last executing test programs: 3.535586618s ago: executing program 2 (id=10116): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x9, 0x18}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, r0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x2c, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@nested={0x8, 0x59, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 3.425260471s ago: executing program 1 (id=10118): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c00018008"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4008800) 3.111628475s ago: executing program 1 (id=10122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newqdisc={0x78, 0x28, 0x4, 0x70bd27, 0xfffffddc, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x7ffffffe, 0x0, 0xc4c6, 0x3ff}, 0x4, 0x800001, 0x0, 0xff, 0x8000, 0x1c, 0x1a, 0xa, 0x4, 0x5, {0x84, 0xae8, 0x5, 0x2, 0x100, 0xb75e}}}}]}, 0x78}}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r4, &(0x7f0000000000)='\"', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228", @ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB="c2bb5ee66dfea8c66902495af1893a40851914276a3dc0a2ec0a3f943692d78c28b122ce2e9d79d910db3dd98789c5de0e80531e85567e43ced221e6855c922b3f82deea1477485b", @ANYRESOCT=r6], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', r2, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x19) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$packet(0x11, 0x3, 0x300) 3.017692959s ago: executing program 4 (id=10123): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x64, 0x2, 0x8, 0x24, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x40, 0x7f00, 0x3, 0x93f}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x20}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0xc4, r6, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r8, 0x5c77fb4e9bb5ff6e, 0x5, 0xf, 0x80000000, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x15, 0x4}}) 2.447728373s ago: executing program 4 (id=10125): unshare(0x400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90c}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000084c) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a000000000000000000000000000000000100000000000000000000000000000001830090782009b6c0fe8000000000000000000000000000bb"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff0000000007000000850000002c000000d3080000000000007b8af8ff00b7080000068000007b8a005ce0000007010000f8ffff41fe9038000000000007040000f0ffffffb7f4d844ba225f1d991102", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x421, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4850}, 0x0) 2.446564544s ago: executing program 0 (id=10126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c000000280005800100"], 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd26, 0x24dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.394156781s ago: executing program 2 (id=10127): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000600000000004e200064907802000000030000000100f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db39c0e51627ffe6e68b7a8969b50c1a5e5f6abf8"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x4}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r7 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x8) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) 2.392247098s ago: executing program 3 (id=10128): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0xfffffffc, @remote, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) (async, rerun: 32) socket(0x1e, 0x4, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x41) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x9) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000fcffffffffffffff000000000000f0e658d308024c2f6bf09dceb005d0feb3e3368bcabbd66a", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket(0x1, 0x803, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x114, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x54}, 0x1, 0x0, 0x0, 0xed9893f4f794705a}, 0x8001) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x9, 0x6, 0x200, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) 2.277731979s ago: executing program 0 (id=10129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x8080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x6, "01aad8db0e3a"}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="022000001d4000001200128009000100626f6e6400a100000c000280050001"], 0x3c}}, 0x48000) 2.09479382s ago: executing program 0 (id=10130): getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0xa5, [0xaef, 0x0, 0x19, 0xfffffffffffffbff, 0x5, 0x2b], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/165}, &(0x7f00000001c0)=0x78) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003031e000500e1000c0400070280000f00", 0x33a) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @broadcast}, &(0x7f00000002c0)=0xc) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, '|\x00', "d3caadf08a6e8bfb134010f988010dfb83ebfbc27bed7d00", "f83d3940", "6ff5004c27f89cd1"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{}, "5a6db1cb8ef7241a", "3d555ac9c65c6fc74a611b2abdbf647873cdcc6f35df5319a462964a5ff14fd2", "7325045a", "57d9b1394ab6f637"}, 0x38) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) 1.995870702s ago: executing program 0 (id=10131): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001800010600000000000000001c142000fe0000010000000096a3db028c912b9a491d6f38338d39d97499fdee4fba6272979d5fe4890ac5d4bdc5a8b7ba1dc51bd06cfd3294f3bc25e1306bf69fc21318be044cb500a7c246980c93f10146d8f472b14735fcce3771970553cc657c9b19e587125b33ba0fcd64996497c3132775f2c3b0d2d27271884c23e61cd6fcf3c6d07dd4d95867d74d0f8287e3d5230bb41c7b8602a4d0d2da5e6e2c3d29116d1280ff4998b5"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) r4 = socket$netlink(0x10, 0x3, 0xe) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000000400)="0dd2e7", 0x3}], 0x1, 0x0) tee(r5, r7, 0xfffffffffffffffd, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 1.910926151s ago: executing program 3 (id=10132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.778527735s ago: executing program 1 (id=10133): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8001) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ed4d0000000000000000310000000c009900060000004100000008000300", @ANYRES32=r4, @ANYBLOB="0800db00", @ANYRES32=r5, @ANYBLOB="cf2a3c1cb15596645365e7c5e872654323862dd968f4817d7bea2a41e6f4fc2f07eea96e898c3cfb303fdb579f0337752c9e7769448ac69c4d5da35157ad4677fd50f8178bf63b042c8d6b7127a42e34e523c84eb11d2888001f4df92387933b02411751e5a128efbba538886431552871b36a57f1eea496c63577"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}}, 0x20004450) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGMRU(r8, 0x80047453, &(0x7f0000000200)) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000a08010000060a1f0400000000000000000a0000030900010073797a3100000000d9000740b80b2a674eb2310e7c76af09acb4c43e5e30a8ffa69465b9cc2b60c0ca93516bcddeb6df4ed59d589a22590e190e2480dac171f3ccf08082e57a9e7ff377ba2007657d7f41f76da0f79de2e4cdb35fad888664d1b549c90b6ba9bfc65dcf9e963f16fcfd7cb094264219f8b4bde01f0aaa4fee9805b5687d0073c7447e403f495c3bdd29d770837480bf5fa06e283c93efeb45206b3b82d237560dd27b86743a02b68fc72c70268e30e8a6f0b53bc3c1498941da60c8a2d84b7a1200985e3726aefd04b8776731bf4139a4a68be3595015427187980000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) 1.557525797s ago: executing program 4 (id=10134): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair(0x2, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) sendmsg$qrtr(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="b5177978cc7d654b1bccd24c98cddec3edf73a69180f520363745cfa571e433c7a38a9a1b8d730c1c96a032100e24b9329bf451fe59077d0ffa04b70c58fa855b4619aa3fcf7a9f38f436fe1dfd9972f4b019e99028895249e591874d1f1f9c142da30db1c177294", 0x68}, {&(0x7f0000000180)="857740fd4f898bdd0e2dba14f8599cacb840d9f8edac6df460c4605e7cd049f729aecf93570d938b555c1182f2c0c79ebe4fb27fde05bc2261ebbfa97b7953527a12f6c6cf0b3268799a7e700d43e78e6ee721c77fae912133ddee5e2dba9a8e4c187fce871c5bb71220806393885d3d23d7f0759c0f2d758802503a47bd89a42a4a97ad80", 0x85}, {&(0x7f0000000240)="62d2eb7f948d7490d66ff3a2a1db5a02ac90a861e3b1fc071e7b101748ff21abe697a77ff8269a6db01e89f08c9c85144e7e1f50", 0x34}, {&(0x7f0000000280)="4b05de2b07640aa62d8b5c00c00726ffc9a5f48469cc42a4f2bfcf5ea8cbe5160522b81bd63ddc427cc1a61d431af7c2365a5df10761e9a17aff96ba25a53945541d0487787fe867e7142ec70a8c0266", 0x50}, {&(0x7f00000004c0)="63c1feb55c2b5a96eb407eb1b0572d4bbf229869ac66cc1fa0666d2acf662b4acfe88ec527d42d9d16591e069cf5a5f11812435c22c2b7fed7a15aedd59648e2882d8a5194980971f909659243b495cd0138f346860f0c25e1338cbf0348d2d24009d4b76de6dead217030f777c77ce924fe0e81a3c96803f0a0275be8010aec39e4678a18db4e3bf2266954054edcf5877257e6ff5d7701c7a359e7c1e1ed4335a3dec0b622", 0xa6}], 0x5, &(0x7f0000000600)=[{0x70, 0x115, 0xfffffffd, "6bb431d9829db60deca57ad59cf47f0b2650b35f2b632fb725e381c8871e9a6bd90f7960f0483e08e8566e7035848c5456ba483e0c695ee6ca0fce273cb5f459230b930fe8be891a953fab3c47c4f2b79109a0ec5e88d4f60587b3dbf2f7ebbd"}], 0x70, 0x10}, 0x38) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x10) listen(r1, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@empty, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x6, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x9, 0x7fffffffffffffff, 0x3}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x6e20, @in6=@rand_addr=' \x01\x00'}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "21046821a8d9aa540db9a200000000c538c7cb7e"}}]}, 0x16c}}, 0x48080) 1.543164386s ago: executing program 3 (id=10135): socket(0x28, 0x5, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000300)={r2, &(0x7f00000000c0)='\x00', 0xc0201, &(0x7f0000000140)={@_ha_fsid={[0x9, 0x245a]}, {0x7, 0x9, 0x1, 0x9}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xfffffff1}) connect$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_PROTOCOL={0x5, 0xc, 0x8}, @NDA_DST_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.251045635s ago: executing program 2 (id=10136): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xfc}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002200000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r3, 0x414e}], 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) 1.247991637s ago: executing program 4 (id=10137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c00000000006113980000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c00000000006113980000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 1.136332511s ago: executing program 3 (id=10138): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000180)=0x4c, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x44000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.098500703s ago: executing program 2 (id=10139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 1.047779675s ago: executing program 0 (id=10140): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x6, 0x0, 0x0, 0x3, 0x20005}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e1f, 0x4e21}}]}, 0x4c}}, 0x40010) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x192}]}]}, 0x50}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 993.825138ms ago: executing program 1 (id=10141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'wg1\x00', 0x100}) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) (async) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002940)={0x28, r8, 0x23, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x90) (async) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000701a60b399dbe968399bb8deac1416501000000000000000006ffea060900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000701020000000093cc15c3050005000000000000007a300000000023d98caca67a91c046a4c58f559379acd6de1058c3ac1349e7384b9fe2b47925e474eea3f574748ea81ec0fe956cdf9ff2ff02a4fecb89a70407b103011523c04953a059b27a5493a771a1a4688fd5f8a85665546e3f29b3c3c1894fd3fb737c2207d911ea6d05dc9c9e2d18e74079b6fe8b4268e5162a5de17c3b64a974f8a9aa203b39419bb74f1b"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'veth0_to_team\x00', @link_local}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd70be93aa48254c00000008000300020000000800030003000000898b83935f44a5ac2fd330439f8d2f8a0f17ec3a4471c2b4a6bf83f69f910ed810475cddeb8b5a94e38c071028"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4005000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x3c, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c000000808a45154e6b3b6bdb350701f5516b4e1410e609eca4939fdd61dfa4c27bad1c69dbbc7118a420d6619f9dd91f87f9fbb9e43acf2f82c526f57aef3252a114b308a41e81ebdf19b3ba4db2dd654f096a8e27e3210dc32e6dad69df4121208fff6458770df17c47960d9d0b8e2a0ab6ed4eedd27a522385fe79971dd77176e38c11e2f2e49d9dc12370d72f522446333694eef598685e141f723a7b4a104ce4b11f482b43144920bbdb8dcd3c478fc6967f97d0470e97c4353d6cf2d6ecc7102cd2aeb4e1f2a505b85dab8485b6b13cc07898a3ce07675a1e774f1d1ad035c72d23118599fe3212a9f39d5a49571fd59aa609d396180783c7d13019010a176b", @ANYRESOCT=r1, @ANYRESOCT=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async, rerun: 32) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (rerun: 32) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e800000ffffffffffffaaaaaaaaaa4108004510001c000000000004907800007800"/46], 0x2e) (async) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x78) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) 879.337123ms ago: executing program 2 (id=10142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x30, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0xfffffefe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000001940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="81222c754973"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x80, 0xfffffe3d, 0x1, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'caif0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2d, 0xa, 0x7, 0x3, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x8000, 0x5, 0x6}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r11) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="240003"], 0x10e0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x4, 0x7f, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x54, 0x50, 0x3, 0x3, [{@rand_addr=0x64010100}, {@local, 0x4}, {@empty, 0x17}, {@private=0xa010102, 0x8}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@multicast1, 0xc2cc}, {@multicast2, 0x2}, {@remote, 0x3}, {@empty, 0x9}]}, @cipso={0x86, 0x12, 0x1, [{0x5, 0x2}, {0x5, 0xa, "36838e70a071f6d3"}]}, @rr={0x7, 0x7, 0xad, [@remote]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000001c40)={0x154, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x140b8dd22bca59ee}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x154}}, 0x20000001) 878.265911ms ago: executing program 4 (id=10143): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x80000, 0xfc) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000100)=""/125, 0x7d}) r2 = socket$inet6(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x7866f212, 0xb9, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x66, 0x0, 0xd6, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x17, 0xb3, [@dev={0xac, 0x14, 0x14, 0x30}, @remote, @local, @loopback, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@broadcast, 0xce9}]}, @rr={0x7, 0x13, 0xf5, [@empty, @broadcast, @multicast1, @local]}, @end, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "e27386"}]}, @rr={0x7, 0x13, 0x8d, [@multicast1, @multicast1, @multicast1, @broadcast]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x4048091) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000009ba3adc7d8f1b2517a77000000000000850000002500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r11}, 0xc) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000001000000000c00020001000000150000000c000c8008000200fa0d00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r14, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500921401000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x64, r14, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x11}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x64}}, 0x810) 760.972432ms ago: executing program 1 (id=10144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a0000006d0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0x0, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd21, 0x3500, 0x2, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x40}}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x0, @in=@local}}]}, 0x170}}, 0x24008800) 523.984111ms ago: executing program 3 (id=10145): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611073000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb, 0x200, 0x2}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) 235.733864ms ago: executing program 1 (id=10146): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0xa}, 0x1, 0x0, 0x0, 0x40400c4}, 0x40c0) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe12, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x3, @any, 0x7a, 0x2}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) write(r0, &(0x7f00000006c0)="3b000000010006", 0x7) 111.773936ms ago: executing program 4 (id=10147): syz_emit_ethernet(0x81, &(0x7f0000000600)={@multicast, @random="73fd8541f8e6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4b, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x0, 0x6, "fd7609", 0x8, 0x32, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "37ff49a30a299d88e9d04bd0f569ddc883fe285eba17b3ff7a7498"}}}}}}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="bae95cdf95d340cfd44057afae281f96228b989929b5437e4f90a59ff16eabbff3e3b4abdda003062a0a649305374338a67444ab1bb81e3d1ed942e2b7d4c41a1fa6", 0x42}], 0x1, 0x8) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="bae95cdf95d340cfd44057afae281f96228b989929b5437e4f90a59ff16eabbff3e3b4abdda003062a0a649305374338a67444ab1bb81e3d1ed942e2b7d4c41a1fa6", 0x42}], 0x1, 0x8) 41.385826ms ago: executing program 3 (id=10148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) recvmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x3, &(0x7f00000007c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x40002000, &(0x7f0000000840)={0x0, 0x989680}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000071000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000003c0)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.908355ms ago: executing program 2 (id=10149): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x437, 0xffdffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x40044) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x40044) 0s ago: executing program 0 (id=10150): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x7c) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) close(r3) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) kernel console output (not intermixed with test programs): tributes in process `syz.0.8950'. [ 1293.988831][ T6539] tipc: Disabling bearer [ 1294.054272][ T6539] tipc: Left network mode [ 1294.406011][ T5630] Bluetooth: hci2: command tx timeout [ 1294.441289][ T9729] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1294.453162][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8955'. [ 1294.462795][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8955'. [ 1294.471873][ T9739] netlink: 'syz.4.8955': attribute type 20 has an invalid length. [ 1294.487751][ T9729] tc_dump_action: action bad kind [ 1294.769248][ T9743] dvmrp0: left allmulticast mode [ 1294.788214][ T9743] dvmrp8: left allmulticast mode [ 1294.943439][ T9758] __nla_validate_parse: 2 callbacks suppressed [ 1294.943463][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8958'. [ 1295.597159][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8961'. [ 1295.688371][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1295.698204][ T9782] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8962'. [ 1295.735752][ T9782] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8962'. [ 1295.796481][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8963'. [ 1295.797870][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8963'. [ 1295.885615][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.936511][ T9546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.955295][ T9546] bridge_slave_0: entered allmulticast mode [ 1296.005320][ T9546] bridge_slave_0: entered promiscuous mode [ 1296.040864][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.050342][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.070936][ T9546] bridge_slave_1: entered allmulticast mode [ 1296.085101][ T9546] bridge_slave_1: entered promiscuous mode [ 1296.114656][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8965'. [ 1296.251773][ T30] audit: type=1804 audit(1777837777.884:36): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8964" name="/newroot/483/cgroup.controllers" dev="tmpfs" ino=2479 res=1 errno=0 [ 1296.355985][ T30] audit: type=1800 audit(1777837777.904:37): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8964" name="cgroup.controllers" dev="tmpfs" ino=2479 res=0 errno=0 [ 1296.482419][ T5630] Bluetooth: hci2: command tx timeout [ 1296.749548][ T9546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.780376][ T9804] syzkaller1: entered promiscuous mode [ 1296.786491][ T9804] syzkaller1: entered allmulticast mode [ 1296.821541][ T9546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.296432][ T9546] team0: Port device team_slave_0 added [ 1297.339661][ T9546] team0: Port device team_slave_1 added [ 1297.381068][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1297.508580][ T9840] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1297.586882][ T9834] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1297.613363][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.665583][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.758908][ T9546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.799870][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.808452][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1297.818195][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.848311][ T9546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.934999][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1298.086896][ T9853] netlink: 'syz.4.8974': attribute type 30 has an invalid length. [ 1298.326172][ T9546] hsr_slave_0: entered promiscuous mode [ 1298.357511][ T9546] hsr_slave_1: entered promiscuous mode [ 1298.374579][ T9546] debugfs: 'hsr0' already exists in 'hsr' [ 1298.380540][ T9546] Cannot create hsr debugfs directory [ 1298.704345][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8979'. [ 1299.556220][ T9886] netlink: 'syz.0.8982': attribute type 1 has an invalid length. [ 1299.820897][ T9886] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1299.936526][ T9894] bond13: (slave ip6gretap2): making interface the new active one [ 1299.957647][ T9894] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1299.968086][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1300.398502][ T6539] IPVS: stop unused estimator thread 0... [ 1300.638685][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1300.680202][ T9932] sctp: [Deprecated]: syz.0.8990 (pid 9932) Use of int in max_burst socket option deprecated. [ 1300.680202][ T9932] Use struct sctp_assoc_value instead [ 1300.711201][ T9935] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1300.751217][ T9935] atomic_op ffff88802be8e998 conn xmit_atomic 0000000000000000 [ 1301.100118][ T9947] netlink: 'syz.0.8995': attribute type 1 has an invalid length. [ 1301.196591][ T9953] netlink: 'syz.1.8997': attribute type 1 has an invalid length. [ 1301.220873][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.832837][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1301.875591][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1301.904168][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9001'. [ 1301.913537][ T9976] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1301.925280][ T9976] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1302.789551][ T9546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1302.853709][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1302.896277][ T9546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1302.937301][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1302.971156][ T9546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1303.016643][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1303.046267][ T9546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1303.070618][ T9546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1303.375960][ T9546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.463732][ T9546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.523192][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.530469][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.615797][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.623088][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.991493][T10043] syzkaller0: entered promiscuous mode [ 1303.998376][T10043] syzkaller0: entered allmulticast mode [ 1304.033718][T10005] netlink: 'syz.1.9007': attribute type 1 has an invalid length. [ 1304.176858][T10005] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1304.498304][T10058] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.991364][T10079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9016'. [ 1305.211159][T10058] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.457169][T10058] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.781993][T10058] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.421986][ T9546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.648742][T10116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.776863][ T6555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.798612][T10125] netlink: 'syz.1.9021': attribute type 1 has an invalid length. [ 1306.926540][T10125] bond13: entered promiscuous mode [ 1306.941266][T10125] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1306.970461][ T6545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.125154][ T6545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.155800][ T9546] veth0_vlan: entered promiscuous mode [ 1307.243003][ T6555] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.260584][ T9546] veth1_vlan: entered promiscuous mode [ 1307.420283][ T9546] veth0_macvtap: entered promiscuous mode [ 1307.479506][ T9546] veth1_macvtap: entered promiscuous mode [ 1307.578082][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.665224][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.716564][ T6559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.759526][ T6559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.810668][ T6559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.846554][ T6559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.461667][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1308.517890][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1308.534263][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1308.583360][T10164] team0: entered promiscuous mode [ 1308.588620][T10164] team0: entered allmulticast mode [ 1308.602888][T10164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.616152][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.639447][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.745963][T10163] team1: entered promiscuous mode [ 1308.755446][T10163] team1: entered allmulticast mode [ 1308.761285][T10163] 8021q: adding VLAN 0 to HW filter on device team1 [ 1308.794946][T10165] team2: entered promiscuous mode [ 1308.802515][T10165] team2: entered allmulticast mode [ 1308.816338][T10165] 8021q: adding VLAN 0 to HW filter on device team2 [ 1308.901472][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9031'. [ 1309.122175][ T6549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.170442][ T6549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.456658][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8913'. [ 1309.500594][T10190] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8913'. [ 1309.529011][T10190] netlink: 'syz.2.8913': attribute type 9 has an invalid length. [ 1309.947922][T10198] syzkaller0: entered promiscuous mode [ 1309.971875][T10198] syzkaller0: entered allmulticast mode [ 1310.576002][T10239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9042'. [ 1311.039996][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1316.658417][T10308] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 1316.770306][T10315] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1316.812944][T10315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1316.931656][T10313] netlink: 'syz.1.9051': attribute type 1 has an invalid length. [ 1316.955513][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9052'. [ 1316.973003][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1317.160388][T10334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9056'. [ 1317.768381][T20191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1317.787445][T20191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1317.797794][T20191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1317.810833][T20191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1317.826781][T20191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.165268][T10365] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.300589][T10365] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.388880][T10376] netlink: 'syz.2.9064': attribute type 10 has an invalid length. [ 1318.408973][T10376] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9064'. [ 1318.432090][T10376] veth1_virt_wifi: entered promiscuous mode [ 1318.446886][T10376] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1318.465728][T10376] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1318.475883][T10376] veth1_virt_wifi: entered allmulticast mode [ 1318.487925][T10376] veth1_virt_wifi: left allmulticast mode [ 1318.498061][T10365] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.517603][T10378] xt_bpf: check failed: parse error [ 1318.609312][T10365] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.681977][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9066'. [ 1318.813508][T10381] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1318.816778][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9067'. [ 1318.917834][ T6559] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.024922][ T1030] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.033977][ T1030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.055158][ T6559] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.847469][T10412] syzkaller1: entered promiscuous mode [ 1319.853506][T10412] syzkaller1: entered allmulticast mode [ 1319.955289][T20191] Bluetooth: hci4: command tx timeout [ 1320.685540][T10427] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1320.858467][T10432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.954868][T10356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.964562][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.972019][T10356] bridge_slave_0: entered allmulticast mode [ 1320.981422][T10356] bridge_slave_0: entered promiscuous mode [ 1320.996018][T10356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.003599][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.011053][T10356] bridge_slave_1: entered allmulticast mode [ 1321.020113][T10356] bridge_slave_1: entered promiscuous mode [ 1321.037114][T10441] netlink: 'syz.4.9081': attribute type 1 has an invalid length. [ 1321.111368][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.169280][T10443] pim6reg: entered allmulticast mode [ 1321.239387][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.389560][T10356] team0: Port device team_slave_0 added [ 1321.411315][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1321.421367][T10356] team0: Port device team_slave_1 added [ 1321.544237][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.560133][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.587624][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.613697][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.636235][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.686894][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.808415][T10356] hsr_slave_0: entered promiscuous mode [ 1321.815933][T10356] hsr_slave_1: entered promiscuous mode [ 1321.823377][T10356] debugfs: 'hsr0' already exists in 'hsr' [ 1321.829318][T10356] Cannot create hsr debugfs directory [ 1321.989429][T10476] netlink: 'syz.4.9092': attribute type 9 has an invalid length. [ 1321.998623][T10476] netlink: 'syz.4.9092': attribute type 7 has an invalid length. [ 1322.007229][T10476] netlink: 'syz.4.9092': attribute type 8 has an invalid length. [ 1322.014479][T20191] Bluetooth: hci4: command tx timeout [ 1322.121408][T10356] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.131943][T10356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49055 - 0 [ 1322.143585][T10356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1322.154280][T10356] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1322.371942][T10356] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.399239][T10356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49055 - 0 [ 1322.411916][T10356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1322.425971][T10492] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1322.435373][T10356] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1322.443580][T10492] netlink: 'syz.3.9097': attribute type 1 has an invalid length. [ 1322.508375][T10492] bond13: entered promiscuous mode [ 1322.524364][T10492] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1322.545252][T10496] vlan4: entered allmulticast mode [ 1322.550435][T10496] bond13: entered allmulticast mode [ 1322.584742][T10356] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.595421][T10356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49055 - 0 [ 1322.607129][T10356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1322.617633][T10356] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1322.682119][T10492] bond13: (slave bridge8): making interface the new active one [ 1322.693812][T10492] bridge8: entered promiscuous mode [ 1322.701534][T10492] bridge8: entered allmulticast mode [ 1322.711766][T10492] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 1322.764112][T10356] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.791263][T10356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49055 - 0 [ 1322.804080][T10356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1322.832306][T10356] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1322.956733][T10511] gtp2: entered promiscuous mode [ 1322.961813][T10511] gtp2: entered allmulticast mode [ 1322.970132][T10513] __nla_validate_parse: 1 callbacks suppressed [ 1322.970155][T10513] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9103'. [ 1322.988628][T10513] netlink: Unknown conntrack attr (0) [ 1323.074454][T10513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.094488][T10513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.119822][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.173425][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9106'. [ 1323.209263][T10513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.220964][T10513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.233935][T10513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.249795][T10513] veth1_vlan: left promiscuous mode [ 1323.256496][T10513] veth0_vlan: left promiscuous mode [ 1323.263111][T10513] veth0_vlan: entered promiscuous mode [ 1323.273533][T10513] veth1_vlan: entered promiscuous mode [ 1323.284259][T10513] veth1_macvtap: left promiscuous mode [ 1323.291034][T10513] veth0_macvtap: left promiscuous mode [ 1323.299449][T10513] veth0_macvtap: entered promiscuous mode [ 1323.307985][T10513] veth1_macvtap: entered promiscuous mode [ 1323.324870][T10513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1323.335446][T10513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1323.357146][T10524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9106'. [ 1323.360044][T10513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1323.375645][T10513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1323.384250][T10513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1323.401887][T10513] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 1323.431454][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.438764][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.585020][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1323.750896][T10519] gre1: entered allmulticast mode [ 1323.807061][ T6549] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.830835][T10524] team_slave_0: entered promiscuous mode [ 1323.860527][ T6549] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.898452][ T6549] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.934515][ T6549] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.968606][ T6539] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1323.998254][T13720] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1324.007095][ T6539] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1324.043130][T13720] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1324.070299][T10537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.092358][T20191] Bluetooth: hci4: command tx timeout [ 1324.137195][ T6539] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1324.148690][ T6539] bond4: (slave veth7): making interface the new active one [ 1324.170015][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9110'. [ 1324.182021][ T6539] bond4: active interface up! [ 1324.551625][T10356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1324.574043][T10356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1324.595249][T10356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1324.619225][T10356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.635230][T10356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1324.665527][T10356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.688806][T10356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1324.729168][T10356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1324.790898][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1324.822503][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1324.840266][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1324.850954][T10563] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1324.884164][T13724] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1325.106732][T10356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.176611][T10356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.227822][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.235141][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.283640][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.291189][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.317714][T10573] netlink: 'syz.4.9121': attribute type 1 has an invalid length. [ 1325.357065][T10573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1325.391178][T10575] openvswitch: netlink: Flow actions attr not present in new flow. [ 1325.712836][T10586] pim6reg1: entered promiscuous mode [ 1325.726676][T10586] pim6reg1: entered allmulticast mode [ 1326.139832][T10597] syzkaller0: entered promiscuous mode [ 1326.151420][T10597] syzkaller0: entered allmulticast mode [ 1326.163070][T20191] Bluetooth: hci4: command tx timeout [ 1326.339158][T10356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.500744][T10356] veth0_vlan: entered promiscuous mode [ 1326.545038][T10356] veth1_vlan: entered promiscuous mode [ 1326.605494][T10618] veth1_macvtap: left promiscuous mode [ 1326.622580][T10618] macsec0: entered promiscuous mode [ 1326.641975][T10618] veth1_macvtap: entered promiscuous mode [ 1326.666052][T10618] macsec0: left promiscuous mode [ 1326.675616][T10618] netlink: 'syz.0.9135': attribute type 1 has an invalid length. [ 1326.755213][T10356] veth0_macvtap: entered promiscuous mode [ 1326.808261][T10356] veth1_macvtap: entered promiscuous mode [ 1326.865576][T10626] syzkaller0: entered promiscuous mode [ 1326.879192][T10626] syzkaller0: entered allmulticast mode [ 1326.898455][T10356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.912754][T10633] sctp: [Deprecated]: syz.3.9141 (pid 10633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.912754][T10633] Use struct sctp_sack_info instead [ 1326.947385][T10356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.006862][ T6559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.025772][ T6559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.258437][ T6559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.304297][ T6559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.556083][T10648] nftables ruleset with unbound chain [ 1327.573799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.607064][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.711177][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.730428][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.825776][T10659] netlink: 'syz.3.9147': attribute type 1 has an invalid length. [ 1328.003673][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1328.446002][T10685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1328.514050][T10686] __nla_validate_parse: 6 callbacks suppressed [ 1328.514066][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1328.554920][T10688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1328.785343][T10691] bond1: option arp_interval: invalid value (18446744073709551615) [ 1328.802824][T10691] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1328.825259][T10691] bond1 (unregistering): Released all slaves [ 1329.115534][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9161'. [ 1329.372094][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9162'. [ 1329.402108][T10707] bond0: entered allmulticast mode [ 1329.413127][T10707] bond_slave_0: entered allmulticast mode [ 1329.431448][T10707] bond_slave_1: entered allmulticast mode [ 1329.513427][T10713] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1329.639514][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9166'. [ 1329.713445][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1329.754535][T10720] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1329.805373][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1330.318034][T10740] nbd: must specify a size in bytes for the device [ 1330.341586][T10740] nbd: must specify an index to disconnect [ 1330.537465][T10755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1330.563889][ T809] team_slave_0: entered promiscuous mode [ 1330.569728][ T809] team_slave_1: entered promiscuous mode [ 1331.016317][T10784] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1331.075027][T10788] FAULT_INJECTION: forcing a failure. [ 1331.075027][T10788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.096958][T10788] CPU: 1 UID: 0 PID: 10788 Comm: syz.1.9186 Not tainted syzkaller #0 PREEMPT(full) [ 1331.096993][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1331.097009][T10788] Call Trace: [ 1331.097020][T10788] [ 1331.097031][T10788] dump_stack_lvl+0xe8/0x150 [ 1331.097064][T10788] should_fail_ex+0x412/0x560 [ 1331.097101][T10788] _copy_from_iter+0x1d3/0x1670 [ 1331.097135][T10788] ? rcu_is_watching+0x15/0xb0 [ 1331.097169][T10788] ? __pfx__copy_from_iter+0x10/0x10 [ 1331.097207][T10788] ? netlink_sendmsg+0x650/0xb40 [ 1331.097234][T10788] ? skb_put+0x11b/0x210 [ 1331.097265][T10788] netlink_sendmsg+0x6c0/0xb40 [ 1331.097304][T10788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.097336][T10788] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1331.097373][T10788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1331.097408][T10788] ____sys_sendmsg+0x972/0x9f0 [ 1331.097436][T10788] ? __might_fault+0xaf/0x130 [ 1331.097476][T10788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.097515][T10788] ? import_iovec+0x73/0xa0 [ 1331.097550][T10788] ___sys_sendmsg+0x2a5/0x360 [ 1331.097577][T10788] ? __lock_acquire+0x6b5/0x2cf0 [ 1331.097606][T10788] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.097674][T10788] ? __fget_files+0x2a/0x420 [ 1331.097700][T10788] ? __fget_files+0x3a0/0x420 [ 1331.097737][T10788] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1331.097770][T10788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1331.097810][T10788] ? __pfx_ksys_write+0x10/0x10 [ 1331.097851][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.097875][T10788] do_syscall_64+0x15f/0xf80 [ 1331.097902][T10788] ? trace_irq_disable+0x3b/0x140 [ 1331.097934][T10788] ? clear_bhb_loop+0x40/0x90 [ 1331.097962][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.097984][T10788] RIP: 0033:0x7fd27299cdd9 [ 1331.098005][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.098026][T10788] RSP: 002b:00007fd270bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.098051][T10788] RAX: ffffffffffffffda RBX: 00007fd272c16090 RCX: 00007fd27299cdd9 [ 1331.098067][T10788] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1331.098081][T10788] RBP: 00007fd270bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.098095][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.098108][T10788] R13: 00007fd272c16128 R14: 00007fd272c16090 R15: 00007ffe118952f8 [ 1331.098144][T10788] [ 1331.952149][T10805] tipc: Enabled bearer , priority 0 [ 1332.096865][T10823] FAULT_INJECTION: forcing a failure. [ 1332.096865][T10823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.121476][T10822] netlink: 'syz.4.9193': attribute type 1 has an invalid length. [ 1332.148718][T10823] CPU: 0 UID: 0 PID: 10823 Comm: syz.3.9199 Not tainted syzkaller #0 PREEMPT(full) [ 1332.148750][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1332.148765][T10823] Call Trace: [ 1332.148774][T10823] [ 1332.148784][T10823] dump_stack_lvl+0xe8/0x150 [ 1332.148815][T10823] should_fail_ex+0x412/0x560 [ 1332.148849][T10823] _copy_from_iter+0x1d3/0x1670 [ 1332.148882][T10823] ? rcu_is_watching+0x15/0xb0 [ 1332.148916][T10823] ? __pfx__copy_from_iter+0x10/0x10 [ 1332.148955][T10823] ? netlink_sendmsg+0x650/0xb40 [ 1332.148982][T10823] ? skb_put+0x11b/0x210 [ 1332.149012][T10823] netlink_sendmsg+0x6c0/0xb40 [ 1332.149162][T10823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.149209][T10823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1332.149241][T10823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1332.149284][T10823] ____sys_sendmsg+0x972/0x9f0 [ 1332.149313][T10823] ? __might_fault+0xaf/0x130 [ 1332.149349][T10823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1332.149386][T10823] ? import_iovec+0x73/0xa0 [ 1332.149421][T10823] ___sys_sendmsg+0x2a5/0x360 [ 1332.149448][T10823] ? __lock_acquire+0x6b5/0x2cf0 [ 1332.149478][T10823] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.149544][T10823] ? __fget_files+0x2a/0x420 [ 1332.149570][T10823] ? __fget_files+0x3a0/0x420 [ 1332.149608][T10823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1332.149641][T10823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1332.149682][T10823] ? __pfx_ksys_write+0x10/0x10 [ 1332.149725][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.149750][T10823] do_syscall_64+0x15f/0xf80 [ 1332.149776][T10823] ? trace_irq_disable+0x3b/0x140 [ 1332.149809][T10823] ? clear_bhb_loop+0x40/0x90 [ 1332.149837][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.149859][T10823] RIP: 0033:0x7fd880d9cdd9 [ 1332.149881][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.149900][T10823] RSP: 002b:00007fd87efd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.149924][T10823] RAX: ffffffffffffffda RBX: 00007fd881016090 RCX: 00007fd880d9cdd9 [ 1332.149940][T10823] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1332.149964][T10823] RBP: 00007fd87efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.149983][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.149997][T10823] R13: 00007fd881016128 R14: 00007fd881016090 R15: 00007ffd8e6a56b8 [ 1332.150029][T10823] [ 1332.525967][T10826] netlink: 'syz.1.9200': attribute type 29 has an invalid length. [ 1332.847646][T10804] tipc: Disabling bearer [ 1332.931741][T10845] syzkaller0: entered promiscuous mode [ 1332.949474][T10845] syzkaller0: entered allmulticast mode [ 1333.283462][T10875] FAULT_INJECTION: forcing a failure. [ 1333.283462][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.328860][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.4.9213 Not tainted syzkaller #0 PREEMPT(full) [ 1333.328891][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1333.328905][T10875] Call Trace: [ 1333.328915][T10875] [ 1333.328933][T10875] dump_stack_lvl+0xe8/0x150 [ 1333.328964][T10875] should_fail_ex+0x412/0x560 [ 1333.328998][T10875] should_failslab+0xa8/0x100 [ 1333.329035][T10875] __kmalloc_noprof+0xe8/0x760 [ 1333.329066][T10875] ? fib_nl2rule+0x2e9/0x1a00 [ 1333.329102][T10875] fib_nl2rule+0x2e9/0x1a00 [ 1333.329136][T10875] ? __pfx_fib_nl2rule+0x10/0x10 [ 1333.329168][T10875] ? __nla_parse+0x40/0x60 [ 1333.329202][T10875] fib_delrule+0x328/0x1d70 [ 1333.329232][T10875] ? is_bpf_text_address+0x26/0x2b0 [ 1333.329267][T10875] ? is_bpf_text_address+0x26/0x2b0 [ 1333.329298][T10875] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.329325][T10875] ? __pfx_fib_delrule+0x10/0x10 [ 1333.329397][T10875] ? __pfx_fib_nl_delrule+0x10/0x10 [ 1333.329426][T10875] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1333.329451][T10875] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1333.329484][T10875] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1333.329509][T10875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1333.329536][T10875] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.329572][T10875] netlink_rcv_skb+0x232/0x4b0 [ 1333.329602][T10875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1333.329627][T10875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1333.329669][T10875] ? netlink_deliver_tap+0x2e/0x1b0 [ 1333.329696][T10875] ? netlink_deliver_tap+0x2e/0x1b0 [ 1333.329730][T10875] netlink_unicast+0x75c/0x8e0 [ 1333.329767][T10875] netlink_sendmsg+0x813/0xb40 [ 1333.329804][T10875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.329835][T10875] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1333.329864][T10875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1333.329898][T10875] ____sys_sendmsg+0x972/0x9f0 [ 1333.329937][T10875] ? __might_fault+0xaf/0x130 [ 1333.329973][T10875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.330012][T10875] ? import_iovec+0x73/0xa0 [ 1333.330048][T10875] ___sys_sendmsg+0x2a5/0x360 [ 1333.330076][T10875] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.330105][T10875] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.330172][T10875] ? __fget_files+0x2a/0x420 [ 1333.330199][T10875] ? __fget_files+0x3a0/0x420 [ 1333.330236][T10875] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1333.330269][T10875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.330309][T10875] ? __pfx_ksys_write+0x10/0x10 [ 1333.330350][T10875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.330375][T10875] do_syscall_64+0x15f/0xf80 [ 1333.330401][T10875] ? trace_irq_disable+0x3b/0x140 [ 1333.330434][T10875] ? clear_bhb_loop+0x40/0x90 [ 1333.330461][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.330483][T10875] RIP: 0033:0x7ff4ed59cdd9 [ 1333.330504][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.330524][T10875] RSP: 002b:00007ff4ee437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.330547][T10875] RAX: ffffffffffffffda RBX: 00007ff4ed815fa0 RCX: 00007ff4ed59cdd9 [ 1333.330563][T10875] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1333.330578][T10875] RBP: 00007ff4ee437090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.330592][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.330605][T10875] R13: 00007ff4ed816038 R14: 00007ff4ed815fa0 R15: 00007ffd5763c068 [ 1333.330641][T10875] [ 1333.331868][T10859] syzkaller1: entered promiscuous mode [ 1333.711878][T10859] syzkaller1: entered allmulticast mode [ 1333.937248][T10881] veth1_virt_wifi: left promiscuous mode [ 1334.015633][T10881] gre1: left allmulticast mode [ 1334.048992][T10881] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1334.080138][T10885] __nla_validate_parse: 10 callbacks suppressed [ 1334.080160][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9216'. [ 1334.173347][T10877] syzkaller1: entered promiscuous mode [ 1334.195983][T10877] syzkaller1: entered allmulticast mode [ 1334.257451][T10898] netlink: 'syz.1.9219': attribute type 1 has an invalid length. [ 1334.290732][T10898] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9219'. [ 1334.720207][T10924] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9226'. [ 1334.763842][T10924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9226'. [ 1334.786968][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1334.796361][T10924] FAULT_INJECTION: forcing a failure. [ 1334.796361][T10924] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.818977][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.4.9226 Not tainted syzkaller #0 PREEMPT(full) [ 1334.819020][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1334.819035][T10924] Call Trace: [ 1334.819045][T10924] [ 1334.819055][T10924] dump_stack_lvl+0xe8/0x150 [ 1334.819087][T10924] should_fail_ex+0x412/0x560 [ 1334.819121][T10924] should_failslab+0xa8/0x100 [ 1334.819162][T10924] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1334.819192][T10924] ? __alloc_skb+0x186/0x7d0 [ 1334.819217][T10924] ? __alloc_skb+0x1d0/0x7d0 [ 1334.819237][T10924] ? __local_bh_enable_ip+0xd0/0x130 [ 1334.819266][T10924] __alloc_skb+0x1d0/0x7d0 [ 1334.819291][T10924] ? netlink_ack_tlv_len+0x6c/0x210 [ 1334.819322][T10924] netlink_ack+0x146/0xa50 [ 1334.819346][T10924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1334.819374][T10924] ? __lock_acquire+0x6b5/0x2cf0 [ 1334.819413][T10924] netlink_rcv_skb+0x2b6/0x4b0 [ 1334.819441][T10924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1334.819469][T10924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1334.819511][T10924] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.819538][T10924] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.819571][T10924] netlink_unicast+0x75c/0x8e0 [ 1334.819608][T10924] netlink_sendmsg+0x813/0xb40 [ 1334.819646][T10924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.819678][T10924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1334.819709][T10924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1334.819743][T10924] ____sys_sendmsg+0x972/0x9f0 [ 1334.819772][T10924] ? __might_fault+0xaf/0x130 [ 1334.819807][T10924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.819847][T10924] ? import_iovec+0x73/0xa0 [ 1334.819883][T10924] ___sys_sendmsg+0x2a5/0x360 [ 1334.819910][T10924] ? __lock_acquire+0x6b5/0x2cf0 [ 1334.819939][T10924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.820014][T10924] ? __fget_files+0x2a/0x420 [ 1334.820040][T10924] ? __fget_files+0x3a0/0x420 [ 1334.820078][T10924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1334.820111][T10924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1334.820152][T10924] ? __pfx_ksys_write+0x10/0x10 [ 1334.820193][T10924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.820218][T10924] do_syscall_64+0x15f/0xf80 [ 1334.820244][T10924] ? trace_irq_disable+0x3b/0x140 [ 1334.820277][T10924] ? clear_bhb_loop+0x40/0x90 [ 1334.820305][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.820327][T10924] RIP: 0033:0x7ff4ed59cdd9 [ 1334.820348][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.820368][T10924] RSP: 002b:00007ff4ee437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.820393][T10924] RAX: ffffffffffffffda RBX: 00007ff4ed815fa0 RCX: 00007ff4ed59cdd9 [ 1334.820409][T10924] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1334.820424][T10924] RBP: 00007ff4ee437090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.820438][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.820452][T10924] R13: 00007ff4ed816038 R14: 00007ff4ed815fa0 R15: 00007ffd5763c068 [ 1334.820484][T10924] [ 1335.211249][T10930] netlink: 'syz.1.9229': attribute type 4 has an invalid length. [ 1335.265939][T10934] netlink: 'syz.1.9229': attribute type 4 has an invalid length. [ 1335.277807][T10932] syzkaller1: entered promiscuous mode [ 1335.298492][T10932] syzkaller1: entered allmulticast mode [ 1335.419616][T10938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.427573][T10938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.514671][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9229'. [ 1335.540660][T10938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.554609][T10938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.682562][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1335.751644][T10942] bond0: entered allmulticast mode [ 1335.770985][T10942] bond_slave_0: entered allmulticast mode [ 1335.781008][T10942] bond_slave_1: entered allmulticast mode [ 1335.824758][ T6555] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.852634][ T6555] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.938897][ T6555] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.958272][ T6555] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.160718][T10966] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1336.201625][T10966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1336.229288][T10966] FAULT_INJECTION: forcing a failure. [ 1336.229288][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.282033][T10977] siw: device registration error -23 [ 1336.290163][T10966] CPU: 1 UID: 0 PID: 10966 Comm: syz.3.9241 Not tainted syzkaller #0 PREEMPT(full) [ 1336.290193][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1336.290208][T10966] Call Trace: [ 1336.290217][T10966] [ 1336.290227][T10966] dump_stack_lvl+0xe8/0x150 [ 1336.290258][T10966] should_fail_ex+0x412/0x560 [ 1336.290292][T10966] should_failslab+0xa8/0x100 [ 1336.290328][T10966] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1336.290358][T10966] ? __alloc_skb+0x186/0x7d0 [ 1336.290382][T10966] ? __alloc_skb+0x1d0/0x7d0 [ 1336.290405][T10966] ? __local_bh_enable_ip+0xd0/0x130 [ 1336.290434][T10966] __alloc_skb+0x1d0/0x7d0 [ 1336.290458][T10966] ? netlink_ack_tlv_len+0x6c/0x210 [ 1336.290487][T10966] netlink_ack+0x146/0xa50 [ 1336.290511][T10966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1336.290535][T10966] ? ref_tracker_free+0x693/0x840 [ 1336.290568][T10966] ? __pfx_ref_tracker_free+0x10/0x10 [ 1336.290609][T10966] netlink_rcv_skb+0x2b6/0x4b0 [ 1336.290639][T10966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1336.290667][T10966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1336.290709][T10966] ? netlink_deliver_tap+0x2e/0x1b0 [ 1336.290736][T10966] ? netlink_deliver_tap+0x2e/0x1b0 [ 1336.290771][T10966] netlink_unicast+0x75c/0x8e0 [ 1336.290807][T10966] netlink_sendmsg+0x813/0xb40 [ 1336.290845][T10966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1336.290878][T10966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1336.290908][T10966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1336.290949][T10966] ____sys_sendmsg+0x972/0x9f0 [ 1336.290979][T10966] ? __might_fault+0xaf/0x130 [ 1336.291015][T10966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1336.291054][T10966] ? import_iovec+0x73/0xa0 [ 1336.291090][T10966] ___sys_sendmsg+0x2a5/0x360 [ 1336.291118][T10966] ? __lock_acquire+0x6b5/0x2cf0 [ 1336.291148][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.291214][T10966] ? __fget_files+0x2a/0x420 [ 1336.291240][T10966] ? __fget_files+0x3a0/0x420 [ 1336.291278][T10966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1336.291310][T10966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1336.291350][T10966] ? __pfx_ksys_write+0x10/0x10 [ 1336.291391][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.291416][T10966] do_syscall_64+0x15f/0xf80 [ 1336.291442][T10966] ? trace_irq_disable+0x3b/0x140 [ 1336.291474][T10966] ? clear_bhb_loop+0x40/0x90 [ 1336.291501][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.291524][T10966] RIP: 0033:0x7fd880d9cdd9 [ 1336.291544][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.291565][T10966] RSP: 002b:00007fd87eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.291589][T10966] RAX: ffffffffffffffda RBX: 00007fd881015fa0 RCX: 00007fd880d9cdd9 [ 1336.291610][T10966] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1336.291625][T10966] RBP: 00007fd87eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.291638][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.291652][T10966] R13: 00007fd881016038 R14: 00007fd881015fa0 R15: 00007ffd8e6a56b8 [ 1336.291687][T10966] [ 1336.786428][T10989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9246'. [ 1336.834613][ T30] audit: type=1107 audit(1777837818.474:38): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1339.193698][T10969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1339.329939][T10998] netlink: 'syz.4.9247': attribute type 1 has an invalid length. [ 1339.343749][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1339.380762][T10998] netlink: 'syz.4.9247': attribute type 2 has an invalid length. [ 1340.156801][T13732] IPVS: starting estimator thread 0... [ 1340.252353][T11034] IPVS: using max 25 ests per chain, 60000 per kthread [ 1340.388590][T11036] netlink: 'syz.2.9259': attribute type 1 has an invalid length. [ 1340.629128][T11044] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1340.756130][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1340.793155][T11049] team_slave_1: Caught tx_queue_len zero misconfig [ 1340.895479][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.915067][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.924727][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1340.942153][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1340.957771][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1341.729900][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1342.400892][T11097] netlink: 'syz.1.9271': attribute type 29 has an invalid length. [ 1342.439646][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9271'. [ 1342.934788][T11114] syzkaller0: entered promiscuous mode [ 1342.963983][T11114] syzkaller0: entered allmulticast mode [ 1343.055959][T20191] Bluetooth: hci0: command tx timeout [ 1343.202693][T11122] sctp: [Deprecated]: syz.4.9279 (pid 11122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1343.202693][T11122] Use struct sctp_sack_info instead [ 1343.307809][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1343.339646][T11129] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1343.476747][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1343.714422][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1343.871366][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9288'. [ 1344.348985][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.379116][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.405681][T11054] bridge_slave_0: entered allmulticast mode [ 1344.427512][T11054] bridge_slave_0: entered promiscuous mode [ 1344.453075][T11183] netlink: 758 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1344.474002][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.492161][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.510153][T11054] bridge_slave_1: entered allmulticast mode [ 1344.528937][T11054] bridge_slave_1: entered promiscuous mode [ 1344.648811][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.678991][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.893278][T11054] team0: Port device team_slave_0 added [ 1344.920950][T11054] team0: Port device team_slave_1 added [ 1344.955694][T11196] netlink: 'syz.4.9296': attribute type 1 has an invalid length. [ 1345.106016][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.114867][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.141498][T20191] Bluetooth: hci0: command tx timeout [ 1345.147827][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.207247][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.231034][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.264845][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9295'. [ 1345.275404][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.339876][T11203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9296'. [ 1345.384870][T11196] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1345.401233][T11196] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 1345.471008][T11203] bond15: (slave bridge4): Enslaving as an active interface with a down link [ 1345.733376][T11054] hsr_slave_0: entered promiscuous mode [ 1345.756324][T11054] hsr_slave_1: entered promiscuous mode [ 1345.779489][T11054] debugfs: 'hsr0' already exists in 'hsr' [ 1345.793816][T11054] Cannot create hsr debugfs directory [ 1346.096608][T11054] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.109150][T11054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.224440][T11054] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.234670][T11054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.281888][ T30] audit: type=1804 audit(1777837827.914:39): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9308" name="/newroot/67/cgroup.controllers" dev="tmpfs" ino=359 res=1 errno=0 [ 1346.308883][ T30] audit: type=1800 audit(1777837827.944:40): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9308" name="cgroup.controllers" dev="tmpfs" ino=359 res=0 errno=0 [ 1346.370438][T11054] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.385425][T11054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.525020][T11054] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.553692][T11054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.084594][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1347.117446][T11286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1347.203522][T20191] Bluetooth: hci0: command tx timeout [ 1347.243039][T11280] bond1: Unable to set up delay as MII monitoring is disabled [ 1347.315323][T11280] bond1 (unregistering): Released all slaves [ 1347.431187][T11290] netlink: 'syz.1.9316': attribute type 4 has an invalid length. [ 1347.497613][T11301] sctp: [Deprecated]: syz.4.9323 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1347.497613][T11301] Use struct sctp_sack_info instead [ 1347.536617][T11303] netlink: 'syz.2.9324': attribute type 12 has an invalid length. [ 1347.545038][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9324'. [ 1347.662743][T11054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1347.704266][T11054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1347.732531][T11054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1347.761316][T11054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1347.769953][T11312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1347.780180][T11054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1347.792907][T11312] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1347.811614][T11054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1347.823448][T11054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1347.854775][T11054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1347.999681][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.035648][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.051426][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.058811][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.091313][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.098667][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.275309][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1348.295061][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1348.307028][T11327] SET target dimension over the limit! [ 1348.465019][T11335] syzkaller1: entered promiscuous mode [ 1348.470833][T11335] syzkaller1: entered allmulticast mode [ 1349.202161][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.282855][T20191] Bluetooth: hci0: command tx timeout [ 1349.498943][T11054] veth0_vlan: entered promiscuous mode [ 1349.564192][T11054] veth1_vlan: entered promiscuous mode [ 1349.611381][T11373] netlink: 'syz.2.9337': attribute type 8 has an invalid length. [ 1349.659072][T11371] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1349.710942][T11054] veth0_macvtap: entered promiscuous mode [ 1349.806727][T11054] veth1_macvtap: entered promiscuous mode [ 1349.866893][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.906221][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.994646][ T6547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.006389][ T6547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.031135][ T6547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.048038][ T6547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.132177][T11390] __nla_validate_parse: 1 callbacks suppressed [ 1350.170962][T11390] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1350.249557][T11397] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1350.258568][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1350.284765][T11397] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.9342'. [ 1350.446195][T11393] netlink: 'syz.2.9341': attribute type 1 has an invalid length. [ 1350.490951][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9345'. [ 1350.504438][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.542899][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.684339][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.696008][T11411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1350.707034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.714901][T11411] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1350.729263][T11411] netlink: 'syz.1.9346': attribute type 6 has an invalid length. [ 1350.737666][T11411] netlink: 'syz.1.9346': attribute type 5 has an invalid length. [ 1350.746266][T11411] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1350.815972][T11414] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1351.270729][T11435] netlink: 'syz.1.9352': attribute type 8 has an invalid length. [ 1351.327043][T11428] syzkaller0: entered promiscuous mode [ 1351.341926][T11428] syzkaller0: entered allmulticast mode [ 1351.356535][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9354'. [ 1351.659133][T11464] netlink: 'syz.3.9360': attribute type 1 has an invalid length. [ 1351.671460][T11464] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9360'. [ 1351.686246][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1351.978563][T11484] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9363'. [ 1351.997808][T11480] bond1: Removing last arp target with arp_interval on [ 1352.873488][T11515] bond8: (slave ip6gre1): Releasing backup interface [ 1352.896611][T11515] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1352.909071][T11515] bond15: (slave bridge4): Releasing active interface [ 1352.931304][T11522] netlink: 'syz.0.9375': attribute type 3 has an invalid length. [ 1352.943355][T11522] netlink: 'syz.0.9375': attribute type 3 has an invalid length. [ 1353.351343][T11546] netlink: 'syz.2.9374': attribute type 4 has an invalid length. [ 1354.061979][T11572] Bluetooth: MGMT ver 1.23 [ 1354.405678][T11592] netlink: zone id is out of range [ 1354.431964][T11595] netlink: zone id is out of range [ 1354.642070][T11600] netlink: 'syz.1.9392': attribute type 1 has an invalid length. [ 1354.839726][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1354.853464][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1354.863164][T11601] bond1: (slave geneve2): making interface the new active one [ 1354.879862][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1354.890846][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1354.902558][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1354.969741][T11601] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1355.019545][ T6539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1355.038530][ T6539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1355.077634][ T6539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1355.098797][ T6539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1355.646987][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.683201][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.896506][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.923373][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.048908][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.069109][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.175167][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.194402][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.734623][T11628] __nla_validate_parse: 4 callbacks suppressed [ 1356.734645][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1356.808941][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1356.895546][T11628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.047237][ T5630] Bluetooth: hci1: command tx timeout [ 1357.464004][ T12] dvmrp0: left allmulticast mode [ 1358.291660][ T12] bond4 (unregistering): (slave geneve4): Releasing active interface [ 1358.326850][ T12] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1358.600516][ T12] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1358.660213][ T12] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 1358.668785][ T12] bridge5 (unregistering): left promiscuous mode [ 1358.759428][ T12] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 1358.769993][ T12] bridge7 (unregistering): left promiscuous mode [ 1358.778497][ T12] bridge7 (unregistering): left allmulticast mode [ 1358.839957][ T12] bond13 (unregistering): (slave bridge8): Releasing backup interface [ 1358.849972][ T12] bridge8 (unregistering): left promiscuous mode [ 1358.856942][ T12] bridge8 (unregistering): left allmulticast mode [ 1359.133099][ T5630] Bluetooth: hci1: command tx timeout [ 1359.711011][ T12] bond0 (unregistering): Released all slaves [ 1359.725539][ T12] bond1 (unregistering): Released all slaves [ 1359.741472][ T12] bond2 (unregistering): Released all slaves [ 1359.759212][ T12] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1359.769590][ T12] bond3 (unregistering): Released all slaves [ 1359.791147][ T12] bond4 (unregistering): Released all slaves [ 1359.807856][ T12] bond5 (unregistering): Released all slaves [ 1359.826291][ T12] bond6 (unregistering): Released all slaves [ 1359.847498][ T12] bond7 (unregistering): Released all slaves [ 1359.865131][ T12] bond8 (unregistering): (slave veth7): Releasing backup interface [ 1359.877151][ T12] bond8 (unregistering): Released all slaves [ 1359.900271][ T12] bond9 (unregistering): Released all slaves [ 1359.919023][ T12] bond10 (unregistering): Released all slaves [ 1359.941640][ T12] bond11 (unregistering): Released all slaves [ 1359.962804][ T12] bond12 (unregistering): Released all slaves [ 1359.990109][ T12] bond13 (unregistering): Released all slaves [ 1360.034894][T11646] tc_dump_action: action bad kind [ 1360.052556][T11645] tc_dump_action: action bad kind [ 1360.140729][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1360.365085][ T12] tipc: Disabling bearer [ 1360.383675][ T12] tipc: Left network mode [ 1360.441174][T11668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1360.525286][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9404'. [ 1361.206287][ T5630] Bluetooth: hci1: command tx timeout [ 1361.277832][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1361.494329][T11696] dvmrp0: entered allmulticast mode [ 1361.614930][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1361.652690][T11699] netem: incorrect ge model size [ 1361.670903][T11699] netem: change failed [ 1361.743576][T11704] tipc: Started in network mode [ 1361.750407][T11704] tipc: Node identity ac14140f, cluster identity 4711 [ 1361.777384][T11704] tipc: New replicast peer: 255.255.255.255 [ 1361.819215][T11704] tipc: Enabled bearer , priority 26 [ 1362.299047][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1362.492136][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.502425][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.512559][T11604] bridge_slave_0: entered allmulticast mode [ 1362.530620][T11604] bridge_slave_0: entered promiscuous mode [ 1362.564004][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.603051][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.654540][T11604] bridge_slave_1: entered allmulticast mode [ 1362.744975][T11604] bridge_slave_1: entered promiscuous mode [ 1363.034563][T11746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1363.089979][T13724] tipc: Node number set to 2886997007 [ 1363.141956][T11754] bond0: (slave bond_slave_1): Releasing backup interface [ 1363.197830][T11761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1363.248156][T11754] bond_slave_1: left allmulticast mode [ 1363.288471][ T5630] Bluetooth: hci1: command tx timeout [ 1363.350579][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.370230][T11757] tipc: Started in network mode [ 1363.374250][T11767] IPv6: NLM_F_CREATE should be specified when creating new route [ 1363.380647][T11757] tipc: Node identity ce36e41f9e03, cluster identity 4711 [ 1363.390805][T11757] tipc: Enabled bearer , priority 0 [ 1363.407695][T11767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1363.415048][T11767] IPv6: NLM_F_CREATE should be set when creating new route [ 1363.422407][T11767] IPv6: NLM_F_CREATE should be set when creating new route [ 1363.429852][T11767] IPv6: NLM_F_CREATE should be set when creating new route [ 1363.489551][T11766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1363.504283][T11732] tipc: Disabling bearer [ 1363.547531][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.610917][ T12] hsr_slave_0: left promiscuous mode [ 1363.783964][ T12] hsr_slave_1: left promiscuous mode [ 1363.789894][T11783] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1363.799361][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1363.817331][T11783] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1363.836228][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1363.848448][T11783] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1363.878051][ T12] veth0_to_team: left promiscuous mode [ 1363.895037][ T12] veth1_macvtap: left promiscuous mode [ 1363.906850][ T12] veth0_macvtap: left promiscuous mode [ 1363.934148][ T12] veth0_vlan: left promiscuous mode [ 1364.598732][ T6539] smc: removing ib device syz0 [ 1364.756350][ T6539] smbdirect: ib_dev[syz0] removed [ 1365.060421][T11795] sock: sock_timestamping_bind_phc: sock not bind to device [ 1365.376947][T11784] netlink: 'syz.0.9422': attribute type 12 has an invalid length. [ 1365.400535][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1365.418811][ T10] syz0: Port: 1 Link DOWN [ 1365.446095][T11604] team0: Port device team_slave_0 added [ 1365.500746][T11604] team0: Port device team_slave_1 added [ 1365.601903][T11807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1366.040333][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.060504][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.142650][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.246025][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.260966][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.344845][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.801153][T11835] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1366.895871][T11604] hsr_slave_0: entered promiscuous mode [ 1366.918635][T11604] hsr_slave_1: entered promiscuous mode [ 1366.946306][T11604] debugfs: 'hsr0' already exists in 'hsr' [ 1366.971667][T11604] Cannot create hsr debugfs directory [ 1367.996485][T11868] netdevsim0: mtu less than device minimum [ 1368.187478][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9443'. [ 1368.348976][T11868] hsr0: entered promiscuous mode [ 1368.444121][T11872] hsr_slave_0: left promiscuous mode [ 1368.470530][T11872] hsr_slave_1: left promiscuous mode [ 1368.508589][T11872] hsr0 (unregistering): left promiscuous mode [ 1368.717184][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1368.803352][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1368.813152][T11891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1368.899731][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1368.958061][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1369.112094][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1369.150697][T11896] vlan2: entered allmulticast mode [ 1369.168914][T11901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1369.625395][T11926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1369.710471][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1369.721953][T11929] rdma_rxe: rxe_newlink: failed to add macvtap0 [ 1369.731201][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1369.875651][T11927] netlink: 'syz.1.9454': attribute type 8 has an invalid length. [ 1369.903439][T11927] sch_fq: defrate 0 ignored. [ 1370.287334][T11941] batadv_slave_0: entered promiscuous mode [ 1370.303752][T11940] xt_hashlimit: size too large, truncated to 1048576 [ 1370.322148][T11941] netlink: 'syz.1.9457': attribute type 10 has an invalid length. [ 1370.332983][ T12] IPVS: stop unused estimator thread 0... [ 1370.339563][T11940] xt_hashlimit: max too large, truncated to 1048576 [ 1370.513264][T11940] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1371.051958][T11941] team0: Cannot enslave team device to itself [ 1371.111923][T11936] batadv_slave_0: left promiscuous mode [ 1371.647726][ T6867] IPVS: starting estimator thread 0... [ 1371.763706][T11988] IPVS: using max 34 ests per chain, 81600 per kthread [ 1371.933543][T11993] 5n: entered promiscuous mode [ 1372.206311][T11992] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1372.239618][T12009] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.9465'. [ 1372.518505][T12024] veth1_to_bond: entered allmulticast mode [ 1372.595752][T12030] veth1_to_bond (unregistering): left allmulticast mode [ 1372.615995][T12030] bond0: (slave bond_slave_1): Releasing backup interface [ 1374.571474][T11981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1374.597454][T11604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1374.678802][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1374.699660][T11604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1374.773379][T12097] __nla_validate_parse: 4 callbacks suppressed [ 1374.773403][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1374.824050][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1374.851912][T11604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1374.884447][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1374.975200][T12097] bond1: entered promiscuous mode [ 1374.980940][T12097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1374.990260][T11604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1375.001685][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1375.055209][T12097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1375.063240][T12097] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1375.075792][T12097] bond1: (slave sit1): Error -95 calling set_mac_address [ 1375.192858][T12119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9474'. [ 1375.255629][T12119] pim6reg: entered allmulticast mode [ 1375.407184][T11604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.544398][T11604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.596015][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.603355][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.781280][T12144] rdma_op ffff8880a502c1f0 conn xmit_rdma 0000000000000000 [ 1375.840738][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.848009][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.916979][T12146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1375.973210][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1376.037709][T12150] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1376.117217][T12154] netlink: 'syz.1.9484': attribute type 12 has an invalid length. [ 1376.169910][T12156] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9483'. [ 1376.238754][T12160] netlink: 'syz.1.9484': attribute type 12 has an invalid length. [ 1376.428350][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9485'. [ 1376.479062][T12164] bond0: entered promiscuous mode [ 1376.502825][T12164] bond_slave_0: entered promiscuous mode [ 1376.509033][T12164] bond_slave_1: entered promiscuous mode [ 1376.518723][T12164] batadv_slave_0: entered promiscuous mode [ 1376.530073][T12164] batadv_slave_0: left promiscuous mode [ 1376.536923][T12164] bond0: left promiscuous mode [ 1376.541999][T12164] bond_slave_0: left promiscuous mode [ 1376.549440][T12164] bond_slave_1: left promiscuous mode [ 1376.697541][T12169] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1376.769472][T12173] tipc: Enabling of bearer rejected, failed to enable media [ 1377.041600][T12183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9490'. [ 1377.106830][T12186] tunl0: Caught tx_queue_len zero misconfig [ 1377.205676][T11604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.362597][T11604] veth0_vlan: entered promiscuous mode [ 1377.394249][T11604] veth1_vlan: entered promiscuous mode [ 1377.545487][T11604] veth0_macvtap: entered promiscuous mode [ 1377.573745][T11604] veth1_macvtap: entered promiscuous mode [ 1377.629597][T11604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.670963][T11604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.716016][ T6549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.738400][ T6549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.756001][ T6549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.773145][ T6549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.053473][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.079295][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.165626][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.185868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.480158][T12221] netlink: 'syz.2.9501': attribute type 9 has an invalid length. [ 1378.580560][T12221] netlink: 'syz.2.9501': attribute type 9 has an invalid length. [ 1379.078190][T12240] bond0: entered allmulticast mode [ 1379.092453][T12240] bond_slave_0: entered allmulticast mode [ 1379.624737][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9510'. [ 1379.664504][T20191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1379.678634][T20191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1379.694439][T20191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1379.705440][T20191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1379.715523][T20191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1379.910970][T12264] xt_hashlimit: max too large, truncated to 1048576 [ 1379.950116][T12264] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 1380.435161][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.607737][T12292] __nla_validate_parse: 1 callbacks suppressed [ 1380.607761][T12292] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9518'. [ 1381.083551][T12317] netlink: 428 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1381.141037][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1381.673555][T12330] syzkaller0: entered promiscuous mode [ 1381.690861][T12330] syzkaller0: entered allmulticast mode [ 1381.710061][T12330] 0: reclassify loop, rule prio 0, protocol 800 [ 1381.765542][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1381.773719][ T5630] Bluetooth: hci5: command tx timeout [ 1382.149684][T12343] netlink: 'syz.3.9532': attribute type 1 has an invalid length. [ 1382.254325][T12351] ipvlan2: entered allmulticast mode [ 1382.267689][T12351] veth0_to_team: entered allmulticast mode [ 1382.288755][T12254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.324691][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.341866][T12254] bridge_slave_0: entered allmulticast mode [ 1382.357228][T12362] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1382.367575][T12254] bridge_slave_0: entered promiscuous mode [ 1382.472508][T12254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.479963][T12366] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 1382.488428][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.502840][T12366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.508514][T12254] bridge_slave_1: entered allmulticast mode [ 1382.545234][T12254] bridge_slave_1: entered promiscuous mode [ 1382.628297][T12254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.642929][T12254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.712911][T12254] team0: Port device team_slave_0 added [ 1382.723129][T12254] team0: Port device team_slave_1 added [ 1382.766554][T12254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.777649][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.804766][T12376] netlink: 'syz.3.9540': attribute type 1 has an invalid length. [ 1382.810301][T12254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.836379][T12254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.864017][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.914643][T12254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.961600][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9542'. [ 1382.999033][T12254] hsr_slave_0: entered promiscuous mode [ 1383.023696][T12254] hsr_slave_1: entered promiscuous mode [ 1383.030407][T12254] debugfs: 'hsr0' already exists in 'hsr' [ 1383.047021][T12254] Cannot create hsr debugfs directory [ 1383.607918][T12404] netlink: 'syz.3.9549': attribute type 6 has an invalid length. [ 1383.631829][T12404] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1383.641336][T12402] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9548'. [ 1383.667052][T12404] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1383.679017][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1383.847987][ T5630] Bluetooth: hci5: command tx timeout [ 1384.138302][T12424] nbd: must specify a size in bytes for the device [ 1384.750057][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9559'. [ 1384.810541][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9559'. [ 1384.823991][T12438] bond0: entered promiscuous mode [ 1384.829243][T12438] bond_slave_0: entered promiscuous mode [ 1384.841808][T12438] bond_slave_1: entered promiscuous mode [ 1384.853346][T12438] batadv0: entered promiscuous mode [ 1384.956604][T12254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1384.985105][T12254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1385.003314][T12254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1385.020650][T12254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1385.035139][T12438] syzkaller0: entered promiscuous mode [ 1385.046479][T12438] syzkaller0: entered allmulticast mode [ 1385.219800][T12254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1385.274154][T12254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1385.308646][T12254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1385.387408][T12254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1385.823109][T12467] netlink: 548 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1385.838931][T12254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.867142][T12254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.884444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.891735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.922523][ T5630] Bluetooth: hci5: command tx timeout [ 1385.938296][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.945643][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.144350][T12475] netlink: 'syz.0.9567': attribute type 1 has an invalid length. [ 1386.153287][T12475] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.9567'. [ 1386.506612][T12254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.833380][T12254] veth0_vlan: entered promiscuous mode [ 1386.845638][T12254] veth1_vlan: entered promiscuous mode [ 1386.879958][T12254] veth0_macvtap: entered promiscuous mode [ 1386.896366][T12254] veth1_macvtap: entered promiscuous mode [ 1386.918643][T12254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.934018][T12254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.949482][ T6547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.959424][ T6547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.975830][ T6547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.988044][ T6559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.127536][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.147406][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.177476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.185982][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.003507][ T5630] Bluetooth: hci5: command tx timeout [ 1430.563867][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 1433.605683][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1433.606658][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1440.802630][T20191] Bluetooth: hci4: command 0x0406 tx timeout [ 1443.345332][T12500] bond2: entered allmulticast mode [ 1443.372744][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9568'. [ 1443.396958][T12511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1443.420689][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1443.586263][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9574'. [ 1443.657266][T12526] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9574'. [ 1443.723935][T12524] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1443.727456][T12526] 0X: renamed from batadv0 (while UP) [ 1443.779928][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9578'. [ 1443.802770][T12526] 0X: entered allmulticast mode [ 1443.808847][T12526] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1444.393309][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9586'. [ 1444.404458][T12571] tipc: Started in network mode [ 1444.434137][T12571] tipc: Node identity 6e84f4b3aa19, cluster identity 4711 [ 1444.445984][T12571] tipc: Enabled bearer , priority 0 [ 1444.456541][T12571] syzkaller0: entered promiscuous mode [ 1444.467123][T12575] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1444.471312][T12571] syzkaller0: entered allmulticast mode [ 1444.497770][T12567] 8021q: VLANs not supported on vxcan0 [ 1444.505946][T12564] netlink: 'syz.4.9586': attribute type 1 has an invalid length. [ 1444.532982][T12564] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9586'. [ 1444.578365][T12564] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9586'. [ 1444.588228][T12564] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9586'. [ 1444.671225][T12577] tipc: Resetting bearer [ 1444.689594][T12571] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1444.719534][T12570] tipc: Resetting bearer [ 1444.879780][T12570] tipc: Disabling bearer [ 1445.092992][T12587] vlan2: entered promiscuous mode [ 1445.115993][T12587] bridge0: entered promiscuous mode [ 1445.621781][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9599'. [ 1445.769765][T12621] nbd: must specify a size in bytes for the device [ 1445.994342][T12631] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1446.227198][T12639] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1446.248706][T12635] syzkaller0: entered promiscuous mode [ 1446.254730][T12635] syzkaller0: entered allmulticast mode [ 1446.280712][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.288589][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.973441][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1452.247733][T12651] : renamed from bond_slave_0 [ 1452.456581][T12670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1452.489733][T12676] __nla_validate_parse: 2 callbacks suppressed [ 1452.489754][T12676] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9615'. [ 1452.553451][T12678] netlink: 'syz.2.9615': attribute type 14 has an invalid length. [ 1452.583766][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9615'. [ 1452.958355][T12700] tipc: Enabled bearer , priority 0 [ 1453.051136][T12695] syzkaller0: entered promiscuous mode [ 1453.071775][T12695] syzkaller0: entered allmulticast mode [ 1453.189278][T12700] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9620'. [ 1453.251049][T12695] tipc: Resetting bearer [ 1453.311397][T12694] tipc: Resetting bearer [ 1453.434119][T12694] tipc: Disabling bearer [ 1454.231672][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9639'. [ 1454.280462][T12761] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1454.407548][T12766] netlink: 'syz.3.9641': attribute type 2 has an invalid length. [ 1455.241894][T12793] syzkaller0: entered promiscuous mode [ 1455.273652][T12793] syzkaller0: entered allmulticast mode [ 1455.675845][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9653'. [ 1455.715343][T12815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1455.732560][T12817] syzkaller0: entered promiscuous mode [ 1455.761130][T12817] syzkaller0: entered allmulticast mode [ 1456.291784][T12834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1456.655627][T12849] netlink: 'syz.3.9661': attribute type 7 has an invalid length. [ 1456.812780][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1456.911933][T12845] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1456.945791][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9663'. [ 1457.124893][T12855] netlink: 'syz.0.9664': attribute type 19 has an invalid length. [ 1457.157770][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9664'. [ 1457.258456][T12855] netlink: 'syz.0.9664': attribute type 19 has an invalid length. [ 1457.258946][ T1030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1457.306842][ T1030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1457.337778][ T1030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1457.376575][ T1030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1457.963084][T12893] __nla_validate_parse: 1 callbacks suppressed [ 1457.963117][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9675'. [ 1458.232749][T12900] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1458.240737][T12900] syzkaller1: linktype set to 769 [ 1458.443465][T12911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9681'. [ 1458.484283][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9680'. [ 1458.508037][T12911] wg1: entered promiscuous mode [ 1458.527165][T12911] wg1: entered allmulticast mode [ 1458.543091][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9681'. [ 1458.560386][T12915] netlink: 'syz.3.9681': attribute type 4 has an invalid length. [ 1458.884660][T12929] netlink: 'syz.1.9687': attribute type 3 has an invalid length. [ 1458.936371][T12929] netlink: 'syz.1.9687': attribute type 3 has an invalid length. [ 1458.984341][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9687'. [ 1459.065953][T12947] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9690'. [ 1459.084956][T12949] netlink: 512 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1459.125448][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9690'. [ 1459.189912][T12947] geneve0: entered promiscuous mode [ 1459.213182][T12947] gretap0: entered promiscuous mode [ 1459.225205][T12947] debugfs: 'hsr0' already exists in 'hsr' [ 1459.238797][T12947] Cannot create hsr debugfs directory [ 1459.251068][T12947] hsr0: entered promiscuous mode [ 1459.634958][T12983] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9700'. [ 1459.805755][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1460.124709][T13004] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1460.161833][T13009] veth1_to_batadv: entered allmulticast mode [ 1460.257492][T13013] netlink: 'syz.0.9709': attribute type 89 has an invalid length. [ 1460.434811][T13018] : renamed from bond_slave_0 (while UP) [ 1460.452088][T13020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.499160][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.558627][T13025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 1460.744542][T13037] netlink: 'syz.2.9716': attribute type 1 has an invalid length. [ 1460.954121][T13037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1461.209596][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.217516][T13045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.428387][T13045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.451263][T13045] veth1_to_batadv: left allmulticast mode [ 1461.472636][T13045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.513866][T13066] netlink: 'syz.1.9722': attribute type 1 has an invalid length. [ 1461.800876][T13054] veth0_macvtap: left promiscuous mode [ 1461.954014][T13054] veth0_macvtap: entered promiscuous mode [ 1462.049281][T13066] bond3: entered promiscuous mode [ 1462.061704][T13066] bond3: entered allmulticast mode [ 1462.069605][T13066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1462.116057][T13067] erspan2: entered allmulticast mode [ 1462.143888][T13067] bond3: (slave erspan2): making interface the new active one [ 1462.154645][T13067] erspan2: entered promiscuous mode [ 1462.177814][T13067] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 1462.186957][ T6545] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.229188][ T6545] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.255841][T13082] xt_socket: unknown flags 0x50 [ 1462.274181][ T6545] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.315080][ T6545] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.678820][T13103] openvswitch: netlink: IPv4 tun info is not correct [ 1462.718696][T13103] batadv_slave_1: entered promiscuous mode [ 1462.764804][T13102] batadv_slave_1: left promiscuous mode [ 1462.945711][T13117] netlink: 'syz.3.9735': attribute type 4 has an invalid length. [ 1463.499872][T13134] __nla_validate_parse: 8 callbacks suppressed [ 1463.499893][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9740'. [ 1463.718843][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9745'. [ 1463.740997][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9745'. [ 1464.503770][T13180] sctp: [Deprecated]: syz.4.9751 (pid 13180) Use of int in max_burst socket option deprecated. [ 1464.503770][T13180] Use struct sctp_assoc_value instead [ 1464.709837][T13190] sctp: [Deprecated]: syz.3.9752 (pid 13190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1464.709837][T13190] Use struct sctp_sack_info instead [ 1464.776990][T13190] xt_policy: neither incoming nor outgoing policy selected [ 1464.879629][T13201] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9752'. [ 1465.597582][ T1030] bond0 (unregistering): Released all slaves [ 1465.606130][ T6547] smbdirect: ib_dev[syz1] removed [ 1465.619321][ T1030] bond1 (unregistering): Released all slaves [ 1465.655342][ T1030] bond2 (unregistering): Released all slaves [ 1465.678805][ T1030] bond3 (unregistering): Released all slaves [ 1465.702726][ T1030] bond4 (unregistering): Released all slaves [ 1465.719131][ T1030] bond5 (unregistering): Released all slaves [ 1465.740861][ T1030] bond6 (unregistering): Released all slaves [ 1465.760030][ T1030] bond7 (unregistering): Released all slaves [ 1465.779639][ T1030] bond8 (unregistering): Released all slaves [ 1465.803226][ T1030] bond9 (unregistering): Released all slaves [ 1465.819176][ T1030] bond10 (unregistering): Released all slaves [ 1465.838735][ T1030] bond11 (unregistering): Released all slaves [ 1465.866581][ T1030] bond12 (unregistering): Released all slaves [ 1465.885688][ T1030] bond13 (unregistering): Released all slaves [ 1465.901799][ T1030] bond14 (unregistering): Released all slaves [ 1465.919906][ T1030] bond15 (unregistering): Released all slaves [ 1466.330046][T13234] netlink: 'syz.4.9759': attribute type 21 has an invalid length. [ 1466.357024][T13234] netlink: 'syz.4.9759': attribute type 22 has an invalid length. [ 1466.367179][T13234] netlink: 'syz.4.9759': attribute type 23 has an invalid length. [ 1466.375390][T13234] netlink: 'syz.4.9759': attribute type 25 has an invalid length. [ 1466.407273][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 1466.414354][T13234] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1466.414901][T13236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9759'. [ 1466.613713][T13213] syzkaller0: entered promiscuous mode [ 1466.619344][T13213] syzkaller0: entered allmulticast mode [ 1466.820962][ T1030] 5n: left promiscuous mode [ 1467.136757][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9766'. [ 1467.165391][T13260] netlink: 'syz.4.9766': attribute type 20 has an invalid length. [ 1467.182884][T13260] netlink: 'syz.4.9766': attribute type 21 has an invalid length. [ 1467.222806][T13264] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1467.239384][T13264] netlink: 41 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1467.250443][T13264] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1469.366923][T20191] Bluetooth: hci0: command 0x0406 tx timeout [ 1472.327532][ T1030] tipc: Left network mode [ 1472.408384][T13264] netlink: 41 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1472.977787][T13270] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1473.027953][T13277] syzkaller0: entered promiscuous mode [ 1473.049043][T13277] syzkaller0: entered allmulticast mode [ 1474.239850][T13322] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9778'. [ 1474.295596][ T1030] pim6reg (unregistering): left allmulticast mode [ 1474.355754][ T30] audit: type=1107 audit(1777837955.984:41): pid=13326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1475.233520][ T1030] IPVS: stop unused estimator thread 0... [ 1475.931433][T13289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1475.997082][T13314] nbd: couldn't find a device at index -1127137960 [ 1476.440282][T13356] "syz.2.9787" (13356) uses obsolete ecb(arc4) skcipher [ 1476.803243][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9790'. [ 1476.813569][T13371] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9790'. [ 1477.001203][T13375] netlink: 'syz.0.9791': attribute type 1 has an invalid length. [ 1480.736327][T13375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1480.867384][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1480.901805][T13386] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1480.935796][T13390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1480.973435][T13386] netlink: 'syz.3.9792': attribute type 2 has an invalid length. [ 1481.138551][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9795'. [ 1481.306023][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1481.339234][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9799'. [ 1481.355000][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1481.417723][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1481.629542][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9805'. [ 1482.529465][T13463] sctp: [Deprecated]: syz.2.9812 (pid 13463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1482.529465][T13463] Use struct sctp_sack_info instead [ 1482.707769][T13473] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1482.984801][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1483.000346][T13491] bridge_slave_1: left allmulticast mode [ 1483.018055][T13491] bridge_slave_1: left promiscuous mode [ 1483.068030][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.110511][T13491] bridge_slave_0: left allmulticast mode [ 1483.133876][T13491] bridge_slave_0: left promiscuous mode [ 1483.151480][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.881637][T13537] x_tables: duplicate underflow at hook 2 [ 1483.892395][ T6549] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1483.929132][ T6549] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1483.948617][T13537] x_tables: duplicate underflow at hook 2 [ 1483.969165][ T6549] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1484.007968][ T6549] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1484.086324][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9832'. [ 1485.237588][T13605] netlink: 'syz.0.9845': attribute type 22 has an invalid length. [ 1485.274420][T13605] netlink: 'syz.0.9845': attribute type 22 has an invalid length. [ 1485.650239][T13614] team0: entered promiscuous mode [ 1485.664237][T13614] team_slave_0: entered promiscuous mode [ 1485.700101][T13614] team_slave_1: entered promiscuous mode [ 1485.719016][T13614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.740203][T13614] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1485.923022][T13620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 1486.417663][T13637] __nla_validate_parse: 3 callbacks suppressed [ 1486.417686][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1486.433573][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9853'. [ 1486.472075][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1486.476085][T13641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.508002][T13637] netlink: 'syz.0.9854': attribute type 6 has an invalid length. [ 1486.539381][T13637] netlink: 'syz.0.9854': attribute type 5 has an invalid length. [ 1486.539431][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9853'. [ 1487.067625][T13665] netlink: 'syz.0.9864': attribute type 1 has an invalid length. [ 1487.128528][T13665] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9864'. [ 1487.417307][T13691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 1487.610025][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9873'. [ 1487.772828][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9874'. [ 1488.034283][T13705] veth3: entered promiscuous mode [ 1488.729366][T13770] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 1488.930718][T13780] bridge_slave_0: left allmulticast mode [ 1488.951347][T13780] bridge_slave_0: left promiscuous mode [ 1488.979119][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.062813][T13780] bridge_slave_1: left allmulticast mode [ 1489.107240][T13780] bridge_slave_1: left promiscuous mode [ 1489.129593][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.148292][T13780] bond0: (slave 45): Releasing backup interface [ 1489.178827][T13780] : left allmulticast mode [ 1489.190005][T13780] team0: Port device team_slave_0 removed [ 1489.209127][T13780] team0: Port device team_slave_1 removed [ 1489.217683][T13780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.227288][T13780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.250724][T13780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1489.479328][T13801] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1489.649078][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9897'. [ 1490.559103][T13821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 1491.014960][ T6559] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42 [ 1495.219151][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9901'. [ 1495.344912][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1495.365676][T13854] netlink: 'syz.2.9904': attribute type 5 has an invalid length. [ 1495.397747][T13853] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1495.421148][T13852] team_slave_0 (unregistering): left promiscuous mode [ 1495.447290][T13852] team0: Port device team_slave_0 removed [ 1495.499485][T13863] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9906'. [ 1495.542952][T13859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1495.606862][T13859] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1495.674330][T13859] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9906'. [ 1495.882810][T13874] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20004 [ 1496.001810][T13884] netlink: 'syz.4.9913': attribute type 1 has an invalid length. [ 1496.286050][T13897] netlink: 'syz.1.9916': attribute type 1 has an invalid length. [ 1496.295186][T13897] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.9916'. [ 1496.376262][T13902] openvswitch: netlink: Key 11 has unexpected len 15 expected 2 [ 1496.399576][T13902] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9917'. [ 1496.415752][T13902] netlink: 'syz.3.9917': attribute type 1 has an invalid length. [ 1496.501942][T13905] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9922'. [ 1496.726422][T13922] xt_hashlimit: size too large, truncated to 1048576 [ 1496.932390][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1496.961564][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1497.081087][ T6559] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 1497.124627][ T5630] Bluetooth: hci1: command 0x0405 tx timeout [ 1497.961499][T13958] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1497.978819][T13958] bond4 (unregistering): Released all slaves [ 1499.694982][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1500.250190][T13988] __nla_validate_parse: 2 callbacks suppressed [ 1500.250212][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1500.352782][T13988] wg1: left promiscuous mode [ 1500.364548][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.375838][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.438594][T14001] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1500.671091][T14014] xt_HMARK: proto mask must be zero with L3 mode [ 1500.695314][T14013] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9949'. [ 1500.747805][T14013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.775118][T14013] bond_slave_0: left allmulticast mode [ 1500.790580][T14013] bond0 (unregistering): Released all slaves [ 1500.914530][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1501.102018][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1501.124475][T14031] batman_adv: 60X: Interface deactivated: batadv_slave_1 [ 1501.157458][T14031] batman_adv: 60X: Removing interface: batadv_slave_1 [ 1501.830787][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1502.062698][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1502.129038][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1502.152363][T14059] team_slave_0: entered promiscuous mode [ 1502.203533][T14070] netlink: 'syz.4.9967': attribute type 1 has an invalid length. [ 1502.340429][T14070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1502.424171][T13720] IPVS: starting estimator thread 0... [ 1502.474026][T14077] macsec1: entered promiscuous mode [ 1502.532349][T14079] IPVS: using max 24 ests per chain, 57600 per kthread [ 1502.708287][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9969'. [ 1502.775332][T14085] netlink: 'syz.4.9969': attribute type 11 has an invalid length. [ 1502.885410][T14088] netlink: 'syz.3.9970': attribute type 10 has an invalid length. [ 1502.906853][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9970'. [ 1502.916176][T14088] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1503.735134][T14118] xt_hashlimit: size too large, truncated to 1048576 [ 1503.831542][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9976'. [ 1503.938027][T14121] vxcan2: entered allmulticast mode [ 1504.666182][T14150] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1505.246000][T14160] bond1: entered promiscuous mode [ 1505.307022][T14187] __nla_validate_parse: 4 callbacks suppressed [ 1505.307045][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1505.349182][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9988'. [ 1505.404771][T14160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1505.525037][T14169] bond1: Invalid ad_actor_system MAC address. [ 1505.532258][T14169] bond1: option ad_actor_system: invalid value (7) [ 1505.543610][T14169] bond1 (unregistering): Released all slaves [ 1505.624693][T14173] bond1: (slave vti0): refused to change device type [ 1505.650358][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1505.875978][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9992'. [ 1505.959740][T14199] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1511.249683][T14221] netlink: 364 bytes leftover after parsing attributes in process `syz.3.9996'. [ 1511.268023][T14221] netlink: 82 bytes leftover after parsing attributes in process `syz.3.9996'. [ 1511.358237][T14226] veth1_macvtap: left promiscuous mode [ 1511.400312][T13720] IPVS: starting estimator thread 0... [ 1511.514033][T14249] IPVS: using max 28 ests per chain, 67200 per kthread [ 1511.865004][T14264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1512.463193][T20191] block nbd4: Receive control failed (result -32) [ 1512.872877][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10008'. [ 1513.026968][T14299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10010'. [ 1513.075344][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1513.097095][T14299] vlan3: entered promiscuous mode [ 1513.114458][T14299] bridge0: entered promiscuous mode [ 1513.219015][ T1030] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.241313][ T1030] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.253729][ T1030] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.321883][ T1030] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.598898][T14282] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1513.756244][T14332] netlink: 428 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1513.785708][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1514.039719][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10019'. [ 1514.529033][T14367] x_tables: duplicate underflow at hook 1 [ 1514.543454][T14366] syzkaller0: entered promiscuous mode [ 1514.558804][T14366] syzkaller0: entered allmulticast mode [ 1514.779211][T14376] tipc: Enabling of bearer rejected, failed to enable media [ 1515.055073][T14397] netlink: 'syz.1.10032': attribute type 13 has an invalid length. [ 1515.084031][T14397] netlink: 'syz.1.10032': attribute type 17 has an invalid length. [ 1515.188120][T14391] pim6reg: entered allmulticast mode [ 1515.209380][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10034'. [ 1515.228588][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1515.262521][T14404] xt_limit: Overflow, try lower: 324382443/0 [ 1515.345264][T14397] bond0: left allmulticast mode [ 1515.358752][T14397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.381032][T14397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.477628][T14397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1515.496907][T14397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1515.549214][T14397] veth1_vlan: left promiscuous mode [ 1515.556821][T14397] veth0_vlan: left promiscuous mode [ 1515.564093][T14397] veth0_vlan: entered promiscuous mode [ 1515.573872][T14397] veth1_vlan: entered promiscuous mode [ 1515.586447][T14397] veth0_macvtap: left promiscuous mode [ 1515.593542][T14397] veth0_macvtap: entered promiscuous mode [ 1515.626572][T14397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1515.645951][T14397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1515.660030][T14397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1515.673712][T14397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1515.700925][T14397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1515.713984][T14397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1515.730528][T14397] bond3: left promiscuous mode [ 1515.736554][T14397] erspan2: left promiscuous mode [ 1515.741849][T14397] bond3: left allmulticast mode [ 1515.749629][T14397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1515.757857][T14397] erspan2: left allmulticast mode [ 1516.378317][T14421] syzkaller0: entered promiscuous mode [ 1516.384454][T14421] syzkaller0: entered allmulticast mode [ 1516.496016][ T5630] block nbd5: Receive control failed (result -32) [ 1516.503386][T20191] block nbd5: Receive control failed (result -32) [ 1516.528615][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10041'. [ 1516.652597][T14442] netlink: 'syz.0.10041': attribute type 11 has an invalid length. [ 1516.662648][T14442] netlink: 'syz.0.10041': attribute type 4 has an invalid length. [ 1516.670578][T14442] netlink: 199780 bytes leftover after parsing attributes in process `syz.0.10041'. [ 1516.951971][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10047'. [ 1516.965665][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10047'. [ 1517.785631][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10049'. [ 1521.825808][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10050'. [ 1521.839866][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10050'. [ 1521.859789][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10050'. [ 1521.908141][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10050'. [ 1522.223339][T14500] netlink: 'syz.2.10054': attribute type 9 has an invalid length. [ 1522.246557][T14495] netlink: 'syz.0.10053': attribute type 21 has an invalid length. [ 1522.267779][T14495] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1522.374871][T14495] netlink: 'syz.0.10053': attribute type 5 has an invalid length. [ 1522.407348][T14495] netlink: 'syz.0.10053': attribute type 6 has an invalid length. [ 1522.454263][T14495] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1522.603815][T14516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1523.066867][T14520] syzkaller0: entered promiscuous mode [ 1523.084290][T14520] syzkaller0: entered allmulticast mode [ 1527.818886][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10061'. [ 1527.917130][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10061'. [ 1527.949607][T14557] xt_connbytes: Forcing CT accounting to be enabled [ 1527.957903][T14557] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1528.533769][T14575] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10067'. [ 1528.553489][T14575] netlink: 'syz.0.10067': attribute type 9 has an invalid length. [ 1528.582590][T14575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10067'. [ 1528.608028][T14582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10065'. [ 1528.610473][T14576] mac80211_hwsim hwsim117 wlan0: entered promiscuous mode [ 1528.625776][T14575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10067'. [ 1528.674011][T14576] mac80211_hwsim hwsim117 wlan0: entered allmulticast mode [ 1528.784090][T14590] bridge0: port 3(vlan2) entered blocking state [ 1528.813130][T14590] bridge0: port 3(vlan2) entered disabled state [ 1528.851441][T14590] vlan2: entered allmulticast mode [ 1528.871204][T14590] geneve0: entered allmulticast mode [ 1528.903287][T14590] vlan2: entered promiscuous mode [ 1528.929689][T14590] geneve0: entered promiscuous mode [ 1529.016064][T14601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10071'. [ 1529.035524][T14601] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10071'. [ 1529.224341][T14609] netlink: 'syz.2.10073': attribute type 10 has an invalid length. [ 1529.345349][ T6559] tipc: Subscription rejected, illegal request [ 1529.583835][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10072'. [ 1529.701591][T14607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.838166][T14614] veth0: entered promiscuous mode [ 1529.914596][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1529.974627][T14628] bond0: entered promiscuous mode [ 1529.979846][T14628] bond_slave_0: entered promiscuous mode [ 1529.986147][T14628] bond_slave_1: entered promiscuous mode [ 1530.184828][T14607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.323856][T14639] batman_adv: batadv0: Adding interface: veth9 [ 1530.330193][T14639] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1530.361035][T14639] batman_adv: batadv0: Interface activated: veth9 [ 1530.398348][T14608] bond0: left promiscuous mode [ 1530.406061][T14608] bond_slave_0: left promiscuous mode [ 1530.411828][T14608] bond_slave_1: left promiscuous mode [ 1530.418673][T14608] veth0: left promiscuous mode [ 1530.487393][T14607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.638093][T14607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.103416][T14673] netlink: 'syz.1.10085': attribute type 1 has an invalid length. [ 1531.151261][ T1030] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.187279][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.227685][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.261290][ T1030] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.257572][T14737] netlink: 'syz.0.10102': attribute type 83 has an invalid length. [ 1532.703063][T14752] block nbd6: server does not support multiple connections per device. [ 1532.723652][T14752] block nbd6: shutting down sockets [ 1532.882097][T14755] __nla_validate_parse: 9 callbacks suppressed [ 1532.892599][T14755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10104'. [ 1533.373373][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1533.386908][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1533.455924][T14802] netlink: 'syz.2.10116': attribute type 89 has an invalid length. [ 1534.294230][T14828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10126'. [ 1534.472925][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10127'. [ 1534.559888][T14842] xt_TCPMSS: Only works on TCP SYN packets [ 1534.580616][T14844] netlink: 'syz.0.10130': attribute type 15 has an invalid length. [ 1534.588859][T14844] netlink: 666 bytes leftover after parsing attributes in process `syz.0.10130'. [ 1534.786671][T14854] syzkaller0: entered promiscuous mode [ 1534.792991][T14854] syzkaller0: entered allmulticast mode [ 1535.078666][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10133'. [ 1535.167423][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10133'. [ 1535.203228][T14861] : entered promiscuous mode [ 1535.217085][T14866] netlink: 'syz.3.10135': attribute type 1 has an invalid length. [ 1535.265284][T14858] openvswitch: : Dropping previously announced user features [ 1536.020663][T14900] bond4 (unregistering): Released all slaves [ 1536.063947][T14911] netlink: 'syz.1.10144': attribute type 32 has an invalid length. [ 1536.081532][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10143'. [ 1536.207515][T14887] syzkaller1: entered promiscuous mode [ 1536.220289][T14887] syzkaller1: entered allmulticast mode [ 1536.305786][T14916] batman_adv: batadv0: Adding interface: ipvlan2 [ 1536.330035][T14916] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.392669][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.432953][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.449331][T14916] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1536.745968][T14731] [ 1536.748384][T14731] ============================================ [ 1536.754564][T14731] WARNING: possible recursive locking detected [ 1536.760764][T14731] syzkaller #0 Not tainted [ 1536.765218][T14731] -------------------------------------------- [ 1536.771403][T14731] kworker/u8:13/14731 is trying to acquire lock: [ 1536.777769][T14731] ffff888060996158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1536.787686][T14731] [ 1536.787686][T14731] but task is already holding lock: [ 1536.795104][T14731] ffff888098a56558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1536.805024][T14731] [ 1536.805024][T14731] other info that might help us debug this: [ 1536.813121][T14731] Possible unsafe locking scenario: [ 1536.813121][T14731] [ 1536.820619][T14731] CPU0 [ 1536.823953][T14731] ---- [ 1536.827279][T14731] lock(&qdisc_xmit_lock_key#3); [ 1536.832365][T14731] lock(&qdisc_xmit_lock_key#3); [ 1536.837451][T14731] [ 1536.837451][T14731] *** DEADLOCK *** [ 1536.837451][T14731] [ 1536.845635][T14731] May be due to missing lock nesting notation [ 1536.845635][T14731] [ 1536.854010][T14731] 10 locks held by kworker/u8:13/14731: [ 1536.859603][T14731] #0: ffff8880979c5940 ((wq_completion)bond3#5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1536.870741][T14731] #1: ffffc90005b6fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1536.883696][T14731] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1536.893347][T14731] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1536.903350][T14731] #4: ffff88807dd9a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1536.916059][T14731] #5: ffff888098a56558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1536.926409][T14731] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1536.935357][T14731] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1536.945188][T14731] #8: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1536.955196][T14731] #9: ffff8880580ea228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1536.967898][T14731] [ 1536.967898][T14731] stack backtrace: [ 1536.973815][T14731] CPU: 0 UID: 0 PID: 14731 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1536.973842][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.973857][T14731] Workqueue: bond3 bond_alb_monitor [ 1536.973890][T14731] Call Trace: [ 1536.973899][T14731] [ 1536.973906][T14731] dump_stack_lvl+0xe8/0x150 [ 1536.973927][T14731] print_deadlock_bug+0x279/0x290 [ 1536.973951][T14731] __lock_acquire+0x253f/0x2cf0 [ 1536.973977][T14731] ? fib_table_lookup+0x11ba/0x16e0 [ 1536.974008][T14731] ? sch_direct_xmit+0x15f/0x4c0 [ 1536.974026][T14731] lock_acquire+0x106/0x350 [ 1536.974043][T14731] ? sch_direct_xmit+0x15f/0x4c0 [ 1536.974066][T14731] _raw_spin_lock+0x2e/0x40 [ 1536.974083][T14731] ? sch_direct_xmit+0x15f/0x4c0 [ 1536.974101][T14731] sch_direct_xmit+0x15f/0x4c0 [ 1536.974121][T14731] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1536.974144][T14731] __dev_queue_xmit+0x180f/0x3950 [ 1536.974172][T14731] ? __dev_queue_xmit+0x2b6/0x3950 [ 1536.974199][T14731] ? lockdep_hardirqs_on+0x7a/0x110 [ 1536.974221][T14731] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1536.974245][T14731] ? neigh_resolve_output+0x438/0x750 [ 1536.974265][T14731] ? eth_header+0x11b/0x200 [ 1536.974290][T14731] ? __asan_memcpy+0x40/0x70 [ 1536.974322][T14731] ? ip_finish_output2+0x3c2/0x1070 [ 1536.974348][T14731] ip_finish_output2+0xca9/0x1070 [ 1536.974373][T14731] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1536.974398][T14731] ? ip_finish_output+0x40e/0x530 [ 1536.974423][T14731] ip_output+0x29f/0x450 [ 1536.974446][T14731] ? ip_output+0x5b/0x450 [ 1536.974469][T14731] iptunnel_xmit+0x621/0xd10 [ 1536.974503][T14731] ip_tunnel_xmit+0x193a/0x1f20 [ 1536.974536][T14731] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1536.974562][T14731] ? __pfx_gre_build_header+0x10/0x10 [ 1536.974584][T14731] ? kfree+0x1c5/0x640 [ 1536.974604][T14731] ? pskb_expand_head+0x458/0x1390 [ 1536.974630][T14731] __gre_xmit+0x19e/0x240 [ 1536.974651][T14731] ? __pfx___gre_xmit+0x10/0x10 [ 1536.974675][T14731] erspan_xmit+0xa41/0x14d0 [ 1536.974700][T14731] ? ret_from_fork_asm+0x1a/0x30 [ 1536.974722][T14731] ? __pfx_erspan_xmit+0x10/0x10 [ 1536.974748][T14731] dev_hard_start_xmit+0x2cd/0x830 [ 1536.974779][T14731] sch_direct_xmit+0x251/0x4c0 [ 1536.974799][T14731] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1536.974817][T14731] ? kthread+0x370/0x470 [ 1536.974842][T14731] __dev_queue_xmit+0x180f/0x3950 [ 1536.974870][T14731] ? __dev_queue_xmit+0x2b6/0x3950 [ 1536.974900][T14731] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1536.974925][T14731] ? rcu_is_watching+0x15/0xb0 [ 1536.974946][T14731] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1536.974968][T14731] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1536.975005][T14731] ? alb_send_lp_vid+0x14e/0x550 [ 1536.975030][T14731] alb_send_lp_vid+0x348/0x550 [ 1536.975055][T14731] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1536.975084][T14731] alb_send_learning_packets+0x12c/0x300 [ 1536.975108][T14731] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1536.975131][T14731] ? bond_alb_monitor+0xf8/0x17e0 [ 1536.975155][T14731] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1536.975176][T14731] bond_alb_monitor+0x3d5/0x17e0 [ 1536.975201][T14731] ? bond_alb_monitor+0xf8/0x17e0 [ 1536.975222][T14731] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1536.975245][T14731] ? process_scheduled_works+0xa70/0x1860 [ 1536.975263][T14731] ? process_scheduled_works+0xa70/0x1860 [ 1536.975281][T14731] process_scheduled_works+0xb5d/0x1860 [ 1536.975312][T14731] ? __pfx_process_scheduled_works+0x10/0x10 [ 1536.975332][T14731] ? assign_work+0x3d5/0x5e0 [ 1536.975351][T14731] worker_thread+0xa53/0xfc0 [ 1536.975381][T14731] kthread+0x388/0x470 [ 1536.975404][T14731] ? __pfx_worker_thread+0x10/0x10 [ 1536.975420][T14731] ? __pfx_kthread+0x10/0x10 [ 1536.975443][T14731] ret_from_fork+0x514/0xb70 [ 1536.975463][T14731] ? __pfx_ret_from_fork+0x10/0x10 [ 1536.975481][T14731] ? __switch_to+0xc79/0x1410 [ 1536.975507][T14731] ? __pfx_kthread+0x10/0x10 [ 1536.975530][T14731] ret_from_fork_asm+0x1a/0x30 [ 1536.975558][T14731] [ 1537.429339][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1538.570212][T14953] tipc: Enabling of bearer rejected, failed to enable media [ 1538.584953][ T6539] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1538.597343][ T6539] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1538.611825][ T6539] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1538.622033][ T6539] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1538.631539][ T6539] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1538.643041][ T6539] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1538.652419][ T6539] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1538.661650][ T6539] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0