last executing test programs: 2.976879255s ago: executing program 2 (id=6900): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800060000000053dfb3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newtclass={0x5e, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xc, 0xb}, {0x7, 0x6}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@newtaction={0x4b8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x4a4, 0x1, [@m_sample={0x124, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7b}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0xd0, 0x6, "a9d616b3255ca9038f4533ec43edd27a21aec6917ec5ba6f7d78d89b725ebcf94ad5896f02fcb33416343fc61dd7b4ae64f4fd82dc86d2031bf3751aed4901daa1fef65dd56a224d7d55af66941dc8ce1001108db67c660369c9f6edfe1f67d400498da1f42bf1e89812bc26471db04d98a1503ab130b3c4db1b86ebe49b42f51111e85d10ea6ecf7836de2eb825cf9c6ef1500a6c41cfb49c75ead78b7feec3c9755f580ebf8fe15e5276ce5ae5ec8f2dac0918b6bc91f2722e455cceeb4518a9b0a552301b978c594e8f97"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x64, 0x5, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x2, 0x2, 0x1, 0x1000}}]}, {0x1f, 0x6, "3ad0070688384c1b4bde94153ed3637eae46cad696c9e982a29404"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x118, 0xb, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x4389, 0x2, 0x3, 0x4}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x7fffffff, 0x8, 0x120f8c68, 0x6}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x1000, 0x5, 0x1, 0x7}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x3b, 0x6, "3d38c087737145c0f2c7038e755383e3bb3a46d574f9e0e8de111f6d61ad5e9fce3b0345cab746966a1797ca1b283fb060382cd22a0c5d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x200, 0x5, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x1, 0x3}, 0x5, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x10000, 0x8, 0xfffffffc}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2d1, 0x5babc81d, 0x20000000, 0x8, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x7, 0xffffffffffffffff, 0xa4bf, 0x2}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x7, 0x5, 0x8000, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x2, 0x0, 0xfffff03e, 0x8000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x512, 0x6, 0x7f, 0x7f}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0xffffffffffffffff, 0xfffffffe, 0xa}, 0x1, r12}}]}, {0xd2, 0x6, "b3b129b72386e17e892a816392d5abb50b9eeaba724f66f2a42fc84612437117631b0c950404a94cba2ed71ab43bfd01a48d56b3a68e09967dd2d8f4499cedc42ef95a819ee6e3a72e3677fae1bf9f9baf0244caefe6ed97d9d16e0d9d47f17ac7cff77f301d71cf033148646c8be02fa46193d86c42b2de0a160951aa83d7531f56a07c992608c8e7f46fd86968906ae0c5f00a1a156f9374d8556f385b02aaa0e3e0ab989c223dcf0a09bd724de3bf0eaa1317d864da1a7b7c068d7b91c1a06d760f4f7755fd708ce0d103fa0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x4b8}}, 0x8080) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) 2.866865457s ago: executing program 2 (id=6902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x110) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x0, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r10, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.596907618s ago: executing program 2 (id=6909): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @private=0xa010100, 0xff000000, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff]}}, 0x96, 0x4, 0xfff8, 0x19, 0x6, 0x7ff, 'ip_vti0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000300), 0x0}, 0x20) 2.548287478s ago: executing program 2 (id=6911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) 2.384770915s ago: executing program 0 (id=6914): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00006e3b77450c0001800600060065580000100002800c0003800800091b77e80f45e28b9ffbf5b97fce780020111d382fd5933689ec6496bc046c64bcaefd2088d1aed470e49e2def846ca70e64a2b6ed951b1f233680a24c3ff1bd391effb88fe7f07cdda330c11bf41b40686f6734af4560a99405c0cb0060535adef3ac0ce83ae73ba49083a67ae6bb484eea3ca61e7f3b676e4831552a50ebdc9cc07b06cc97a5deae627f1cd9d7a218a717ce8b45", @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000340)=0x6, &(0x7f0000000380)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x52}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000041) 2.384043594s ago: executing program 2 (id=6915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050007000000"], 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x245}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x140d, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x800003}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44050}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, 0x0, 0x4044001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20044880) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000380)={{0x5d54, 0x19eb}, 0x100, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 2.322356613s ago: executing program 0 (id=6917): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX], 0x58}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x13, 0x0, &(0x7f00000004c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 2.253261988s ago: executing program 3 (id=6919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x94, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0xc}, 0xdd0d}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 2.217487171s ago: executing program 2 (id=6920): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x4, [@union={0x3, 0x4, 0x0, 0x5, 0x1, 0x1, [{0x6, 0x1}, {0x2, 0x0, 0x3}, {0x0, 0x1, 0x289}, {0xf, 0x4, 0x4}]}, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x78}, 0x28) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv4_newrule={0x40, 0x20, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x8e, 0x5, 0x0, 0x0, 0x1, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x5}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x2c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1b5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x641352599294417b}, 0x0) 2.13717762s ago: executing program 4 (id=6921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x0) (async) 2.136585072s ago: executing program 0 (id=6922): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) socket$inet6(0xa, 0x4, 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.072556373s ago: executing program 3 (id=6923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRESDEC, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 2.033214929s ago: executing program 4 (id=6924): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x9, @private1, 0x1}}, [0xfffffffffffffffb, 0x400, 0xfff, 0xffff, 0x1ff, 0x340, 0x8, 0x3, 0x4524, 0x9, 0xd, 0xc, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) 1.26527275s ago: executing program 1 (id=6925): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0x142}, {&(0x7f0000000000)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) 1.212565927s ago: executing program 1 (id=6926): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) 1.132882539s ago: executing program 3 (id=6927): syz_emit_ethernet(0x266, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x230, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, [@hopopts={0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @routing={0x2e, 0x6, 0x0, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1, @local]}, @routing={0x33, 0x0, 0x0, 0x7f}, @hopopts={0x8, 0x1f, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x0, [0x4, 0x6af]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @empty}, @generic={0x3, 0x8c, "c2c86b198cddb48d4cb5de5b8a0ad6add4da5909097503afd1c5d9c767402ddb148ce960f2bf377d66c0f57bdfa756db357bbe5e569b86aa5f94533329e52ac93979aea8336003df4b24da30e80012a0e4d17f10725b76ad9549d6904ddf5be73b390421768867e2850b01cc3af6915cc925449c2abd9d30246e0a5eea9c9dbb9e1210ea757c815a36b94235"}, @jumbo={0xc2, 0x4, 0xfffffff4}, @generic={0x3, 0x21, "10ccbe6e34b3fd8ee8009939f1a47de3f8152906363ab5c0397d146b9cb6d9bea7"}, @pad1]}, @dstopts={0x2c, 0x12, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9a80, [0x6, 0x6]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x58, {0x3, 0x14, 0xc, 0x4, [0x2, 0xd2, 0x7fff, 0x8, 0x44, 0x35c, 0x1, 0x8, 0x1, 0x5]}}, @jumbo={0xc2, 0x4, 0x8048}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x266, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x230, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, [@hopopts={0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @routing={0x2e, 0x6, 0x0, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1, @local]}, @routing={0x33, 0x0, 0x0, 0x7f}, @hopopts={0x8, 0x1f, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x0, [0x4, 0x6af]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @empty}, @generic={0x3, 0x8c, "c2c86b198cddb48d4cb5de5b8a0ad6add4da5909097503afd1c5d9c767402ddb148ce960f2bf377d66c0f57bdfa756db357bbe5e569b86aa5f94533329e52ac93979aea8336003df4b24da30e80012a0e4d17f10725b76ad9549d6904ddf5be73b390421768867e2850b01cc3af6915cc925449c2abd9d30246e0a5eea9c9dbb9e1210ea757c815a36b94235"}, @jumbo={0xc2, 0x4, 0xfffffff4}, @generic={0x3, 0x21, "10ccbe6e34b3fd8ee8009939f1a47de3f8152906363ab5c0397d146b9cb6d9bea7"}, @pad1]}, @dstopts={0x2c, 0x12, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9a80, [0x6, 0x6]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x58, {0x3, 0x14, 0xc, 0x4, [0x2, 0xd2, 0x7fff, 0x8, 0x44, 0x35c, 0x1, 0x8, 0x1, 0x5]}}, @jumbo={0xc2, 0x4, 0x8048}]}]}}}}}}}, 0x0) (async) 1.062143512s ago: executing program 4 (id=6928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0xb, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x894) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0xffffff1d, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001001e1c0000ee1ec13748edda3abbfef98f53534b1e05474a369cc3ea1090dd7e0cc2467d9dd70e351759d8626680184f710fe6b8700bba819de876c12882bd2865c6be033c839ff7c654f271869f71c42991e45cadb19f82060043d3e4e2bba22640918166fea722176e94087ca85a1fbfb6b4c1038990a645388f27ecf2c0db6ced9a523391a44f3f0cda2cbc87797dbe95eea71a"], 0x40}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 1.038115596s ago: executing program 1 (id=6929): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000080) 990.571033ms ago: executing program 4 (id=6930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000003980)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xe9b}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xc83e}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r7, 0x11, 0x0, 0x3}, 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="400504", @ANYRES8=r3], 0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x88c5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5afa}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9b3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004004) 904.6137ms ago: executing program 3 (id=6931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) (async) 866.266555ms ago: executing program 0 (id=6932): r0 = socket$rxrpc(0x21, 0x2, 0x8) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7974}}, 0x24) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) close(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000180)={0x8, 'veth1_macvtap\x00', {'vlan1\x00'}, 0x3}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000001c0)={0x1}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000240)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x9a, 0x2, 0x90000000, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x10, 0x1, 0x400}}) connect(r2, &(0x7f0000000340)=@ll={0x11, 0xf5, r4, 0x1, 0xbc, 0x6, @local}, 0x80) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000003c0)=0x2, &(0x7f0000000400)=0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000540)=0x3002, 0x4) r5 = accept4$inet(r2, &(0x7f0000000580)={0x2, 0x0, @empty}, &(0x7f00000005c0)=0x10, 0x80800) setsockopt(r5, 0xffffffff, 0x7, &(0x7f0000000600)="c4991188d5dc6ce7ab1dc8933d5a8bca48c90ba004e191022d860574bebdcc4893ab712cba91c8f0d141c70fd3fadb277f25a83498cd3868345f8d4a8b045eb8ed9aab252b48b25744d8d2624da52ae62edf703dc682e80a7e31f8ada86c461f896724279a83b1ffcf21b45222e2077b441f2166132f4b2a48b52c8cb9ad06a39ae81e436f08876425149ee85e785db33e9cc3028a25225eaaf7414957c9d8e4c391775286548db532358ae27cf8525644ca722abd4d6c970640d25f015169bf6d822705b3ec939884670d17e3689c62134c4360b2d2546b82f9a9f92f31ca23f5c9ee4d", 0xe4) sendmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)="5a646f595ab5eec53701a09f0cf8f97c428a3253e55dedc00e1fa71b8cbb", 0x1e}, {&(0x7f0000000740)="ead7b9f4d2c65b4c16e798e2312beef1aab6df63b58f6d2242d51d91a5a29026b8013f693d1cac562cd5f9b7c30ba4ca5c25e2765d9c6e828cf4f5b972c98379c2cd543f1fa28e713cc68fc6e7a532cc", 0x50}, {&(0x7f00000007c0)="d4e076fe51ba808545627c4332ae4c34ed0f37e048b456ab4f49895202ee4308bb27555779b74fda1bb1a1f6a2be3f9f5639c3224be5a6a91949ec74e3661ca290580e39268ea0a48249ed64d65d7a44d4af63f2a253d6a9fb07ca00093f2f4690cd525f116fd9b52f037440b04815795e79d20828", 0x75}, {&(0x7f0000000840)="27b139fe6d2a49051b3b1bae20ecff579f651c159f6d00fbfbf837a952b5c6078cb6c64879e4ff0efc84cb428bd24ae46439161e45d74cd65d16d31505c8377947cc1cc60e9f76c5b86c9d49e806e76715b3f4688c9e5e2453ba", 0x5a}, {&(0x7f00000008c0)="cc0e4c2cabc0850caad9e96e2e485a88a0a021ac3cc6a62574bc0e266d0b279baff1eada7d0cda0c4e9e3a3beb3d6b21af96525a0eb0b0d3d0135c7802677c720f774dcdd8", 0x45}, {&(0x7f0000000940)="ed3f1525bf51ffef1bae31d2ce6e32879abb7c71ef86e2a104bcad93094b4c1ccd06f2f79b129685998ad18f47285db1a9e905ac0f8a06e7cffae7c30bb0128c71e12b44a4d01844c435de253f27ec671d6f7b70d9827fecca1ddf59c9eb92831f509dde848e70f187d41f0e664efd01", 0x70}], 0x6}}], 0x1, 0x3dab066bf32aa67e) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000a80)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000ac0)=0x28) write(r0, &(0x7f0000000b00)="c18ccead185ed180397336326ca502c59ea28d24b3a3d1bc3d23f8c4df6ee17ee02ce830d4dc5a196026c171ca31", 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = openat$cgroup_freezer_state(r1, &(0x7f0000000fc0), 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001100)={0xffffffffffffffff, &(0x7f0000001000)='\x00', 0x4000, &(0x7f0000001040)={@_ha_fsid={[0x9, 0x4]}, {0x7, 0x0, 0x3, 0x8}}, 0x1, &(0x7f0000001080), &(0x7f00000010c0)=0x2}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001140)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001180)=0x0) sendmsg$unix(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)="bd828f73c91bea7c03339e5cf4805b2940ac1aa6b8083158c7a16b132d1a4642ca7da5f4f95cc5e307920d02478a810947798385fda25b89af7712076f89bf482d09f26f6834a7712c", 0x49}, {&(0x7f0000000c00)="6ba72bc51466f5de72398fad7d32d90d5e086f96fa761f5c8dc50eea224612992984d24b2851b8347af48f7c1fbee6230ddbc167553f49404fe3c1d8a6cf3a7c8419", 0x42}, {&(0x7f0000000c80)="8427ae9229daab262aa2c630fc373ba53891fbc08d51c2bfa7d7a1a7d9559830ed68fbda31631d9ae1c4720059ea971c382029c7cef1e16a963c1420d0146378a91f29d28a79a27dc239f862d60d7b4354b718126c863972225941eaa63cee4357851559878a70c68d054ce9863242", 0x6f}, {&(0x7f0000000d00)="a7201c50b546760ffa1147c831514a3955bb43ffe98aff", 0x17}, {&(0x7f0000000d40)="8053a60da4e630c4fee07d2e24b83e2933e27ebc114ac1ba08fb3ba9bffeaa4c2f9069705d2c78ee8940b9ad02322247b456cd9559b5b3f574de805b9ad89b9cf448cce7c1a3bb8498ad4bbba3a0e535f9b76080d4f32b369913ad245e3250044b33699e826068e44dc5a3d897c04da07feb38b52217572ec0d001eecb8e8c7c73357bcc425296e019c39627971929a8d200f3e83842dc47dc5b58b5b642e9", 0x9f}, {&(0x7f0000000e00)="e069bf3591588cdb4c2347f04e78e729e57ee044d13c5340d20daf3a0d2c64944a419de8471539a8e81dee9bbc774ea12a5b9c1da2ab958cd7d750a7e7b1db2d110e52bed3125a7fdbdc2a5438a9e0fee819ab390f3a88421143f7a43ebc9d16764aaf1cba8e2f79315530027d08410d7759b1", 0x73}, {&(0x7f0000000e80)="e8f6a45d9d06361f561b1252986c6421e1c96d06dafb64f18f48c81bfc68aa5ba3d4bad0716a2735b2fd135024cd7ecedff0e2b3f9f6cc1bf81d887901685cc3b6f075ec27b7ceff7b3c82de26c9ed88fc7c1a3f326079da86557ae221085d0a40d6741aeb9f2fd760c81842a7", 0x6d}, {&(0x7f0000000f00)}], 0x8, &(0x7f0000001240)=[@rights={{0x18, 0x1, 0x1, [r7, r8]}}, @rights={{0x30, 0x1, 0x1, [r9, r3, r1, r10, r3, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00}}}, @cred={{0x1c}}], 0xa8, 0x44001}, 0x20000001) 800.771214ms ago: executing program 1 (id=6933): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x891b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x9000000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r8, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xb, 0xffe0}, {0x10, 0xd}}, ["", "", "", "", "", ""]}, 0x24}}, 0x0) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 32) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async, rerun: 32) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 64) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xae, "fc469885e156a42ad68105a8acce6720d19928a02257cecb1cf1fedb53839eae6abceebc6724fef318d3f484ede6a653650bb8f06845b86ea73a20f6bb04aada440b5941003872b0359c64048fd696a2d8caa649cedd36b67ea5ab472457c633322b5ab9719155278a942d6fbc265b49d1e7e5db65d23d2bfc363751536012f17e459567fcb2821cbf75d78fe03be140c3d329c7ad345049b16eb036d63aab166fc1e35e13d4d9c1960a45d2ead4"}, &(0x7f0000000040)=0xb6) (rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x0, r12}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) 656.186362ms ago: executing program 0 (id=6934): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "948e30647b9d18779e68164db229b8fd"}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x182, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0x7, 0x7, 0x3}, {0x5, 0x9, 0x6, 0x4}, {0x6, 0x2, 0x7, 0x1}]}) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) sendto$inet6(r0, &(0x7f0000000180)="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", 0x1000, 0x20000081, &(0x7f0000001180)={0xa, 0x4e21, 0x5, @local}, 0x1c) (async, rerun: 64) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001200)=0x10) (rerun: 64) getsockname$inet(r3, &(0x7f0000001240)={0x2, 0x0, @broadcast}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000012c0)={0x8001, 0x0, 0x2, 0x1, 0x0}, &(0x7f0000001300)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001340)={r4, 0x8}, &(0x7f0000001380)=0x8) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) recvfrom(r3, &(0x7f00000013c0)=""/172, 0xac, 0x40000122, &(0x7f0000001480)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000001500)={r5, 0x8001, 0x6}, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000001580)={r5, 0x2, 0x30}, 0xc) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600), r6) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000001700)=0x2, 0x4) sendmsg$nl_generic(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000a}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x3b, 0x8, 0x70bd2d, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x10080}, 0x4008004) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xec, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x400c840) (async, rerun: 32) r11 = socket(0x2b, 0x4, 0x1000) (async, rerun: 32) r12 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r12, 0x1, 0x23, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000001a80)=0x1000000, 0x4) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000001ac0)=0xffffffffffffffff) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000001d00)={{r8, &(0x7f0000001b00), 0x30400, &(0x7f0000001b40)={@align=0x5, {0x3a, 0xffff, 0x822, 0x5}}, 0x7, &(0x7f0000001b80)={@_ha_fsid}, &(0x7f0000001bc0)=0x280000}, {[0xfff, 0x0, 0x7, 0x2]}, 0xf, 0xf6, &(0x7f0000001c00)=""/246}) (rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r13, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, 0x0, 0x308, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x1) 615.042098ms ago: executing program 4 (id=6935): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0xfffffe8a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x400) 585.781917ms ago: executing program 3 (id=6936): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 368.499052ms ago: executing program 1 (id=6937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x884) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x3a6f5491e0ad3b4f]}}, 0x0, 0x56}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x9, [@enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0xb9}, {0x1, 0x3}]}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @struct={0xa, 0xa, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x5, 0x2ca}, {0x3, 0x5, 0x2}, {0xe, 0x3, 0x7}, {0xa, 0x4, 0x7}, {0x0, 0x5, 0x1000}, {0x4, 0x4, 0x101}, {0xf, 0x5, 0x6d}, {0x10, 0x0, 0x6541c3b7}, {0xb, 0x3}, {0x10, 0x0, 0x4}]}]}, {0x0, [0x2e, 0x61, 0x5f, 0x0, 0x0, 0xf1, 0x61]}}, &(0x7f0000000180)=""/122, 0xe5, 0x7a, 0x0, 0x7fffffff}, 0x28) 349.827627ms ago: executing program 4 (id=6938): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xc, 0x9, 0x3d, 0x7f}, {0x4, 0x7, 0x9}]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000380)={0x1d, r4, 0x2, {0x1, 0x0, 0x2}}, 0x18) (async) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/103, 0x67}], 0x2}, 0x10020) 127.929919ms ago: executing program 0 (id=6939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x200, 0x0, 0x4, {{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x40}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40088d1}, 0x4c050) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x200, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x2, '\x00', 0x0, r3, 0x4}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bind$alg(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x29, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9000000}}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x56f62a2b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50000}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000240)=0xe, 0x4) 497.637µs ago: executing program 1 (id=6940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) close(r1) syz_emit_ethernet(0x87a2f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000010000000900010073797a310000000020000000030a01020000000000000000010000000900010073797a310000000030000000050a01020000000000000000010020000c0002400000000000ebff010900010073797a31000000004bff04846d380ac3b8cf8700e50e00001100010000000000000000000000000a"], 0x98}}, 0x800) 0s ago: executing program 3 (id=6941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012feffffff007678633e6e0000010400028008192d72ee5e067cbaaeefcaf3d8be791370ecce7766851c9b260afe64a48e442001d3d395286d6a3a3f6d1932898c5a1406f1f195dd6714a6405b"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): `syz.4.4943'. [ 581.971810][T24198] netlink: 'syz.2.4944': attribute type 2 has an invalid length. [ 582.310090][T24221] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 582.328890][T24221] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 582.691511][T24243] ip6gre2: entered promiscuous mode [ 582.763986][T24250] netlink: 'syz.0.4959': attribute type 1 has an invalid length. [ 582.781854][T24250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.812984][T24251] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 582.830075][T24254] bond9: ARP target 1.0.0.0 is already present [ 582.836779][T24254] bond9: option arp_ip_target: invalid value (1) [ 582.878251][T24254] bond9 (unregistering): Released all slaves [ 583.154238][T24272] netlink: 'syz.2.4966': attribute type 1 has an invalid length. [ 583.309140][T24284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4967'. [ 583.590382][T24305] Cannot find del_set index 65531 as target [ 583.672887][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4976'. [ 583.830572][T24324] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 583.912148][T24328] veth13: entered allmulticast mode [ 584.122250][T24346] netlink: 'syz.2.4987': attribute type 6 has an invalid length. [ 584.124601][T24344] netlink: 'syz.2.4987': attribute type 6 has an invalid length. [ 584.443698][T24363] veth7: entered allmulticast mode [ 584.958840][T24391] netlink: 'syz.4.5002': attribute type 11 has an invalid length. [ 584.968353][T24391] netlink: 'syz.4.5002': attribute type 4 has an invalid length. [ 584.976432][T24391] netlink: 'syz.4.5002': attribute type 5 has an invalid length. [ 584.989469][T24391] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.5002'. [ 585.041036][T24392] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 585.056779][T24392] bond4 (unregistering): Released all slaves [ 585.086649][T24391] sit0: entered promiscuous mode [ 585.093733][T24395] xt_hashlimit: size too large, truncated to 1048576 [ 585.106403][T24391] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5002'. [ 585.181013][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'. [ 586.476148][T24493] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 586.503171][T24489] can: request_module (can-proto-0) failed. [ 586.529232][T24489] can: request_module (can-proto-0) failed. [ 586.804521][T24511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.835807][T24516] bond3: (slave ip6gretap1): making interface the new active one [ 586.863959][T24516] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 586.920769][T24518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.020787][T24531] __nla_validate_parse: 2 callbacks suppressed [ 587.020806][T24531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5044'. [ 587.259644][T24542] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5048'. [ 587.405092][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 587.448550][T24557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5053'. [ 587.490862][T24557] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5053'. [ 587.503639][T24557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5053'. [ 587.658173][T24574] TCP: TCP_TX_DELAY enabled [ 587.670089][T24574] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5057'. [ 587.743249][T24582] netlink: 182812 bytes leftover after parsing attributes in process `syz.3.5060'. [ 587.765188][T24582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5060'. [ 587.955329][T24592] : renamed from hsr0 (while UP) [ 587.997958][T24599] validate_nla: 6 callbacks suppressed [ 587.997977][T24599] netlink: 'syz.0.5067': attribute type 29 has an invalid length. [ 588.282252][T24603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5066'. [ 588.363789][T24621] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.391503][T24621] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.483564][T24621] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.517458][T24621] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.600795][T24639] syzkaller0: entered promiscuous mode [ 588.606517][T24639] syzkaller0: entered allmulticast mode [ 588.628493][T24646] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 588.668510][T24646] netlink: 'syz.1.5079': attribute type 2 has an invalid length. [ 588.703861][T24621] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.717439][T24621] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.735165][T24646] tipc: Started in network mode [ 588.748999][T24646] tipc: Node identity 6aa908f05a72, cluster identity 4711 [ 588.770233][T24646] tipc: Enabled bearer , priority 0 [ 588.783630][T24654] syzkaller0: entered promiscuous mode [ 588.793713][T24654] syzkaller0: entered allmulticast mode [ 588.806115][T24621] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.820120][T24621] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.875097][T24646] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 588.975250][T24646] tipc: Resetting bearer [ 589.006029][T24645] tipc: Resetting bearer [ 589.026540][T24645] tipc: Disabling bearer [ 589.061925][T24103] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.079774][T24103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.135798][T24671] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 589.154656][T12766] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.165356][T12766] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.225357][T12766] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.234562][T12766] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.275759][T12766] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.309165][T12766] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.459118][T24681] SET target dimension over the limit! [ 589.770597][T24696] netlink: 'syz.0.5097': attribute type 32 has an invalid length. [ 590.008312][T24713] netlink: 'syz.4.5102': attribute type 10 has an invalid length. [ 590.016446][T24713] dummy0: entered promiscuous mode [ 590.039653][T24713] bridge0: port 1(dummy0) entered blocking state [ 590.052220][T24713] bridge0: port 1(dummy0) entered disabled state [ 590.066382][T24713] dummy0: entered allmulticast mode [ 590.083295][T24713] bridge0: port 1(dummy0) entered blocking state [ 590.089938][T24713] bridge0: port 1(dummy0) entered forwarding state [ 590.134146][T24725] syzkaller1: entered promiscuous mode [ 590.146393][T24725] syzkaller1: entered allmulticast mode [ 590.521439][T24753] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 590.652215][T24748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.664150][T24748] bond5: (slave bond6): making interface the new active one [ 590.678613][T24748] bond5: (slave bond6): Enslaving as an active interface with an up link [ 590.706686][T24753] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 590.720053][T24748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.021042][T24767] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 591.057814][T24775] netlink: 'syz.2.5121': attribute type 2 has an invalid length. [ 591.439461][T24803] netlink: 'syz.2.5130': attribute type 15 has an invalid length. [ 591.691938][T24814] openvswitch: netlink: Flow actions attr not present in new flow. [ 592.161149][T24837] __nla_validate_parse: 24 callbacks suppressed [ 592.161171][T24837] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5141'. [ 592.299845][T24838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5141'. [ 592.311288][T24838] netlink: 'syz.0.5141': attribute type 1 has an invalid length. [ 592.319274][T24838] netlink: 'syz.0.5141': attribute type 2 has an invalid length. [ 592.475567][T24851] sit0: left promiscuous mode [ 592.496582][T24853] xt_time: unknown flags 0xf4 [ 592.559254][T24851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.628000][T24859] tipc: Enabling of bearer rejected, failed to enable media [ 592.820695][T24863] netem: change failed [ 592.856639][T24869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5151'. [ 593.134746][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5154'. [ 593.386910][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5159'. [ 593.491306][T24909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 593.534815][T24909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 594.263340][T24963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5181'. [ 594.273445][T24969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5182'. [ 594.301911][T24965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5181'. [ 594.483976][T24979] syzkaller0: entered promiscuous mode [ 594.491281][T24979] syzkaller0: entered allmulticast mode [ 594.502198][T24979] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 594.782519][T24987] syzkaller0: entered promiscuous mode [ 595.287557][T25028] block nbd4: not configured, cannot reconfigure [ 597.314330][T25023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.383178][T25019] wg1 speed is unknown, defaulting to 1000 [ 597.416482][T25046] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 597.597360][T25060] __nla_validate_parse: 49 callbacks suppressed [ 597.597381][T25060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5203'. [ 597.811989][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5210'. [ 597.991749][T25080] syzkaller0: entered promiscuous mode [ 598.005957][T25080] syzkaller0: entered allmulticast mode [ 598.024865][T11887] 0: reclassify loop, rule prio 0, protocol 800 [ 598.099673][T25088] xt_addrtype: ipv6 does not support BROADCAST matching [ 598.168531][T25080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5211'. [ 598.279003][T25100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5218'. [ 598.293250][T25098] --map-set only usable from mangle table [ 598.549248][T25121] validate_nla: 1 callbacks suppressed [ 598.549273][T25121] netlink: 'syz.4.5224': attribute type 10 has an invalid length. [ 598.746392][T25128] syzkaller0: entered promiscuous mode [ 598.753533][T25128] syzkaller0: entered allmulticast mode [ 599.044732][T25139] syzkaller1: entered promiscuous mode [ 599.087897][T25139] syzkaller1: entered allmulticast mode [ 599.194939][T25158] wg1 speed is unknown, defaulting to 1000 [ 599.278760][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 599.291257][T25165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5238'. [ 599.503441][T25168] bond5 (unregistering): Released all slaves [ 599.611520][T25192] netlink: 'syz.4.5244': attribute type 39 has an invalid length. [ 599.611881][T25191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.701732][T25178] pim6reg: entered allmulticast mode [ 599.727099][T25190] pim6reg: left allmulticast mode [ 599.807480][T25193] wireguard0: entered promiscuous mode [ 599.814070][T25193] wireguard0: entered allmulticast mode [ 599.830088][T25202] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 599.838428][T25202] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5246'. [ 599.847784][T25202] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5246'. [ 599.856814][T25202] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5246'. [ 600.045168][T25209] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 600.056531][T25210] netlink: 464 bytes leftover after parsing attributes in process `syz.2.5249'. [ 600.302924][T25224] netlink: 'syz.0.5253': attribute type 1 has an invalid length. [ 600.431920][T25224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.514027][T25227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.529045][T25227] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 600.546612][T25227] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 600.622505][T25233] vlan1: entered allmulticast mode [ 600.628887][T25233] bond5: entered allmulticast mode [ 600.692810][ T7175] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.702583][ T7175] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.725026][ T7175] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.758907][ T7175] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.780698][T25238] veth1_to_team: mtu less than device minimum [ 600.939340][T25253] syzkaller0: entered promiscuous mode [ 600.945000][T25253] syzkaller0: entered allmulticast mode [ 601.353746][T25285] Bluetooth: MGMT ver 1.23 [ 601.358861][T25285] Bluetooth: hci1: too big key_count value 32778 [ 603.155469][T25288] netlink: 'syz.0.5265': attribute type 12 has an invalid length. [ 603.190139][T25290] xt_TCPMSS: Only works on TCP SYN packets [ 603.320718][T25301] __nla_validate_parse: 2 callbacks suppressed [ 603.320738][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'. [ 603.335608][T25298] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20001 [ 603.375535][T25299] nbd: must specify at least one socket [ 603.583106][T25309] netlink: 2168 bytes leftover after parsing attributes in process `syz.1.5272'. [ 603.602907][T25313] netlink: 2168 bytes leftover after parsing attributes in process `syz.1.5272'. [ 603.686674][T25316] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.750009][T25320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5277'. [ 604.051845][T25337] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5281'. [ 604.095558][T25337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5281'. [ 604.160006][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5283'. [ 604.579676][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5287'. [ 604.716153][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5288'. [ 604.865790][T25386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5290'. [ 604.967277][T25391] wg1: entered promiscuous mode [ 604.974273][T25391] wg1: entered allmulticast mode [ 605.185404][T25404] wg1 speed is unknown, defaulting to 1000 [ 605.361553][T25410] Cannot find add_set index 1 as target [ 605.373458][T25412] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 605.897612][T25442] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 605.969966][T25404] batman_adv: batadv0: Adding interface: dummy0 [ 605.976416][T25404] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.040109][T25404] batman_adv: batadv0: Interface activated: dummy0 [ 606.648442][T25478] veth1_vlan (unregistering): left allmulticast mode [ 606.955187][T25491] netlink: 'syz.0.5322': attribute type 10 has an invalid length. [ 607.176418][T25510] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 607.415582][T25519] bond6 (unregistering): Released all slaves [ 607.462084][T25532] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 607.505725][T25532] netlink: 'syz.4.5333': attribute type 33 has an invalid length. [ 607.795391][T25547] SET target dimension over the limit! [ 607.831003][T25554] SET target dimension over the limit! [ 607.949854][T25555] nbd1: detected capacity change from 0 to 127 [ 607.957724][T20249] block nbd1: Receive control failed (result -32) [ 608.008013][T25405] block nbd1: Dead connection, failed to find a fallback [ 608.029861][T25405] block nbd1: shutting down sockets [ 608.035133][T25405] blk_print_req_error: 138 callbacks suppressed [ 608.035151][T25405] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.136449][T25405] buffer_io_error: 138 callbacks suppressed [ 608.136466][T25405] Buffer I/O error on dev nbd1, logical block 0, async page read [ 608.164289][T25405] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.182944][T25405] Buffer I/O error on dev nbd1, logical block 1, async page read [ 608.203360][T25575] netlink: 'syz.1.5349': attribute type 3 has an invalid length. [ 608.211608][T25405] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.268316][T25405] Buffer I/O error on dev nbd1, logical block 2, async page read [ 608.286489][T25405] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.311292][T25405] Buffer I/O error on dev nbd1, logical block 3, async page read [ 608.338626][T25405] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.349411][T25405] Buffer I/O error on dev nbd1, logical block 0, async page read [ 608.368503][T25405] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.388572][T25405] Buffer I/O error on dev nbd1, logical block 1, async page read [ 608.409573][T25405] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.421883][T25586] __nla_validate_parse: 10 callbacks suppressed [ 608.421902][T25586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'. [ 608.428692][T25405] Buffer I/O error on dev nbd1, logical block 2, async page read [ 608.428801][T25405] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.428827][T25405] Buffer I/O error on dev nbd1, logical block 3, async page read [ 608.428883][T25405] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.428908][T25405] Buffer I/O error on dev nbd1, logical block 0, async page read [ 608.428956][T25405] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 608.428980][T25405] Buffer I/O error on dev nbd1, logical block 1, async page read [ 608.432665][T25405] ldm_validate_partition_table(): Disk read failed. [ 608.506526][T25405] Dev nbd1: unable to read RDB block 0 [ 608.513475][T25405] nbd1: unable to read partition table [ 608.525720][T25405] ldm_validate_partition_table(): Disk read failed. [ 608.552190][T25588] geneve2: entered promiscuous mode [ 608.559170][T25588] geneve2: entered allmulticast mode [ 608.570141][T23322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 608.597888][T25405] Dev nbd1: unable to read RDB block 0 [ 608.602401][T23322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 608.605769][T25405] nbd1: unable to read partition table [ 608.638478][T23322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 608.668612][T23322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 608.714251][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 608.932178][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'. [ 609.103941][T25607] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5363'. [ 609.760937][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5370'. [ 609.801070][T25634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5370'. [ 609.835466][T25634] hsr_slave_0: left promiscuous mode [ 609.878527][T25634] hsr_slave_1: left promiscuous mode [ 610.232543][T25672] netlink: 'syz.2.5381': attribute type 3 has an invalid length. [ 610.243961][T25672] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5381'. [ 610.549962][T25692] openvswitch: netlink: Missing valid actions attribute. [ 610.581560][T25692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.625788][T25692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5387'. [ 610.665957][T25698] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5389'. [ 611.003243][T25721] x_tables: duplicate underflow at hook 1 [ 611.046385][T25724] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5397'. [ 611.079735][T25729] netlink: 'syz.2.5399': attribute type 9 has an invalid length. [ 611.401611][T25745] syzkaller0: entered promiscuous mode [ 611.410709][T25745] syzkaller0: entered allmulticast mode [ 611.410963][T25747] netlink: 'syz.1.5404': attribute type 1 has an invalid length. [ 611.522725][T25751] netlink: 'syz.2.5405': attribute type 63 has an invalid length. [ 611.535512][T25751] netlink: 'syz.2.5405': attribute type 63 has an invalid length. [ 611.664855][T25760] netlink: 'syz.3.5409': attribute type 2 has an invalid length. [ 611.696356][T25763] netlink: 'syz.1.5408': attribute type 1 has an invalid length. [ 612.193801][T25805] validate_nla: 1 callbacks suppressed [ 612.193823][T25805] netlink: 'syz.3.5422': attribute type 1 has an invalid length. [ 612.793363][T25851] veth9: entered promiscuous mode [ 612.798721][T25851] veth9: entered allmulticast mode [ 612.821969][T25847] dvmrp6: entered allmulticast mode [ 612.881229][T25856] netlink: 'syz.0.5434': attribute type 7 has an invalid length. [ 612.890143][T25856] netlink: 'syz.0.5434': attribute type 7 has an invalid length. [ 612.965868][T25858] netlink: 'syz.2.5436': attribute type 24 has an invalid length. [ 613.214702][T25873] vti0: entered allmulticast mode [ 613.236392][T25875] syzkaller0: entered promiscuous mode [ 613.251146][T25875] syzkaller0: entered allmulticast mode [ 613.277719][T25873] bridge8: entered promiscuous mode [ 613.294305][T25873] bridge8: entered allmulticast mode [ 613.540234][T25891] __nla_validate_parse: 11 callbacks suppressed [ 613.540254][T25891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5443'. [ 613.600064][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 613.635514][T25861] syzkaller1: entered promiscuous mode [ 613.642531][T25861] syzkaller1: entered allmulticast mode [ 614.168463][T25927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5449'. [ 614.188450][T25927] openvswitch: netlink: Flow key attr not present in new flow. [ 614.253769][T25932] netlink: 'syz.0.5452': attribute type 4 has an invalid length. [ 614.310986][T25932] netlink: 193176 bytes leftover after parsing attributes in process `syz.0.5452'. [ 614.333062][T25923] "syz.4.5449" (25923) uses obsolete ecb(arc4) skcipher [ 614.350724][T25935] netlink: 'syz.1.5453': attribute type 10 has an invalid length. [ 614.358908][T25935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5453'. [ 614.393108][T25935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5453'. [ 614.450631][T25938] tipc: Enabled bearer , priority 0 [ 614.539714][T25949] netlink: 'syz.0.5457': attribute type 3 has an invalid length. [ 614.573352][T25938] syzkaller0: entered promiscuous mode [ 614.596512][T25938] syzkaller0: entered allmulticast mode [ 614.613155][T25938] tipc: Resetting bearer [ 614.650434][T25936] tipc: Resetting bearer [ 614.815363][T25968] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5461'. [ 614.879425][T25968] netlink: 'syz.4.5461': attribute type 1 has an invalid length. [ 616.666926][T25936] tipc: Disabling bearer [ 616.685166][ T5926] tipc: Node number set to 3758096385 [ 616.810938][T25978] tipc: Enabling of bearer rejected, failed to enable media [ 617.086783][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 617.119774][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 617.150015][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 617.244737][T26016] netlink: 'syz.4.5478': attribute type 1 has an invalid length. [ 617.454209][T26032] openvswitch: netlink: Tunnel attr 2 has unexpected len 16 expected 4 [ 617.889192][T26056] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 617.958846][T26059] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 618.273728][T26087] veth0: entered promiscuous mode [ 618.389928][T26093] netlink: 'syz.0.5502': attribute type 2 has an invalid length. [ 618.423404][T26079] veth0: left promiscuous mode [ 618.614030][T26107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.912346][T26125] veth0: entered promiscuous mode [ 618.930117][T26124] veth0: left promiscuous mode [ 618.958823][T26130] x_tables: duplicate underflow at hook 3 [ 619.143641][T26142] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 619.212196][T26149] __nla_validate_parse: 7 callbacks suppressed [ 619.212218][T26149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5522'. [ 619.379261][T26157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 619.648990][T26173] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 619.700514][T26175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5529'. [ 620.031033][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5534'. [ 620.065919][T26187] bond5: option xmit_hash_policy: invalid value (64) [ 620.077744][T26187] bond5 (unregistering): Released all slaves [ 620.365452][T26197] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.412681][T26197] bridge0: entered allmulticast mode [ 620.684395][T26222] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.350196][T26265] netlink: 'syz.1.5558': attribute type 1 has an invalid length. [ 621.378005][T26264] geneve2: entered promiscuous mode [ 621.397432][T26274] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 621.459357][T26265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5558'. [ 621.478721][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5561'. [ 621.488315][T26276] veth15: entered promiscuous mode [ 621.499199][T26276] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 621.511752][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 621.522389][T26274] netlink: 'syz.3.5561': attribute type 2 has an invalid length. [ 621.534561][T26265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.542583][T26274] netlink: 'syz.3.5561': attribute type 2 has an invalid length. [ 621.551411][T26274] netlink: 'syz.3.5561': attribute type 2 has an invalid length. [ 621.596677][T26279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.668511][T26291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5566'. [ 621.678386][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5566'. [ 621.794748][T26305] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 622.069773][T11977] lec:lec_start_xmit: lec0:No lecd attached [ 622.258744][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'. [ 622.286341][T26331] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5576'. [ 622.474928][T26341] wg1 speed is unknown, defaulting to 1000 [ 622.590884][T26352] netlink: 'syz.4.5582': attribute type 1 has an invalid length. [ 622.608547][T26352] netlink: 'syz.4.5582': attribute type 4 has an invalid length. [ 623.025818][T26383] netlink: 'syz.4.5589': attribute type 1 has an invalid length. [ 623.045087][T26383] erspan2: entered allmulticast mode [ 623.158903][T26387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.498423][T26406] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 623.907026][T26449] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 624.053512][T26458] bond0: option ad_select: unable to set because the bond device is up [ 624.197402][T26466] netlink: 'syz.3.5613': attribute type 1 has an invalid length. [ 624.205226][T26466] netlink: 'syz.3.5613': attribute type 11 has an invalid length. [ 624.345469][T26472] __nla_validate_parse: 8 callbacks suppressed [ 624.345490][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5617'. [ 624.368839][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5617'. [ 624.418462][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5618'. [ 624.593446][T26493] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.606559][T26493] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.736751][T26493] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.770088][T26493] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.832139][T26508] netlink: 'syz.1.5626': attribute type 1 has an invalid length. [ 624.854936][T26493] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.883711][T26493] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.930102][T26508] bond8: entered promiscuous mode [ 624.935425][T26508] bond8: entered allmulticast mode [ 624.942150][T26508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.958365][T26493] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.968637][T26493] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.002902][T26510] erspan1: entered allmulticast mode [ 625.019883][T26510] bond8: (slave erspan1): making interface the new active one [ 625.032624][T26510] erspan1: entered promiscuous mode [ 625.043911][T26510] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 625.145698][ T7175] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.162417][ T7175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.177508][T26527] netlink: 'syz.4.5630': attribute type 6 has an invalid length. [ 625.206699][ T7175] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.215701][ T7175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.279870][ T7175] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.281380][T26535] netlink: 'syz.1.5631': attribute type 10 has an invalid length. [ 625.307084][ T7175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.337659][ T7172] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.351357][ T7172] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.742800][T26564] x_tables: unsorted entry at hook 3 [ 625.814422][T26566] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 625.842343][T26569] bond0: (slave gre0): Error: Device type is different from other slaves [ 625.865931][T26566] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 625.895116][T26566] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 625.961050][T26566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 626.363881][T26607] netlink: 'syz.4.5651': attribute type 2 has an invalid length. [ 626.379363][T26594] syzkaller0: entered promiscuous mode [ 626.385071][T26594] syzkaller0: entered allmulticast mode [ 626.518059][T26611] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5652'. [ 626.528331][T26611] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 626.764681][T26638] veth0_virt_wifi: default FDB implementation only supports local addresses [ 626.926488][T26648] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 627.081174][T26659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5666'. [ 627.124040][T26661] netlink: zone id is out of range [ 627.129648][T26661] netlink: zone id is out of range [ 627.136353][T26661] netlink: zone id is out of range [ 627.144384][T26661] netlink: zone id is out of range [ 627.151134][T26661] netlink: zone id is out of range [ 627.156833][T26661] netlink: zone id is out of range [ 627.157519][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 627.166733][T26661] netlink: zone id is out of range [ 627.170014][ C0] lec:lec_tx_timeout: lec0 [ 627.356218][T26672] macvtap1: entered promiscuous mode [ 627.377070][T26672] macvtap1: entered allmulticast mode [ 627.391411][T26672] veth1_vlan: entered allmulticast mode [ 627.404819][T26671] netlink: 'syz.0.5670': attribute type 5 has an invalid length. [ 627.444172][T26676] macvtap2: entered promiscuous mode [ 627.455165][T26676] macvtap2: entered allmulticast mode [ 627.497622][T26672] netlink: 476 bytes leftover after parsing attributes in process `syz.1.5671'. [ 627.528550][T26672] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5671'. [ 627.565473][T26686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 627.592186][T26693] xt_l2tp: invalid flags combination: 0 [ 627.610110][T26686] vlan1: entered allmulticast mode [ 627.615387][T26686] geneve1: entered allmulticast mode [ 627.769592][T26701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5679'. [ 627.851716][T26707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5679'. [ 627.932730][T26713] dummy0: left allmulticast mode [ 627.942545][T26713] dummy0: left promiscuous mode [ 627.958361][T26713] bridge0: port 1(dummy0) entered disabled state [ 627.996240][T26713] bridge_slave_1: left allmulticast mode [ 628.007397][T26713] bridge_slave_1: left promiscuous mode [ 628.013269][T26713] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.571518][T26720] syzkaller0: entered promiscuous mode [ 628.577275][T26720] syzkaller0: entered allmulticast mode [ 628.899917][T26759] validate_nla: 1 callbacks suppressed [ 628.899938][T26759] netlink: 'syz.1.5693': attribute type 1 has an invalid length. [ 629.713056][ T1304] net_ratelimit: 47 callbacks suppressed [ 629.713079][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 629.731640][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 630.677393][T26769] __nla_validate_parse: 6 callbacks suppressed [ 630.677414][T26769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5695'. [ 630.922585][T26786] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5701'. [ 630.958380][T26786] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5701'. [ 630.974963][T26793] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5702'. [ 630.984303][T26793] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 631.209246][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5706'. [ 631.708664][T26846] only policy match revision 0 supported [ 631.708687][T26846] unable to load match [ 631.771545][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5718'. [ 631.876732][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5721'. [ 631.928370][T26859] netlink: 'syz.3.5720': attribute type 1 has an invalid length. [ 632.059659][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 632.421635][T26896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5732'. [ 632.581731][T26906] netlink: 'syz.3.5735': attribute type 1 has an invalid length. [ 632.634547][T26906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.654219][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 632.737130][T26908] bond6: (slave geneve3): making interface the new active one [ 632.751931][T26908] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 632.896581][T26924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.055489][T26936] mac80211_hwsim hwsim20 : renamed from wlan1 [ 633.119571][T26932] wg1 speed is unknown, defaulting to 1000 [ 633.179750][T26925] wg1 speed is unknown, defaulting to 1000 [ 633.266528][T26940] wg1 speed is unknown, defaulting to 1000 [ 633.428300][T26955] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 633.485996][T26955] bond6: entered promiscuous mode [ 633.491650][T26955] bond6: entered allmulticast mode [ 633.497511][T26955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.001812][T26995] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 635.115148][T27002] xt_hashlimit: size too large, truncated to 1048576 [ 635.147243][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 635.155331][ C0] lec:lec_tx_timeout: lec0 [ 635.350310][T27016] syzkaller0: entered promiscuous mode [ 635.376319][T27016] syzkaller0: entered allmulticast mode [ 635.406427][T27030] SET target dimension over the limit! [ 635.615698][T27040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.665527][T27043] tipc: Enabled bearer , priority 0 [ 635.802668][T27043] syzkaller0: entered promiscuous mode [ 635.842934][T27043] syzkaller0: entered allmulticast mode [ 635.850470][T27043] tipc: Resetting bearer [ 635.892042][T27042] tipc: Resetting bearer [ 636.022159][T27066] __nla_validate_parse: 9 callbacks suppressed [ 636.022180][T27066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5777'. [ 637.651440][T27042] tipc: Disabling bearer [ 637.780547][T27075] syzkaller1: entered promiscuous mode [ 637.786183][T27075] syzkaller1: entered allmulticast mode [ 637.819323][T27077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5782'. [ 637.829024][T27077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5782'. [ 637.857494][T27082] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 637.927755][T27081] xt_hashlimit: size too large, truncated to 1048576 [ 637.971343][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5784'. [ 638.393745][T27110] netlink: 'syz.2.5791': attribute type 10 has an invalid length. [ 638.544203][T27121] tipc: Enabled bearer , priority 0 [ 638.568743][T27121] syzkaller0: entered promiscuous mode [ 638.574382][T27121] syzkaller0: entered allmulticast mode [ 638.624287][T27121] tipc: Resetting bearer [ 638.640749][T27120] tipc: Resetting bearer [ 638.703285][T27120] tipc: Disabling bearer [ 638.764933][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 638.852391][T27140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5800'. [ 638.869669][T27138] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 638.882964][T27140] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5800'. [ 639.220246][T27162] syzkaller0: entered promiscuous mode [ 639.226051][T27162] syzkaller0: entered allmulticast mode [ 639.371415][T27174] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5811'. [ 639.594631][T27184] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.5813'. [ 639.674776][T27187] gre0: entered promiscuous mode [ 639.681309][T27187] gre0: entered allmulticast mode [ 640.059744][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'. [ 640.584376][T27234] syzkaller0: entered promiscuous mode [ 640.617067][T27234] syzkaller0: entered allmulticast mode [ 640.670106][T27245] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 640.752160][T27249] netlink: 'syz.0.5831': attribute type 4 has an invalid length. [ 640.907673][T27249] `: renamed from bond0 (while UP) [ 641.069564][T27260] __nla_validate_parse: 1 callbacks suppressed [ 641.069582][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.110947][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.151090][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.186221][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.239496][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.261159][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.288086][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.300225][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.315657][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 641.329140][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 643.436187][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.446999][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.458348][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.470187][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.478656][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.511186][T20249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.522041][T20249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.529586][T20249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.549095][T20249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.558799][T20249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.594664][T27316] syzkaller0: entered promiscuous mode [ 643.604788][T27314] netlink: 'syz.3.5852': attribute type 3 has an invalid length. [ 643.647415][T27316] syzkaller0: entered allmulticast mode [ 643.827104][T27309] wg1 speed is unknown, defaulting to 1000 [ 644.133576][T27331] syzkaller1: entered promiscuous mode [ 644.140273][T27331] syzkaller1: entered allmulticast mode [ 644.307015][T27330] wg1 speed is unknown, defaulting to 1000 [ 644.425541][T24115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.573211][T24115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.801933][T24115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.940802][T27376] IPv6: sit1: Disabled Multicast RS [ 645.099679][T24115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.143398][T27309] chnl_net:caif_netlink_parms(): no params data found [ 645.308717][T27384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.596336][T27411] sctp: [Deprecated]: syz.0.5872 (pid 27411) Use of int in max_burst socket option deprecated. [ 645.596336][T27411] Use struct sctp_assoc_value instead [ 645.628728][T20249] Bluetooth: hci4: command tx timeout [ 645.664177][T27309] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.673650][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.681562][T27309] bridge_slave_0: entered allmulticast mode [ 645.690071][T27309] bridge_slave_0: entered promiscuous mode [ 645.721647][T27309] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.737597][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.744944][T27309] bridge_slave_1: entered allmulticast mode [ 645.767063][T27309] bridge_slave_1: entered promiscuous mode [ 645.866604][T24115] bridge_slave_1: left allmulticast mode [ 645.873587][T24115] bridge_slave_1: left promiscuous mode [ 645.880979][T24115] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.907982][T24115] bridge_slave_0: left allmulticast mode [ 645.914225][T24115] bridge_slave_0: left promiscuous mode [ 645.920833][T24115] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.956057][T24115] veth0_to_bond: left allmulticast mode [ 645.964242][T24115] veth0_to_bond: left promiscuous mode [ 645.974881][T24115] bridge4: port 2(veth0_to_bond) entered disabled state [ 645.985006][T24115] veth7: left allmulticast mode [ 645.991584][T24115] veth7: left promiscuous mode [ 645.996629][T24115] bridge4: port 1(veth7) entered disabled state [ 646.252535][T24115] bond8 (unregistering): (slave erspan1): Releasing active interface [ 646.263231][T24115] erspan1 (unregistering): left promiscuous mode [ 646.297863][T24115] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 646.384273][T24115] dvmrp6 (unregistering): left allmulticast mode [ 646.419090][T24115] bond4 (unregistering): (slave geneve3): Releasing active interface [ 646.868551][T24115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.880648][T24115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.896021][T24115] bond0 (unregistering): Released all slaves [ 647.012285][T24115] bond1 (unregistering): Released all slaves [ 647.130415][T24115] bond2 (unregistering): Released all slaves [ 647.254364][T24115] bond3 (unregistering): Released all slaves [ 647.369088][T24115] bond4 (unregistering): Released all slaves [ 647.512643][T24115] bond5 (unregistering): (slave bond6): Releasing backup interface [ 647.521981][T24115] bond5 (unregistering): Released all slaves [ 647.639360][T24115] bond6 (unregistering): Released all slaves [ 647.710860][T20249] Bluetooth: hci4: command tx timeout [ 647.762921][T24115] bond7 (unregistering): (slave veth15): Releasing backup interface [ 647.773380][T24115] bond7 (unregistering): Released all slaves [ 647.891848][T24115] bond8 (unregistering): Released all slaves [ 647.906057][T24115] bond9 (unregistering): Released all slaves [ 647.922561][T27309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.041557][T27430] tipc: Enabling of bearer rejected, failed to enable media [ 648.080713][T27429] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 648.160664][T27309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.265733][T24115] #{6c: left promiscuous mode [ 648.392059][T27309] team0: Port device team_slave_0 added [ 648.416641][T27309] team0: Port device team_slave_1 added [ 648.442990][T24115] : left promiscuous mode [ 648.589198][T27309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.596232][T27309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.658160][T27309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.681147][T24115] tipc: Left network mode [ 648.689767][T27309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.709833][T27309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.777598][T27309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.956991][T27496] __nla_validate_parse: 23 callbacks suppressed [ 648.957013][T27496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5892'. [ 649.068765][T27309] hsr_slave_0: entered promiscuous mode [ 649.075427][T27309] hsr_slave_1: entered promiscuous mode [ 649.107764][T27499] syzkaller0: entered promiscuous mode [ 649.113310][T27499] syzkaller0: entered allmulticast mode [ 649.269517][T27499] tipc: Enabled bearer , priority 0 [ 649.459056][T27498] tipc: Resetting bearer [ 649.548709][T27498] tipc: Disabling bearer [ 649.747506][T27542] openvswitch: netlink: Flow key attr not present in new flow. [ 649.761131][T27544] netlink: 516 bytes leftover after parsing attributes in process `syz.2.5904'. [ 649.772651][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 649.787507][T20249] Bluetooth: hci4: command tx timeout [ 649.836208][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 649.981146][T24115] hsr_slave_0: left promiscuous mode [ 650.005913][T24115] hsr_slave_1: left promiscuous mode [ 650.041195][T24115] veth1_vlan: left allmulticast mode [ 650.055149][T24115] veth0_macvtap: left promiscuous mode [ 650.074225][T24115] veth1_vlan: left promiscuous mode [ 650.527737][T24115] pimreg (unregistering): left allmulticast mode [ 651.474022][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.512201][T27540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 651.530345][T27574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5908'. [ 651.636925][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.640527][T27582] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5910'. [ 651.756619][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.768012][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 651.799637][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 651.810560][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.829682][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.840303][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.849243][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.867630][T20249] Bluetooth: hci4: command tx timeout [ 651.974051][T27540] virt_wifi0 speed is unknown, defaulting to 1000 [ 652.207671][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5917'. [ 652.602723][T27633] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5922'. [ 652.642065][T24115] IPVS: stop unused estimator thread 0... [ 652.685006][T27635] netlink: 'syz.4.5923': attribute type 29 has an invalid length. [ 652.706709][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 652.732540][T27635] netlink: 'syz.4.5923': attribute type 29 has an invalid length. [ 652.762738][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 652.862979][T27635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.068261][T27659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 653.075567][T27659] IPv6: NLM_F_CREATE should be set when creating new route [ 653.082955][T27659] IPv6: NLM_F_CREATE should be set when creating new route [ 653.090264][T27659] IPv6: NLM_F_CREATE should be set when creating new route [ 653.111308][T27309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 653.174375][T27659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 653.328925][T27309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 653.381651][T27309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 653.442039][T27309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 653.795728][T27309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.902176][T27309] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.930759][T27698] netlink: 'syz.3.5935': attribute type 11 has an invalid length. [ 653.954046][T27705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.958781][T27698] __nla_validate_parse: 3 callbacks suppressed [ 653.958825][T27698] netlink: 896 bytes leftover after parsing attributes in process `syz.3.5935'. [ 654.050843][T23321] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.058129][T23321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.161238][T23322] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.168619][T23322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.253391][T27718] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5942'. [ 654.302226][T27718] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5942'. [ 654.971683][T27309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.084760][ T38] tipc: Subscription rejected, illegal request [ 655.098511][T27309] veth0_vlan: entered promiscuous mode [ 655.129947][T27309] veth1_vlan: entered promiscuous mode [ 655.179748][T27309] veth0_macvtap: entered promiscuous mode [ 655.192977][T27309] veth1_macvtap: entered promiscuous mode [ 655.231645][T27309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.270224][T27309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.293838][T27775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5957'. [ 655.306780][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.410334][T23321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.442716][T23321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.460600][T23321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.482673][T27783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 655.490000][T27783] IPv6: NLM_F_CREATE should be set when creating new route [ 655.575497][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.615982][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.689473][T24116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.702083][T24116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.242916][T27815] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5967'. [ 657.206379][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5980'. [ 657.223190][T27877] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5982'. [ 657.253317][T27877] openvswitch: netlink: Flow key attr not present in new flow. [ 657.337999][T27885] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5983'. [ 658.063307][T27931] netlink: 'syz.1.5996': attribute type 6 has an invalid length. [ 658.093367][T27934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5995'. [ 658.235858][T27950] pim6reg1: entered promiscuous mode [ 658.242301][T27950] pim6reg1: entered allmulticast mode [ 658.265774][T27949] Bluetooth: hci1: too big key_count value 32778 [ 658.508022][T27961] sctp: [Deprecated]: syz.1.6002 (pid 27961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.508022][T27961] Use struct sctp_sack_info instead [ 658.604261][T27970] netlink: 'syz.0.6003': attribute type 23 has an invalid length. [ 658.864244][T27983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6009'. [ 659.050687][T27994] __nla_validate_parse: 2 callbacks suppressed [ 659.050710][T27994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6012'. [ 659.134721][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6014'. [ 659.148144][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6014'. [ 659.175218][T27996] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6013'. [ 659.185689][T27996] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6013'. [ 659.206199][T27996] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 659.304718][T28008] netlink: 'syz.3.6017': attribute type 39 has an invalid length. [ 659.410547][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 661.843347][T27982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.056356][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 662.067018][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 662.152816][T28038] netlink: 'syz.0.6025': attribute type 30 has an invalid length. [ 662.227979][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6025'. [ 662.330275][T28047] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 662.426955][T28045] macvtap1: entered promiscuous mode [ 662.488364][T28045] vlan0: entered promiscuous mode [ 662.497793][T28045] macvtap1: entered allmulticast mode [ 662.503268][T28045] vlan0: entered allmulticast mode [ 662.514661][T28045] veth0_vlan: entered allmulticast mode [ 662.530730][T28059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6027'. [ 662.556280][T28061] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 662.849152][T28083] netlink: 'syz.3.6035': attribute type 21 has an invalid length. [ 662.904705][T28087] netlink: 'syz.1.6036': attribute type 64 has an invalid length. [ 662.935428][T28089] ip6gre1: entered allmulticast mode [ 663.679120][T28136] IPv6: addrconf: prefix option has invalid lifetime [ 663.970444][T28148] netlink: 'syz.2.6049': attribute type 2 has an invalid length. [ 664.098846][T28168] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 664.141384][T28171] __nla_validate_parse: 8 callbacks suppressed [ 664.141402][T28171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6058'. [ 666.878627][T28152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.903632][T28161] netlink: 'syz.1.6055': attribute type 23 has an invalid length. [ 666.936555][T28184] netlink: 'syz.3.6061': attribute type 23 has an invalid length. [ 667.243534][T28196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'. [ 667.498576][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.510125][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.531209][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.540053][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.554433][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.681684][T28210] wg1 speed is unknown, defaulting to 1000 [ 667.699307][T28210] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.710563][T28216] netlink: 'syz.0.6072': attribute type 1 has an invalid length. [ 667.771628][T28216] bond7: entered promiscuous mode [ 667.778911][T28216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.894669][T28216] bond7: (slave bridge7): making interface the new active one [ 667.906882][T28216] bridge7: entered promiscuous mode [ 667.930782][T28216] bridge7: left promiscuous mode [ 668.322804][T28210] chnl_net:caif_netlink_parms(): no params data found [ 668.426953][T28253] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 668.601341][T28210] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.610097][T28210] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.618573][T28210] bridge_slave_0: entered allmulticast mode [ 668.626637][T28210] bridge_slave_0: entered promiscuous mode [ 668.638641][T28210] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.646167][T28210] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.656608][T28210] bridge_slave_1: entered allmulticast mode [ 668.664679][T28210] bridge_slave_1: entered promiscuous mode [ 668.732318][T28210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.809420][T28210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.828032][T28274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6089'. [ 668.968568][T28210] team0: Port device team_slave_0 added [ 668.989999][T28210] team0: Port device team_slave_1 added [ 669.032971][T28210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.040200][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.068599][T28210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.110314][T28210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.137430][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.190748][T28210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.286849][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6098'. [ 669.353217][T28308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6095'. [ 669.365537][T28303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.375444][T28210] hsr_slave_0: entered promiscuous mode [ 669.392412][T28210] hsr_slave_1: entered promiscuous mode [ 669.401112][T28210] debugfs: 'hsr0' already exists in 'hsr' [ 669.407084][T28210] Cannot create hsr debugfs directory [ 669.481751][T28311] syzkaller0: entered promiscuous mode [ 669.487887][T28311] syzkaller0: entered allmulticast mode [ 669.597939][T28315] netlink: 'syz.0.6101': attribute type 33 has an invalid length. [ 669.627407][T20249] Bluetooth: hci5: command tx timeout [ 669.645607][T28314] SET target dimension over the limit! [ 669.686702][T28315] syzkaller1: entered promiscuous mode [ 669.693402][T28315] syzkaller1: entered allmulticast mode [ 669.890369][T28210] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.902721][T28210] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.996124][T28210] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.007293][T28210] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.076549][T28210] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.088809][T28210] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.186398][T28210] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.221263][T28210] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.656111][T28210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 670.686537][T28210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 670.712284][T28210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 670.722172][T28369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6117'. [ 670.733458][T28373] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 670.755821][T28210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.812573][T28375] : entered promiscuous mode [ 670.842731][T24115] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.852213][T24115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.001737][T28210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.018252][T28391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6122'. [ 671.082964][T28210] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.122696][T24115] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.129977][T24115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.159347][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6124'. [ 671.197263][T24114] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.204588][T24114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.229370][T28399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6126'. [ 671.414790][T28405] syzkaller0: entered promiscuous mode [ 671.425252][T28405] syzkaller0: entered allmulticast mode [ 671.534019][T28411] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6130'. [ 671.702107][T28417] IPVS: length: 135 != 24 [ 671.708489][T20249] Bluetooth: hci5: command tx timeout [ 671.746516][T28417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.814195][T28210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.973226][T28419] netlink: set zone limit has 4 unknown bytes [ 671.997079][T28210] veth0_vlan: entered promiscuous mode [ 672.060078][T28210] veth1_vlan: entered promiscuous mode [ 672.170365][T28210] veth0_macvtap: entered promiscuous mode [ 672.198715][T28210] veth1_macvtap: entered promiscuous mode [ 672.292113][T28210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.335686][T28437] wg1 speed is unknown, defaulting to 1000 [ 672.366708][T28210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.378318][T28446] netlink: 'syz.2.6141': attribute type 10 has an invalid length. [ 672.390535][T28437] virt_wifi0 speed is unknown, defaulting to 1000 [ 672.473479][T28450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6143'. [ 672.515559][T28448] bond5: Removing last ns target with arp_interval on [ 672.526234][T24116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.537864][T24116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.546648][T24116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.680927][T24116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.098415][T23322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.137648][T23322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.216973][T23322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.246834][T23322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.341334][T28489] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6152'. [ 673.788768][T20249] Bluetooth: hci5: command tx timeout [ 673.891826][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 673.904100][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 673.913038][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 673.923030][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 673.933473][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.131913][ T30] audit: type=1107 audit(1770910936.860:2): pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 674.168235][T28519] raw_sendmsg: syz.1.6159 forgot to set AF_INET. Fix it! [ 674.195566][T28518] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6158'. [ 674.301738][T28518] netlink: ct family unspecified [ 675.867414][ T5843] Bluetooth: hci5: command tx timeout [ 676.028572][ T5843] Bluetooth: hci2: command tx timeout [ 676.512136][T28529] batadv1: entered allmulticast mode [ 676.561542][T28509] wg1 speed is unknown, defaulting to 1000 [ 676.570048][T28509] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.584056][T28530] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 676.675965][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6163'. [ 676.691842][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 676.754812][T24116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.767695][T24116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.861736][T28539] bond2: entered promiscuous mode [ 676.867082][T28539] bond2: entered allmulticast mode [ 676.872989][T28539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.921001][T24116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.931963][T24116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.969848][T28537] syzkaller1: entered promiscuous mode [ 677.001945][T28537] syzkaller1: entered allmulticast mode [ 677.161710][T24116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.173265][T24116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.271276][T24116] bond0: (slave netdevsim0): Releasing backup interface [ 677.311223][T24116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.323223][T24116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.623761][T28509] chnl_net:caif_netlink_parms(): no params data found [ 677.843012][T28593] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 678.083628][T24116] bond2 (unregistering): (slave gretap1): Releasing active interface [ 678.108044][ T5843] Bluetooth: hci2: command tx timeout [ 678.114275][T24116] bond4 (unregistering): (slave gretap2): Releasing active interface [ 678.285061][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6181'. [ 678.460760][T24116] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 678.469219][T24116] bridge4 (unregistering): left promiscuous mode [ 678.725137][T24116] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 678.734958][T24116] bond0 (unregistering): Released all slaves [ 678.868577][T24116] bond1 (unregistering): Released all slaves [ 678.882821][T24116] bond2 (unregistering): Released all slaves [ 679.028283][T24116] bond3 (unregistering): Released all slaves [ 679.042741][T24116] bond4 (unregistering): Released all slaves [ 679.184053][T24116] bond5 (unregistering): Released all slaves [ 679.198326][T24116] bond6 (unregistering): Released all slaves [ 679.211856][T24116] bond7 (unregistering): Released all slaves [ 679.354133][T24116] bond8 (unregistering): Released all slaves [ 679.370289][T24116] bond9 (unregistering): Released all slaves [ 679.413207][T28593] macvtap1: entered promiscuous mode [ 679.420885][T28593] macvtap1: entered allmulticast mode [ 679.426328][T28593] veth1_vlan: entered allmulticast mode [ 679.485447][T28596] macvtap2: entered promiscuous mode [ 679.507336][T28596] macvtap2: entered allmulticast mode [ 679.594208][T28601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 679.620166][T28601] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 679.646216][T28601] gretap1: entered promiscuous mode [ 679.669803][T28601] gretap1: entered allmulticast mode [ 679.729774][T24116] 9: left promiscuous mode [ 679.821467][T28509] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.828899][T28509] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.836201][T28509] bridge_slave_0: entered allmulticast mode [ 679.846407][T28509] bridge_slave_0: entered promiscuous mode [ 679.855456][T28509] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.862807][T28509] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.871226][T28509] bridge_slave_1: entered allmulticast mode [ 679.879339][T28509] bridge_slave_1: entered promiscuous mode [ 679.894685][T28620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6186'. [ 679.948685][T28620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6186'. [ 679.973807][T24116] tipc: Left network mode [ 680.001551][T28509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.041798][T28509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.186722][T28635] netlink: 'syz.4.6188': attribute type 16 has an invalid length. [ 680.200585][ T5843] Bluetooth: hci2: command tx timeout [ 680.248474][T28635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6188'. [ 680.324207][T28509] team0: Port device team_slave_0 added [ 680.345729][T28509] team0: Port device team_slave_1 added [ 680.373785][T28638] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 680.420091][T28630] netlink: 'syz.4.6188': attribute type 3 has an invalid length. [ 680.449891][T28645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6192'. [ 680.519586][T28652] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 680.541277][T28509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.551606][T28652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6193'. [ 680.563140][T28509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.601491][T28652] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6193'. [ 680.626866][T28509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.642902][T28509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.652380][T28509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.681351][T28509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.801946][T28652] veth3: entered promiscuous mode [ 681.001096][T28509] hsr_slave_0: entered promiscuous mode [ 681.022655][T28509] hsr_slave_1: entered promiscuous mode [ 681.048245][T28509] debugfs: 'hsr0' already exists in 'hsr' [ 681.054060][T28509] Cannot create hsr debugfs directory [ 681.336650][T24116] hsr_slave_0: left promiscuous mode [ 681.353244][T24116] hsr_slave_1: left promiscuous mode [ 681.362286][T24116] batman_adv: batadv0: Interface deactivated: dummy0 [ 681.411673][T24116] batman_adv: batadv0: Removing interface: dummy0 [ 681.435502][T28675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6199'. [ 681.563695][T28709] netlink: 'syz.0.6205': attribute type 2 has an invalid length. [ 682.282745][ T5843] Bluetooth: hci2: command tx timeout [ 682.513333][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6199'. [ 682.561443][T28709] : entered promiscuous mode [ 682.756762][T28719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6210'. [ 682.822705][T28723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6208'. [ 682.858979][T28724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6208'. [ 682.986556][T28731] netlink: 'syz.1.6211': attribute type 1 has an invalid length. [ 683.027692][T28731] netlink: 'syz.1.6211': attribute type 3 has an invalid length. [ 683.070565][T28731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6211'. [ 683.142242][T28742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6212'. [ 683.193255][T28743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6212'. [ 683.349225][T24116] IPVS: stop unused estimator thread 0... [ 683.579231][T28758] netlink: 'syz.4.6214': attribute type 1 has an invalid length. [ 683.602677][T28758] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6214'. [ 683.647077][T28758] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6214'. [ 683.677943][T28758] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6214'. [ 683.725810][T28766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.753225][T28758] netlink: 'syz.4.6214': attribute type 21 has an invalid length. [ 683.771692][T28758] IPv6: NLM_F_CREATE should be specified when creating new route [ 683.786251][T28761] tipc: Started in network mode [ 683.797883][T28761] tipc: Node identity ac14140f, cluster identity 4711 [ 683.805040][T28758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.812354][T28758] IPv6: NLM_F_CREATE should be set when creating new route [ 683.819736][T28758] IPv6: NLM_F_CREATE should be set when creating new route [ 683.826992][T28758] IPv6: NLM_F_CREATE should be set when creating new route [ 683.839391][T28761] tipc: New replicast peer: 255.255.255.255 [ 683.846750][T28761] tipc: Enabled bearer , priority 10 [ 683.858707][T24115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.868862][T28766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.894024][T24115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.911535][T28509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.932177][T28509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.953165][T28509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 683.971378][T28509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.203889][T28509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.229909][T28509] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.243946][T24095] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.251154][T24095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.342355][T24116] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.349589][T24116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.425204][T28788] netlink: 'syz.3.6221': attribute type 1 has an invalid length. [ 684.456292][T28788] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 684.948833][T28509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.990361][ T5926] tipc: Node number set to 2886997007 [ 685.118721][T28820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 685.121842][T28509] veth0_vlan: entered promiscuous mode [ 685.175078][T28823] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 685.213926][T28823] team1: entered promiscuous mode [ 685.236828][T28823] team1: entered allmulticast mode [ 685.306280][T28827] bond9: option min_links: invalid value (18446744073709551614) [ 685.337043][T28827] bond9: option min_links: allowed values 0 - 2147483647 [ 685.359388][T28827] bond9 (unregistering): Released all slaves [ 685.441734][T28509] veth1_vlan: entered promiscuous mode [ 685.581315][T28509] veth0_macvtap: entered promiscuous mode [ 685.605582][T28509] veth1_macvtap: entered promiscuous mode [ 685.671561][T28509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.740161][T28509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.778590][T24102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.805286][T24102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.955218][T24115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.982045][T24115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.211538][T24095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.247059][T24095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.364576][T28866] netlink: 'syz.1.6240': attribute type 4 has an invalid length. [ 686.388641][T28864] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 686.396977][T28866] netlink: 'syz.1.6240': attribute type 4 has an invalid length. [ 686.447024][T24102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.490530][T24102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.524821][T28864] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 686.539754][T28866] netlink: 'syz.1.6240': attribute type 4 has an invalid length. [ 686.808266][T28895] netlink: 'syz.1.6244': attribute type 1 has an invalid length. [ 686.883053][T28895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.924316][T28895] bond3: (slave ip6erspan0): making interface the new active one [ 686.933822][T28895] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 686.965958][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.275952][T28895] bridge_slave_0 (unregistering): left allmulticast mode [ 687.297277][T28895] bridge_slave_0 (unregistering): left promiscuous mode [ 687.337389][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.522834][T20249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.536113][T20249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.544922][T20249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.579357][T20249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.594406][T20249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.752061][T28918] wg1 speed is unknown, defaulting to 1000 [ 688.023816][T11977] lec:lec_start_xmit: lec0:No lecd attached [ 688.361791][T24095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.382078][T24095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.436806][T28918] chnl_net:caif_netlink_parms(): no params data found [ 688.600672][T24095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.612309][T24095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.719619][T28966] __nla_validate_parse: 9 callbacks suppressed [ 688.719640][T28966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6259'. [ 688.810890][T24095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.827491][T24095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.131521][T28918] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.168059][T28918] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.175447][T28918] bridge_slave_0: entered allmulticast mode [ 689.211023][T28918] bridge_slave_0: entered promiscuous mode [ 689.232659][T28918] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.253457][T28918] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.277542][T28918] bridge_slave_1: entered allmulticast mode [ 689.285408][T28918] bridge_slave_1: entered promiscuous mode [ 689.475332][T28918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.529246][T28918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.628916][ T5843] Bluetooth: hci1: command tx timeout [ 689.813277][T28918] team0: Port device team_slave_0 added [ 689.852363][T28918] team0: Port device team_slave_1 added [ 690.085191][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 690.138657][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 691.153909][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 691.307354][T24095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.322708][T24095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.334031][T24095] bond0 (unregistering): Released all slaves [ 691.460970][T24095] bond1 (unregistering): Released all slaves [ 691.595193][T24095] bond2 (unregistering): Released all slaves [ 691.707563][ T5843] Bluetooth: hci1: command tx timeout [ 691.739773][T24095] bond3 (unregistering): Released all slaves [ 691.876593][T24095] bond4 (unregistering): Released all slaves [ 691.891040][T24095] bond5 (unregistering): Released all slaves [ 691.949760][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 691.986882][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 691.999246][T28918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.006246][T28918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.038256][T28918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.055291][T28918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.062459][T28918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.128009][T28918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.186969][T29030] wg1 speed is unknown, defaulting to 1000 [ 692.220548][T24095] : left promiscuous mode [ 692.337389][T24095] tipc: Left network mode [ 692.424693][T28918] hsr_slave_0: entered promiscuous mode [ 692.458972][T28918] hsr_slave_1: entered promiscuous mode [ 692.475022][T28918] debugfs: 'hsr0' already exists in 'hsr' [ 692.485469][T28918] Cannot create hsr debugfs directory [ 692.553922][T29078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6279'. [ 692.701283][T29089] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6281'. [ 693.147411][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 693.155563][ C0] lec:lec_tx_timeout: lec0 [ 693.160866][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 693.331560][T24095] hsr_slave_0: left promiscuous mode [ 693.369754][T24095] hsr_slave_1: left promiscuous mode [ 693.384187][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.396860][T24095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.410609][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.418118][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6286'. [ 693.418147][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6286'. [ 693.437455][T24095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.464154][T24095] veth1_vlan: left allmulticast mode [ 693.470157][T24095] veth0_macvtap: left promiscuous mode [ 693.475760][T24095] veth1_vlan: left promiscuous mode [ 693.481428][T24095] veth0_vlan: left promiscuous mode [ 693.623401][T24095] pimreg (unregistering): left allmulticast mode [ 693.787323][ T5843] Bluetooth: hci1: command tx timeout [ 694.395845][T24095] team0 (unregistering): Port device team_slave_1 removed [ 694.449131][T24095] team0 (unregistering): Port device team_slave_0 removed [ 695.143847][T29135] wg1 speed is unknown, defaulting to 1000 [ 695.299597][T29148] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 695.633935][T29116] infiniband syz0: set active [ 695.673711][T29116] infiniband syz0: added bond0 [ 695.680274][T29157] tipc: Enabled bearer , priority 10 [ 695.694514][T29161] vlan2: entered allmulticast mode [ 695.760510][T29116] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 695.764873][T29116] infiniband syz0: Couldn't open port 1 [ 695.886792][T29116] RDS/IB: syz0: added [ 695.893971][ T5843] Bluetooth: hci1: command tx timeout [ 695.908071][T29116] smc: adding ib device syz0 with port count 1 [ 695.914687][T29116] smc: ib device syz0 port 1 has no pnetid [ 695.921386][T24095] IPVS: stop unused estimator thread 0... [ 696.188892][T29178] syzkaller0: entered promiscuous mode [ 696.194443][T29178] syzkaller0: entered allmulticast mode [ 696.204165][T29178] 0: reclassify loop, rule prio 0, protocol 800 [ 696.266861][T29184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6300'. [ 696.290692][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6301'. [ 696.291387][T28918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.420175][T29185] macsec1: entered promiscuous mode [ 696.494136][T28918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.517327][T28918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.559572][T28918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.591275][T29188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6302'. [ 696.773870][T29203] netlink: 'syz.3.6304': attribute type 13 has an invalid length. [ 697.025734][T29219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6307'. [ 697.035722][T29219] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6307'. [ 697.047473][T29219] netlink: 'syz.0.6307': attribute type 6 has an invalid length. [ 697.055264][T29219] netlink: 'syz.0.6307': attribute type 5 has an invalid length. [ 697.064785][T29219] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6307'. [ 697.432458][T28918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.502850][T28918] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.556609][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.563848][ T7175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.648830][T24095] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.656068][T24095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.913181][T29251] syzkaller0: entered promiscuous mode [ 697.936633][T29251] syzkaller0: entered allmulticast mode [ 698.003519][T29251] syzkaller1: entered promiscuous mode [ 698.015630][T29251] syzkaller1: entered allmulticast mode [ 698.177201][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 698.185273][ C0] lec:lec_tx_timeout: lec0 [ 698.501349][T29280] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6318'. [ 698.534250][T28918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.769408][T29289] syzkaller0: entered promiscuous mode [ 698.774957][T29289] syzkaller0: entered allmulticast mode [ 698.820183][T29289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6321'. [ 698.871265][T29289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6321'. [ 698.952189][T29293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.004773][T29289] tipc: Enabled bearer , priority 0 [ 699.026967][T29288] tipc: Resetting bearer [ 699.112424][T29288] tipc: Disabling bearer [ 699.512775][T28918] veth0_vlan: entered promiscuous mode [ 699.599395][T28918] veth1_vlan: entered promiscuous mode [ 699.623472][T29324] wg1 speed is unknown, defaulting to 1000 [ 699.682837][T28918] veth0_macvtap: entered promiscuous mode [ 699.743389][T28918] veth1_macvtap: entered promiscuous mode [ 699.839621][T28918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.911966][T28918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.964503][T24095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.975487][T24095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.986131][T24095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.015929][T24095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.186679][ T7175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.200552][ T7175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.288549][T29351] netlink: 'syz.1.6332': attribute type 4 has an invalid length. [ 700.319486][T29351] netlink: 'syz.1.6332': attribute type 4 has an invalid length. [ 700.322824][T24108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.376384][T24108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.313913][T20249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.326765][T20249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.347852][T20249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.400322][T20249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.418636][T20249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.986704][T29413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6345'. [ 702.294767][T29425] netlink: 468 bytes leftover after parsing attributes in process `syz.3.6348'. [ 702.863281][T29392] wg1 speed is unknown, defaulting to 1000 [ 702.877340][T29416] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 702.886011][T29440] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6351'. [ 703.182215][T29453] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 703.467721][ T5843] Bluetooth: hci0: command tx timeout [ 703.546079][T29472] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 703.645973][T29392] chnl_net:caif_netlink_parms(): no params data found [ 703.758437][T29484] mac80211_hwsim hwsim52 wlan1: Caught tx_queue_len zero misconfig [ 703.874418][T29495] netlink: 'syz.4.6364': attribute type 1 has an invalid length. [ 703.942694][T29502] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 703.969276][T29502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 704.024661][T29392] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.038880][T29392] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.048827][T29392] bridge_slave_0: entered allmulticast mode [ 704.060939][T29392] bridge_slave_0: entered promiscuous mode [ 704.071446][T29392] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.080384][T29392] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.088190][T29392] bridge_slave_1: entered allmulticast mode [ 704.096300][T29392] bridge_slave_1: entered promiscuous mode [ 704.119669][T29505] netlink: 'syz.2.6366': attribute type 6 has an invalid length. [ 704.153301][T29505] netlink: 'syz.2.6366': attribute type 6 has an invalid length. [ 704.166783][T29392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.191611][T29507] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6368'. [ 704.206782][T29392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.275321][T29511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6369'. [ 704.290598][T29392] team0: Port device team_slave_0 added [ 704.300396][T29392] team0: Port device team_slave_1 added [ 704.323699][T29511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6369'. [ 704.349844][T29392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.384208][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.446967][T29520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6372'. [ 704.470383][T29392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.488510][T29521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6372'. [ 704.511748][ T798] IPVS: starting estimator thread 0... [ 704.527644][T29392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.534864][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.582627][T29392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.607260][T29524] IPVS: using max 27 ests per chain, 64800 per kthread [ 704.658633][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'. [ 704.670022][T29516] bridge: RTM_NEWNEIGH with invalid ether address [ 704.676629][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'. [ 704.695092][T29522] bridge: RTM_NEWNEIGH with invalid ether address [ 704.719933][T29529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.948820][T29392] hsr_slave_0: entered promiscuous mode [ 704.978911][T29392] hsr_slave_1: entered promiscuous mode [ 705.004165][T29392] debugfs: 'hsr0' already exists in 'hsr' [ 705.010293][T29392] Cannot create hsr debugfs directory [ 705.142788][T29557] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 705.426085][T29570] syzkaller0: entered promiscuous mode [ 705.432217][T29570] syzkaller0: entered allmulticast mode [ 705.503859][T29392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 705.518777][T29577] Bluetooth: MGMT ver 1.23 [ 705.558270][ T5843] Bluetooth: hci0: command tx timeout [ 705.670229][T29392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 705.786151][T29594] netlink: 'syz.4.6394': attribute type 58 has an invalid length. [ 705.793143][T29392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 705.814879][T29593] netlink: 'syz.4.6394': attribute type 58 has an invalid length. [ 705.961720][T29392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 706.323636][T29617] bond0: (slave gre0): Error: Device type is different from other slaves [ 706.374696][T24102] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 706.404720][T29392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.431013][T29617] bpq0: entered promiscuous mode [ 706.461511][T29392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.491444][T29392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.567982][T29392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 706.821042][T29392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.873691][T29392] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.907743][T29663] nbd: couldn't find device at index 3 [ 706.919307][T29664] syzkaller1: entered promiscuous mode [ 706.937316][T29664] syzkaller1: entered allmulticast mode [ 706.963668][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.970940][ T7175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.986689][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.994103][ T7175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.018279][T29666] netlink: 'syz.1.6414': attribute type 21 has an invalid length. [ 707.127457][T29392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.269472][T29676] openvswitch: netlink: Key type 31 is not supported [ 707.358942][T29680] __nla_validate_parse: 11 callbacks suppressed [ 707.358964][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6418'. [ 707.638842][ T5843] Bluetooth: hci0: command tx timeout [ 707.648568][T29392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.881927][T29392] veth0_vlan: entered promiscuous mode [ 707.992561][T29392] veth1_vlan: entered promiscuous mode [ 708.073526][T29392] veth0_macvtap: entered promiscuous mode [ 708.105153][T29392] veth1_macvtap: entered promiscuous mode [ 708.198775][T29392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.210279][T29698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 708.218475][T29392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.250559][T29702] syzkaller0: entered promiscuous mode [ 708.256112][T29702] syzkaller0: entered allmulticast mode [ 708.263689][T29707] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6426'. [ 708.285709][T24108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.298369][T24108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.344860][T24108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.369338][T24108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.449724][T29702] tipc: Enabling of bearer rejected, failed to enable media [ 708.704014][T24095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.736481][T24095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.817343][ T7181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.825309][ T7181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.845992][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 709.293288][T29757] syzkaller0: entered promiscuous mode [ 709.319652][T29757] syzkaller0: entered allmulticast mode [ 709.343926][T29765] netlink: 'syz.2.6437': attribute type 13 has an invalid length. [ 709.490437][T29766] syzkaller0: entered promiscuous mode [ 709.495990][T29766] syzkaller0: entered allmulticast mode [ 709.514918][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'. [ 709.545313][T29766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6440'. [ 709.555191][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 709.574473][T29766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6440'. [ 709.709969][ T5843] Bluetooth: hci0: command tx timeout [ 709.720270][T29787] xt_hashlimit: invalid interval [ 710.137811][T29808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6449'. [ 710.190403][T29813] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.6453'. [ 710.231945][T29812] lo: Caught tx_queue_len zero misconfig [ 710.360050][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.635751][T29846] netlink: 'syz.4.6462': attribute type 21 has an invalid length. [ 710.821344][T29852] pimreg: entered allmulticast mode [ 711.061761][T29850] infiniband : set down [ 711.066207][T29850] infiniband : added ipvlan0 [ 711.112458][T29850] RDS/IB: : added [ 711.116525][T29850] smc: adding ib device  with port count 1 [ 711.127060][T29850] smc: ib device  port 1 has no pnetid [ 711.236867][T29871] netlink: 'syz.0.6471': attribute type 1 has an invalid length. [ 711.338305][T29874] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 711.353278][T29874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 711.432105][T29883] Unsupported ieee802154 address type: 0 [ 711.446696][T29882] netlink: 'syz.3.6475': attribute type 21 has an invalid length. [ 711.489882][T29882] netlink: 'syz.3.6475': attribute type 21 has an invalid length. [ 711.533063][T29885] netlink: 'syz.0.6476': attribute type 7 has an invalid length. [ 711.576263][T29885] netlink: 'syz.0.6476': attribute type 8 has an invalid length. [ 711.616590][T29887] syzkaller1: entered promiscuous mode [ 711.622870][T29887] syzkaller1: entered allmulticast mode [ 711.652538][T29890] netlink: 'syz.2.6478': attribute type 21 has an invalid length. [ 711.689113][T29891] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 711.776636][T29897] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 712.401756][T29926] netlink: 'syz.4.6488': attribute type 1 has an invalid length. [ 712.413329][T29925] vxcan1: entered promiscuous mode [ 712.438509][T29925] vxcan1: entered allmulticast mode [ 712.487470][T29925] __nla_validate_parse: 9 callbacks suppressed [ 712.487489][T29925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6489'. [ 712.735747][T29941] syzkaller0: entered promiscuous mode [ 712.741470][T29941] syzkaller0: entered allmulticast mode [ 712.824261][T29943] netlink: 'syz.4.6492': attribute type 1 has an invalid length. [ 713.042792][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6495'. [ 713.139375][T29958] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6498'. [ 713.168148][T29960] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.182820][T29956] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6498'. [ 713.393160][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.437619][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'. [ 713.451861][T29976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6504'. [ 713.475605][T29974] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6502'. [ 713.724972][T29993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6511'. [ 713.953448][T30001] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 713.985263][T29999] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 714.177307][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'. [ 714.277901][T30010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.345115][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6520'. [ 714.379097][T30010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.482662][T30020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.800517][T30036] hsr_slave_0: left promiscuous mode [ 714.807415][T30036] hsr_slave_1: left promiscuous mode [ 715.035306][T30043] syzkaller0: entered promiscuous mode [ 715.047822][T30043] syzkaller0: entered allmulticast mode [ 715.076726][T30054] IPVS: length: 210 != 24 [ 715.568778][T30074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.577023][T30074] batadv_slave_0: entered promiscuous mode [ 716.086522][T30099] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 716.427495][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.623123][T30129] validate_nla: 1 callbacks suppressed [ 716.623143][T30129] netlink: 'syz.2.6553': attribute type 1 has an invalid length. [ 716.785078][T30138] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 716.909831][T30129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.980369][T30146] vlan2: entered allmulticast mode [ 716.986630][T30146] gretap0: entered allmulticast mode [ 717.205237][T30162] netlink: 'syz.0.6563': attribute type 33 has an invalid length. [ 717.301693][T30162] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 717.318135][T30162] bond2 (unregistering): Released all slaves [ 717.470618][T30187] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 717.523100][T30191] __nla_validate_parse: 12 callbacks suppressed [ 717.523124][T30191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6571'. [ 717.567696][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6570'. [ 717.628153][T30192] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6570'. [ 717.657364][T30200] sit0: Caught tx_queue_len zero misconfig [ 717.846280][T30211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6577'. [ 718.025185][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6581'. [ 718.035566][T30226] netlink: 'syz.4.6581': attribute type 8 has an invalid length. [ 718.124489][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6579'. [ 718.255568][T30236] netlink: 'syz.1.6584': attribute type 9 has an invalid length. [ 718.272316][T30236] netlink: 'syz.1.6584': attribute type 11 has an invalid length. [ 718.284439][T30236] netlink: 'syz.1.6584': attribute type 12 has an invalid length. [ 718.291038][T30238] netlink: 'syz.4.6585': attribute type 20 has an invalid length. [ 718.293886][T30236] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.6584'. [ 718.300454][T30238] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.319160][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6584'. [ 718.364162][T30238] netlink: 'syz.4.6585': attribute type 3 has an invalid length. [ 718.471618][T30243] syzkaller0: entered promiscuous mode [ 718.479544][T30243] syzkaller0: entered allmulticast mode [ 718.619810][T30256] Bluetooth: MGMT ver 1.23 [ 718.998646][T30281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6595'. [ 719.026062][T30282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6596'. [ 719.208195][T30293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.290906][T30299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.340633][T30304] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.348527][T30304] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.467964][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.883291][T30339] netlink: 'syz.3.6615': attribute type 12 has an invalid length. [ 720.769114][T30387] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 720.891002][T30387] bond4 (unregistering): Released all slaves [ 721.732676][T30442] netlink: 'syz.0.6635': attribute type 4 has an invalid length. [ 722.511420][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.694613][T30449] netlink: 'syz.4.6636': attribute type 12 has an invalid length. [ 723.704888][T30449] __nla_validate_parse: 6 callbacks suppressed [ 723.704909][T30449] netlink: 340 bytes leftover after parsing attributes in process `syz.4.6636'. [ 723.771728][T30456] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 723.801454][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6640'. [ 723.857706][ T45] IPVS: starting estimator thread 0... [ 723.947315][T30465] IPVS: using max 26 ests per chain, 62400 per kthread [ 724.298428][T30485] netlink: 'syz.1.6648': attribute type 1 has an invalid length. [ 724.338572][T30485] gretap2: entered promiscuous mode [ 724.503655][T30492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6651'. [ 724.719665][T30500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6655'. [ 724.757070][T30503] syzkaller0: entered promiscuous mode [ 724.783652][T30503] syzkaller0: entered allmulticast mode [ 724.814980][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6655'. [ 725.558238][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.580322][T30552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6668'. [ 725.822129][T30561] netlink: 'syz.0.6671': attribute type 1 has an invalid length. [ 725.860575][T30561] bond2: entered promiscuous mode [ 725.877567][T30561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.222631][T30561] bond2: (slave bridge2): making interface the new active one [ 726.231154][T30561] bridge2: entered promiscuous mode [ 726.248905][T30561] bridge2: left promiscuous mode [ 726.381298][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6674'. [ 726.460065][T30570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.492658][T30575] ipvlan2: entered allmulticast mode [ 726.502672][T30570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.524264][T30575] batadv_slave_1: entered allmulticast mode [ 726.539482][T30575] batman_adv: batadv0: Adding interface: ipvlan2 [ 726.549908][T30575] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.581373][T30575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.596219][T30575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.609176][T30575] batman_adv: batadv0: Interface activated: ipvlan2 [ 726.629516][T30577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6676'. [ 726.738525][T30580] netlink: 'syz.0.6677': attribute type 12 has an invalid length. [ 726.756609][T30584] xt_l2tp: invalid flags combination: 8 [ 726.842865][T30586] lo: Caught tx_queue_len zero misconfig [ 726.864290][T30589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6680'. [ 727.141135][T30601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6686'. [ 727.206155][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.250595][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.291018][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.340109][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.358263][T30611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.392175][T30613] netlink: 'syz.3.6689': attribute type 11 has an invalid length. [ 727.623505][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.632351][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.640811][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.649234][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.657561][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.665865][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.674219][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.682542][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.690898][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.699394][T30621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.396685][T30658] netlink: 'syz.4.6700': attribute type 8 has an invalid length. [ 728.436933][T30657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 728.734760][T30677] __nla_validate_parse: 12 callbacks suppressed [ 728.734783][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6707'. [ 728.829090][T30674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.858736][T30683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6709'. [ 728.891346][T30683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6709'. [ 729.031715][T30692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.037947][T30694] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.6713'. [ 729.066115][T30692] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6710'. [ 729.233047][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'. [ 729.290385][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'. [ 729.307668][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'. [ 729.354471][T30706] netlink: 'syz.4.6716': attribute type 7 has an invalid length. [ 729.495389][T30710] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6717'. [ 729.597317][T30714] ip6tnl0: Caught tx_queue_len zero misconfig [ 729.614194][T30714] sch_fq: defrate 0 ignored. [ 729.681186][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6721'. [ 730.056963][T30736] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 730.071652][T30736] bond3 (unregistering): Released all slaves [ 730.212836][T30741] gtp1: entered promiscuous mode [ 730.218677][T30741] gtp1: entered allmulticast mode [ 730.469130][T30761] bridge0: port 3(wlan0) entered blocking state [ 730.475837][T30761] bridge0: port 3(wlan0) entered disabled state [ 730.518721][T30761] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 730.540221][T30761] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 730.591743][T30769] netlink: 'syz.1.6737': attribute type 19 has an invalid length. [ 730.681050][T30772] geneve2: entered promiscuous mode [ 730.686346][T30772] geneve2: entered allmulticast mode [ 730.784676][T30783] netlink: 'syz.0.6740': attribute type 1 has an invalid length. [ 731.357045][T30795] syzkaller0: entered promiscuous mode [ 731.406810][T30795] syzkaller0: entered allmulticast mode [ 731.797729][ T7359] IPVS: starting estimator thread 0... [ 731.900388][T30845] IPVS: using max 27 ests per chain, 64800 per kthread [ 732.179437][T30871] veth0_macvtap: Device is already in use. [ 732.318645][T30881] netlink: 'syz.4.6765': attribute type 10 has an invalid length. [ 732.664083][T30895] net_ratelimit: 1434 callbacks suppressed [ 732.664108][T30895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.778582][T30881] bridge0: port 3(team0) entered blocking state [ 732.785021][T30881] bridge0: port 3(team0) entered disabled state [ 732.817026][T30881] team0: entered allmulticast mode [ 732.887316][T30881] team_slave_0: entered allmulticast mode [ 732.907949][T30881] team_slave_1: entered allmulticast mode [ 732.921207][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.951689][T30881] team0: entered promiscuous mode [ 732.958143][T30881] team_slave_0: entered promiscuous mode [ 732.996039][T30881] team_slave_1: entered promiscuous mode [ 733.026630][T30881] bridge0: port 3(team0) entered blocking state [ 733.033143][T30881] bridge0: port 3(team0) entered forwarding state [ 733.096314][T30890] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 733.520352][T30930] netlink: 'syz.2.6776': attribute type 74 has an invalid length. [ 733.557896][T30931] netlink: 'syz.2.6776': attribute type 74 has an invalid length. [ 733.630240][T30934] x_tables: duplicate underflow at hook 1 [ 733.869099][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.939835][T30956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 733.995986][T30960] __nla_validate_parse: 15 callbacks suppressed [ 733.996010][T30960] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6785'. [ 734.041084][T30956] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 734.058053][T30956] gretap2: entered promiscuous mode [ 734.081489][T30956] gretap2: entered allmulticast mode [ 734.110600][T30960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6785'. [ 734.188980][T30963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6786'. [ 734.358351][T30967] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.6785'. [ 734.409887][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'. [ 734.665169][T30992] syzkaller0: entered promiscuous mode [ 734.671718][T30992] syzkaller0: entered allmulticast mode [ 734.682267][T30994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6794'. [ 734.711330][T30996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6795'. [ 735.272976][T31041] netlink: 'syz.2.6804': attribute type 1 has an invalid length. [ 735.430263][T31046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6806'. [ 735.468192][T31046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6806'. [ 735.600636][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6811'. [ 735.961183][T31075] netlink: 'syz.1.6817': attribute type 7 has an invalid length. [ 736.265478][T31093] netlink: 'syz.3.6823': attribute type 12 has an invalid length. [ 736.279080][T31093] netlink: 'syz.3.6823': attribute type 29 has an invalid length. [ 736.363855][T31097] netlink: 'syz.0.6825': attribute type 30 has an invalid length. [ 736.445863][T31097] bond3: option arp_missed_max: invalid value (0) [ 736.457543][T31097] bond3: option arp_missed_max: allowed values 1 - 255 [ 736.476932][T31097] bond3 (unregistering): Released all slaves [ 736.814941][T31118] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 736.874551][T31118] bond2 (unregistering): Released all slaves [ 736.895932][T31128] xt_l2tp: v2 sid > 0xffff: 1114112 [ 736.908671][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.952020][T31100] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 736.976481][T31100] bond4 (unregistering): Released all slaves [ 737.409074][T31145] veth1: entered promiscuous mode [ 737.635290][T31175] netlink: 'syz.2.6849': attribute type 10 has an invalid length. [ 738.895847][T31232] vlan0: entered promiscuous mode [ 738.901288][T31232] geneve1: entered promiscuous mode [ 738.906861][T31232] vlan0: entered allmulticast mode [ 738.923372][T31232] geneve1: entered allmulticast mode [ 738.971811][T31256] geneve3: entered promiscuous mode [ 739.181175][T31268] __nla_validate_parse: 16 callbacks suppressed [ 739.181197][T31268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6873'. [ 739.252879][T31280] netlink: 'syz.1.6875': attribute type 1 has an invalid length. [ 739.372461][T31285] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6877'. [ 739.398209][T31285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6877'. [ 739.429007][T31284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6877'. [ 739.452781][T31293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6880'. [ 739.487847][T31284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6877'. [ 739.736004][T31293] bridge_slave_0 (unregistering): left allmulticast mode [ 739.743683][T31293] bridge_slave_0 (unregistering): left promiscuous mode [ 739.751897][T31293] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.771463][T31303] tipc: Started in network mode [ 739.777574][T31303] tipc: Node identity 5, cluster identity 3 [ 739.783553][T31303] tipc: Node number set to 5 [ 739.795658][T31303] tipc: Cannot configure node identity twice [ 739.966802][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.133284][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6890'. [ 740.254968][T31343] tipc: Started in network mode [ 740.262785][T31343] tipc: Node identity 5ac62ae1642e, cluster identity 4711 [ 740.271272][T31343] tipc: Enabled bearer , priority 0 [ 740.280030][T31349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6892'. [ 740.315111][T31343] tipc: Disabling bearer [ 740.368967][T31354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6892'. [ 740.560755][T31362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6896'. [ 740.852191][T31386] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 741.070186][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.380628][T31419] xt_l2tp: v2 tid > 0xffff: 1114244 [ 741.408269][T31422] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 742.295917][T31428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.316799][T24102] smc: removing ib device syz0 [ 742.333584][T31428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.356340][T31428] bond0 (unregistering): Released all slaves [ 743.014828][T31479] xt_TCPMSS: Only works on TCP SYN packets [ 743.295321][T31496] netlink: 'syz.1.6937': attribute type 2 has an invalid length. [ 743.409056][T31490] team0 (unregistering): Port device team_slave_0 removed [ 743.460319][T31490] team0 (unregistering): Port device team_slave_1 removed [ 743.506225][T31496] 9: entered promiscuous mode [ 743.804267][T31512] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 743.816249][T31512] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 743.824693][T31512] CPU: 0 UID: 0 PID: 31512 Comm: syz.3.6941 Not tainted syzkaller #0 PREEMPT(full) [ 743.834088][T31512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 743.844171][T31512] RIP: 0010:klist_remove+0x156/0x340 [ 743.849493][T31512] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 4d 68 9f f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2e 68 9f f6 49 8b 44 24 58 48 89 44 24 08 [ 743.869124][T31512] RSP: 0018:ffffc90004f17a20 EFLAGS: 00010202 [ 743.875253][T31512] RAX: 000000000000000b RBX: ffff888074f28000 RCX: 0000000000000000 [ 743.883264][T31512] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 743.891271][T31512] RBP: ffffc90004f17b08 R08: ffffffff8fd5be63 R09: 1ffffffff1fab7cc [ 743.899269][T31512] R10: dffffc0000000000 R11: fffffbfff1fab7cd R12: 0000000000000000 [ 743.907262][T31512] R13: 1ffff1100f4d298c R14: ffff88807a694c60 R15: dffffc0000000000 [ 743.915272][T31512] FS: 00007f360da5c6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 743.924223][T31512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.930826][T31512] CR2: 00007f9e2062d850 CR3: 0000000032f12000 CR4: 00000000003526f0 [ 743.938826][T31512] Call Trace: [ 743.942124][T31512] [ 743.945120][T31512] ? __pfx_klist_remove+0x10/0x10 [ 743.950180][T31512] ? kobject_move+0x5de/0x720 [ 743.954886][T31512] ? __pfx_kobject_move+0x10/0x10 [ 743.959939][T31512] ? get_device_parent+0x366/0x3a0 [ 743.965077][T31512] device_move+0x193/0x730 [ 743.969516][T31512] hci_conn_del_sysfs+0xb8/0x1a0 [ 743.974518][T31512] hci_conn_del+0xc36/0x1230 [ 743.979165][T31512] hci_conn_hash_flush+0x191/0x260 [ 743.984339][T31512] hci_dev_reset+0x41c/0x6d0 [ 743.988963][T31512] ? hci_sock_ioctl+0x5b7/0x940 [ 743.993841][T31512] sock_do_ioctl+0x101/0x320 [ 743.998452][T31512] ? __pfx_sock_do_ioctl+0x10/0x10 [ 744.003590][T31512] ? do_futex+0x333/0x420 [ 744.007958][T31512] sock_ioctl+0x5c6/0x7f0 [ 744.012324][T31512] ? __pfx_sock_ioctl+0x10/0x10 [ 744.017208][T31512] ? __fget_files+0x2a/0x420 [ 744.021831][T31512] ? __fget_files+0x3a0/0x420 [ 744.026532][T31512] ? __fget_files+0x2a/0x420 [ 744.031310][T31512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 744.036283][T31512] ? __pfx_sock_ioctl+0x10/0x10 [ 744.041176][T31512] __se_sys_ioctl+0xfc/0x170 [ 744.045808][T31512] do_syscall_64+0xe2/0xf80 [ 744.050330][T31512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.056412][T31512] ? trace_irq_disable+0x37/0x100 [ 744.061456][T31512] ? clear_bhb_loop+0x60/0xb0 [ 744.066154][T31512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.072089][T31512] RIP: 0033:0x7f360cb9bf79 [ 744.076528][T31512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.096181][T31512] RSP: 002b:00007f360da5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.104632][T31512] RAX: ffffffffffffffda RBX: 00007f360ce15fa0 RCX: 00007f360cb9bf79 [ 744.112635][T31512] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 744.120630][T31512] RBP: 00007f360cc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 744.128620][T31512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.136615][T31512] R13: 00007f360ce16038 R14: 00007f360ce15fa0 R15: 00007ffd354319e8 [ 744.144654][T31512] [ 744.147712][T31512] Modules linked in: [ 744.153081][T31512] ---[ end trace 0000000000000000 ]--- [ 744.159901][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.172375][T31512] RIP: 0010:klist_remove+0x156/0x340 [ 744.177869][T31512] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 4d 68 9f f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2e 68 9f f6 49 8b 44 24 58 48 89 44 24 08 [ 744.200282][T31512] RSP: 0018:ffffc90004f17a20 EFLAGS: 00010202 [ 744.206591][T31512] RAX: 000000000000000b RBX: ffff888074f28000 RCX: 0000000000000000 [ 744.214875][T31512] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 744.223031][T31512] RBP: ffffc90004f17b08 R08: ffffffff8fd5be63 R09: 1ffffffff1fab7cc [ 744.231586][T31512] R10: dffffc0000000000 R11: fffffbfff1fab7cd R12: 0000000000000000 [ 744.239738][T31512] R13: 1ffff1100f4d298c R14: ffff88807a694c60 R15: dffffc0000000000 [ 744.247931][T31512] FS: 00007f360da5c6c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 744.256927][T31512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.294251][T31512] CR2: 00007ffe77908280 CR3: 0000000032f12000 CR4: 00000000003526f0 [ 744.356961][T31512] Kernel panic - not syncing: Fatal exception [ 744.363707][T31512] Kernel Offset: disabled [ 744.368045][T31512] Rebooting in 86400 seconds..