3549'. [ 426.697316][T18543] sctp: [Deprecated]: syz.6.3550 (pid 18543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.697316][T18543] Use struct sctp_sack_info instead [ 426.747151][T18547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3552'. [ 426.855897][T18551] tipc: Enabling of bearer rejected, failed to enable media [ 427.203876][T18568] tipc: Enabled bearer , priority 0 [ 427.288560][T18568] syzkaller0: entered promiscuous mode [ 427.294487][T18568] syzkaller0: entered allmulticast mode [ 427.300735][T18568] tipc: Resetting bearer [ 427.328241][T18567] tipc: Resetting bearer [ 427.550525][T18603] openvswitch: netlink: Flow key attr not present in new flow. [ 428.479026][T18610] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 429.071734][T18567] tipc: Disabling bearer [ 429.080209][T18590] ip6tnl0: Caught tx_queue_len zero misconfig [ 429.099284][T18598] gretap3: entered allmulticast mode [ 429.248554][T18629] bridge0: port 3(vlan2) entered blocking state [ 429.257536][T18629] bridge0: port 3(vlan2) entered disabled state [ 429.268179][T18629] vlan2: entered allmulticast mode [ 429.274451][T18629] bridge0: entered allmulticast mode [ 429.303303][T18629] vlan2: left allmulticast mode [ 429.316627][T18629] bridge0: left allmulticast mode [ 429.481202][T18650] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 429.493589][T18645] team0: Device gtp0 is up. Set it down before adding it as a team port [ 429.524916][T18652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.560442][T18650] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 429.666400][T18660] !: renamed from bond_slave_0 (while UP) [ 429.760974][T18665] xt_l2tp: v2 doesn't support IP mode [ 429.955870][ T5153] block nbd0: Receive control failed (result -107) [ 429.983899][T18679] ip6tnl2: entered allmulticast mode [ 430.113864][T18687] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 430.122711][T18687] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 430.230374][T18692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.394635][T18708] nbd: must specify at least one socket [ 430.638288][T18725] bond0: entered promiscuous mode [ 430.652770][T18725] bond_slave_0: entered promiscuous mode [ 430.658688][T18725] bond_slave_1: entered promiscuous mode [ 430.683526][T18725] batadv0: entered promiscuous mode [ 430.691876][T18725] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 430.734297][T18732] netlink: 'syz.5.3608': attribute type 5 has an invalid length. [ 430.988110][T18752] __nla_validate_parse: 17 callbacks suppressed [ 430.988128][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3616'. [ 431.443653][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 431.647120][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 432.010046][T18803] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.3629'. [ 432.062125][T18803] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 432.097308][T18803] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 432.145943][T18803] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 432.308792][T18823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3636'. [ 433.345389][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'. [ 433.759292][T18826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3637'. [ 433.924658][T18843] netlink: 'syz.2.3644': attribute type 22 has an invalid length. [ 433.968633][T18842] tipc: Enabled bearer , priority 0 [ 434.001481][T18842] syzkaller0: entered allmulticast mode [ 434.049891][T18842] tipc: Resetting bearer [ 434.069849][T18841] tipc: Resetting bearer [ 434.093282][T18841] tipc: Disabling bearer [ 434.114280][T18856] --map-set only usable from mangle table [ 434.121234][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3648'. [ 434.132619][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3648'. [ 434.161178][T18860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3650'. [ 434.171025][ T31] INFO: task syz.1.2341:14281 blocked for more than 143 seconds. [ 434.182093][ T31] Not tainted syzkaller #0 [ 434.187451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.197077][ T31] task:syz.1.2341 state:D stack:26936 pid:14281 tgid:14280 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 434.209178][ T31] Call Trace: [ 434.215006][ T31] [ 434.218762][ T31] __schedule+0x14bc/0x5000 [ 434.223761][ T31] ? __pfx___schedule+0x10/0x10 [ 434.228862][ T31] ? schedule+0x91/0x360 [ 434.233304][ T31] schedule+0x165/0x360 [ 434.237485][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.248506][ T31] __mutex_lock+0x7e6/0x1350 [ 434.254189][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.258980][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 434.265127][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.270177][ T31] ? __nlmsg_put+0xef/0x1b0 [ 434.274932][ T31] ? genlmsg_put+0x137/0x2e0 [ 434.279531][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 434.285228][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 434.290422][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 434.296834][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 434.302467][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.308570][ T31] genl_rcv_msg+0x60e/0x790 [ 434.313241][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.318278][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 434.325081][ T31] netlink_rcv_skb+0x208/0x470 [ 434.329874][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.335098][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.340409][ T31] ? down_read+0x274/0x2e0 [ 434.344874][ T31] ? genl_rcv+0xd/0x40 [ 434.348958][ T31] genl_rcv+0x28/0x40 [ 434.353753][ T31] netlink_unicast+0x82f/0x9e0 [ 434.358543][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 434.363868][ T31] ? netlink_sendmsg+0x642/0xb30 [ 434.368794][ T31] ? skb_put+0x11b/0x210 [ 434.373346][ T31] netlink_sendmsg+0x805/0xb30 [ 434.378128][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.383566][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.388512][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.393903][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.399198][ T31] __sock_sendmsg+0x21c/0x270 [ 434.404018][ T31] ____sys_sendmsg+0x505/0x820 [ 434.408799][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.414231][ T31] ? import_iovec+0x74/0xa0 [ 434.418733][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 434.423748][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.428957][ T31] ? futex_wait+0x285/0x360 [ 434.433660][ T31] ? __fget_files+0x2a/0x420 [ 434.438268][ T31] ? __fget_files+0x3a0/0x420 [ 434.442990][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 434.447930][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.453479][ T31] ? do_syscall_64+0xbe/0xf80 [ 434.458582][ T31] do_syscall_64+0xfa/0xf80 [ 434.463155][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.469230][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.473994][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.479876][ T31] RIP: 0033:0x7f44dd18f749 [ 434.484523][ T31] RSP: 002b:00007f44ddf92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.493112][ T31] RAX: ffffffffffffffda RBX: 00007f44dd3e5fa0 RCX: 00007f44dd18f749 [ 434.501090][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 434.509111][ T31] RBP: 00007f44dd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.517162][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.525234][ T31] R13: 00007f44dd3e6038 R14: 00007f44dd3e5fa0 R15: 00007ffd7fdff808 [ 434.533343][ T31] [ 434.536530][ T31] [ 434.536530][ T31] Showing all locks held in the system: [ 434.544691][ T31] 2 locks held by ksoftirqd/0/15: [ 434.549768][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 434.571158][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 434.580313][ T31] 1 lock held by khungtaskd/31: [ 434.585303][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.595415][ T31] 2 locks held by getty/5594: [ 434.600105][ T31] #0: ffff88803482a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.610118][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 434.620315][ T31] 2 locks held by kworker/u8:16/8446: [ 434.625724][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 434.637542][ T31] #1: ffffc900056d7b80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 434.650360][ T31] 2 locks held by syz.3.1856/12606: [ 434.655889][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.664870][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 434.675152][ T31] 2 locks held by syz.1.2341/14281: [ 434.680338][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.688690][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 434.698907][ T31] 1 lock held by udevd/16509: [ 434.703760][ T31] #0: ffff888024b57358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 434.713126][ T31] 3 locks held by syz.2.3650/18860: [ 434.718331][ T31] #0: ffffffff8f824090 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 434.728048][ T31] #1: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 434.737235][ T31] #2: ffffffff8df476c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 434.747211][ T31] 1 lock held by syz.6.3651/18863: [ 434.752418][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 434.762453][ T31] 1 lock held by syz.0.3652/18865: [ 434.767600][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x40a/0xf20 [ 434.776868][ T31] 2 locks held by syz.0.3652/18866: [ 434.782066][ T31] #0: ffffffff8f822b70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 434.791608][ T31] #1: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 434.801037][ T31] [ 434.806405][ T31] ============================================= [ 434.806405][ T31] [ 434.815028][ T31] NMI backtrace for cpu 1 [ 434.815045][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.815064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.815074][ T31] Call Trace: [ 434.815081][ T31] [ 434.815089][ T31] dump_stack_lvl+0x189/0x250 [ 434.815115][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.815133][ T31] ? __pfx__printk+0x10/0x10 [ 434.815167][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 434.815188][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 434.815208][ T31] ? __pfx__printk+0x10/0x10 [ 434.815232][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.815256][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.815275][ T31] watchdog+0xf3c/0xf80 [ 434.815300][ T31] ? watchdog+0x1e2/0xf80 [ 434.815325][ T31] kthread+0x711/0x8a0 [ 434.815347][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.815366][ T31] ? __pfx_kthread+0x10/0x10 [ 434.815385][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.815403][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 434.815422][ T31] ? __pfx_kthread+0x10/0x10 [ 434.815442][ T31] ret_from_fork+0x599/0xb30 [ 434.815468][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.815501][ T31] ? __switch_to_asm+0x39/0x70 [ 434.815519][ T31] ? __switch_to_asm+0x33/0x70 [ 434.815536][ T31] ? __pfx_kthread+0x10/0x10 [ 434.815555][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.815591][ T31] [ 434.815597][ T31] Sending NMI from CPU 1 to CPUs 0: [ 434.961159][ C0] NMI backtrace for cpu 0 [ 434.961175][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 434.961194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.961204][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 434.961230][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 434.961244][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 434.961259][ C0] RAX: 1b75fcf1d2957e00 RBX: ffffffff8197438a RCX: 1b75fcf1d2957e00 [ 434.961272][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 434.961283][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 434.961295][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 434.961307][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 434.961319][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 434.961332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.961343][ C0] CR2: 00007f17cc9b7858 CR3: 0000000075fa4000 CR4: 00000000003526f0 [ 434.961357][ C0] Call Trace: [ 434.961365][ C0] [ 434.961371][ C0] default_idle+0x13/0x20 [ 434.961393][ C0] default_idle_call+0x73/0xb0 [ 434.961419][ C0] do_idle+0x1ea/0x520 [ 434.961436][ C0] ? irqentry_exit+0x5ba/0x660 [ 434.961457][ C0] ? __pfx_do_idle+0x10/0x10 [ 434.961490][ C0] cpu_startup_entry+0x44/0x60 [ 434.961507][ C0] rest_init+0x2de/0x300 [ 434.961522][ C0] start_kernel+0x3ae/0x410 [ 434.961543][ C0] x86_64_start_reservations+0x24/0x30 [ 434.961563][ C0] x86_64_start_kernel+0x143/0x1c0 [ 434.961582][ C0] common_startup_64+0x13e/0x147 [ 434.961609][ C0] [ 439.930385][ T25] block nbd2: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 30 seconds [ 439.943481][ T25] block nbd2: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 30 seconds [ 439.954427][ T25] block nbd2: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 30 seconds [ 439.965370][ T25] block nbd2: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 30 seconds