last executing test programs: 2.896867086s ago: executing program 0 (id=5137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x3c}}, 0x0) (async, rerun: 32) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) (rerun: 64) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) 2.709165797s ago: executing program 0 (id=5141): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x40000000000012d, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4c041}, 0x8004) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xe2, &(0x7f00000002c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @empty}, {0x0, 0x4e20, 0xb8, 0x0, @opaque="879b5afa6fe813792e8e9a659eb7d044ad5841d9f323e30124d051f064ea5ca609364e10c15b16e42711ae78527bf4d651bfaea7fe3947119978ba8180d5db9b8e2260d02e9951c97764fa2285992557b63b2a297a8af57997e65da7c13b31cbef5d963a727d72b4be6505cf20c626342034eb1657d05181d6044a72f498c675385fae15ae440d163a94c6a14fad927fb23d515bb67e77d2beb927fda722e822d6b1db27c1832a8207efa2d844479910"}}}}}, 0x0) 1.800688255s ago: executing program 1 (id=5154): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', r3, @sched_cls=0x36, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) openat$cgroup_devices(r5, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 1.710979193s ago: executing program 1 (id=5156): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x5, 0x61, 0x11, 0x4c}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x7) accept4(r0, 0x0, 0x0, 0x0) 1.628735963s ago: executing program 0 (id=5157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x648, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002940), 0x0, 0x20000) sendfile(r2, r1, 0x0, 0xfffbffff) 1.537997625s ago: executing program 4 (id=5161): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x100000, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="6bf9446905d575e7239f17b536fec01c1d302765c07b7fe15d0b48424623c644a9ee8c88cff1840eb443c75b0b0114aa1bd8e1ab7f1c3865d6014d4dadd07d", 0x3f, 0x80, &(0x7f0000000100)={0x11, 0xd, r5, 0x1, 0x2, 0x6, @random="2afa734dc6f1"}, 0x14) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0xd0, 0x10, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd0, 0x1c}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0xca25, 0xba, 0x0, 0x1f}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x280) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) close(r1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) 1.498207353s ago: executing program 0 (id=5162): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x2c, 0x5, 0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a", 0x6e}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) recvmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/166, 0xa6}], 0x4, &(0x7f0000000780)=""/193, 0xc1}, 0x1}, {{&(0x7f0000000880)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000900)=""/113, 0x71}], 0x2}, 0x100}, {{&(0x7f0000000980)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/150, 0x96}], 0x2}, 0xd5631dd}, {{&(0x7f0000000b80)=@ll, 0x80, &(0x7f0000000c00)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000c40)=""/87, 0x57}, 0x6}, {{&(0x7f0000000cc0)=@tipc=@id, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/50, 0x32}], 0x1, &(0x7f0000000dc0)=""/55, 0x37}, 0x9}, {{&(0x7f0000000e00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001180)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/192, 0xc0}, {&(0x7f0000000f40)=""/55, 0x37}, {&(0x7f0000000f80)=""/163, 0xa3}, {&(0x7f0000001040)=""/127, 0x7f}, {&(0x7f00000010c0)=""/107, 0x6b}, {&(0x7f0000001140)=""/2, 0x2}], 0x8, &(0x7f00000044c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f00000054c0)=""/173, 0xad}], 0x3, &(0x7f0000005580)=""/67, 0x43}, 0x368}, {{&(0x7f0000005600)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000006700)=[{&(0x7f0000001440)}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/103, 0x67}], 0x3, &(0x7f0000006740)=""/62, 0x3e}, 0x7}], 0x8, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r8, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) 1.388344066s ago: executing program 4 (id=5164): syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.319846914s ago: executing program 4 (id=5165): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x1f, 0x24, 0x1}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) 1.196718556s ago: executing program 4 (id=5168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4020014) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2b, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/397], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) 1.159031657s ago: executing program 2 (id=5169): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xfc, r0, 0x0, 0x70bd23, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0xfffffffffffffed8}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000840}, 0x4008044) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x27, 0x0, 0xc3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900f800000028001a000a0101020000000000000000000000000a0101000000000000000000000000000a000609"], 0x40}}, 0x20040810) listen(r4, 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r8, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817d4800000024001280110001006272696467655f736c617665000000000c0005800800250000000000140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r12, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) 1.100763376s ago: executing program 3 (id=5170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1b8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.007787964s ago: executing program 3 (id=5171): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x368, &(0x7f0000000a80)={@link_local, @broadcast, @val={@void}, {@ipv6={0x86dd, @tcp={0xf, 0x6, "fc6416", 0x32e, 0x6, 0x0, @local, @mcast2, {[@hopopts={0x6, 0x1e, '\x00', [@generic={0x7, 0xbf, "40610d4f86d7cd81578d641cbc66ad4997e830d7a84483b41d2fc4dd7cae6a96cfde6aaadd913d3b748226a59b983872e2a3708d5e3cf4878b976b9a26a5af0ebb4e8d0f3c323273ddd2ad72405b3a6c76dd8bf4ba34015f99e13bf82bbf18faa6f9b8d12328c2d21f74456e2367ee311749592b744c649b377ffbc8f8bd733fd7b588091118b7a162d2dab121279c69bd740f41084c68e81cc4ad2251b0713e7cd788daf6c9fb6cb1c7845558e29ee1c3a95a6db85fa281e831302e47e78d"}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x800, [0x3, 0x9]}}, @pad1, @generic={0x8, 0xb, "809e895be2d3ee2835f49f"}, @ra={0x5, 0x2, 0x9}]}, @dstopts={0x2, 0x33, '\x00', [@ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x7, [0x4, 0x20000, 0x4, 0x8, 0x5, 0xffff]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x7, 0x8, [0x7, 0x7fffffffffffffff, 0x2, 0x4, 0x8000, 0x8001]}}, @generic={0x2, 0xe2, "4fd94445962cb9ea084486df224ab9f6afe3c0429805266478e86457e619b86bdea4983786b36005e6ba487f8020c9e52efc2a54e1dce69c916301dca9fc0ed418dea73f0148723a43559bbf5a9fb236eda4241f18bf90facd46da15f91f62664ff5812efea1abe78206ffe6a4a8c1372e557adb9fc6e967e418ae86af314af9292a869189533e7f179559bdd01f41b94f781599dd7dfbb593ee49a38997b29b0a6a3430d3c0dd43e74a7fbdd5e6da8b6e3b8b537d5fda6a381b6a3e81c738057e836ee17aafb2b36b56cd5fd05cdc875deb04528cef3ce44ef5197821d9243d88f0"}]}], {{0x4e21, 0x4e23, r4, 0x41424344, 0x1, 0x0, 0x8, 0xc2, 0xfaf, 0x0, 0x1, {[@timestamp={0x8, 0xa, 0x3, 0x5}]}}, {"9a52b13ec0e46e25a5c4ec82860062a703d6e5317a3ac6be77985d694816e45d7a906e42659411c796efbe347baf5e1d60afd5100d8991838a1dca9fc09583f761932d8381bb7114cac70f3397a474955d3ee78e9b46103937149b06d77b23792809cf9d3ddb"}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 998.951869ms ago: executing program 4 (id=5172): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) read(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1d7, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x1c9, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "e75adb10fe836419e6d22d24f694ff97ee4ca79431c6079165496e90b742c9ceab6e3b39e6767508ed27b7af37ef837cd5b3a294226ed2f56d71bfb73e44a503ef27dfe47fcee4c7bf92229ad89ef1e88ae65d7490fd0f2467da90c7f385d194d3d0f5c60686475c4597bce637118f4010361993c8258a136fad58208c24d17864adca5c226b2c30d6294006d650a8bdfb8c080ace94"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729a82f31c6b885863e6b4249927ac93efd4bc146c70312cdad7a461807aaaf8320c4bfac0625299de40af1c70672eed686bb713f64a4665c0152af00e5c52d1599303dc8ccfafafe5bb478c18810e39a9048bc125a9fa82639ee154aae5c21bbb6a9a37026d9"}}}}}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 932.813094ms ago: executing program 2 (id=5173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 851.819703ms ago: executing program 2 (id=5174): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30, r6}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r8) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\r\x00l'], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000804) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r11) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, 0x0, 0x4880) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r12, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="36b3db181a0acef389d121aeb91737b7379af0621c51cdd565804938e82893567cdd4aed210942b3e436fbf499671488710e32b4ca934c800dcfa235416d8af187bcbaa417699ef3b129d33eb330885d66a847965c45bc7bcf614014d049dd75e4f244422f6bbde78d84ce619558a331412e111d665c3b029603e9399a12a052a4e7aebe64a66be4c6233eff31fb7caf7cbda003056de904", @ANYRES32=r0, @ANYRES16=r7, @ANYRES8=r0, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffef4, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 812.031641ms ago: executing program 3 (id=5175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000088}, 0x40000) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/58, 0x3a}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 692.714678ms ago: executing program 3 (id=5176): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x7fff, 0x6, {{0x18, 0x4, 0x0, 0x18, 0x60, 0x67, 0x0, 0xd, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x0, [{@rand_addr=0x64010101, 0x3}]}, @timestamp={0x44, 0x8, 0xc7, 0x0, 0x7, [0x6099]}, @cipso={0x86, 0x1e, 0x1, [{0x5, 0x7, "4ba751b188"}, {0x1, 0x11, "3a7a7c7e0e386fc7a0990f696e0f6b"}]}, @generic={0x1b, 0x8, "1b1e7974b57a"}, @generic={0x86, 0xe, "55ac8046b985e02386f2c73f"}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x40, 0x48, 0x800, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004010) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000005c0)={0x2, {{0x2, 0x4e23, @multicast2=0xe0000001}}}, 0x88) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async, rerun: 64) r6 = socket(0x840000000002, 0x3, 0xfa) (rerun: 64) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) r7 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 64) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x3d, &(0x7f00000000c0), 0x4) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001000210400000000fedbdfe57b368a1c636d6a22dbceb4a5dca11df11accec1bb88355fdf0045f28e4ecf4b545dd8a652e04467a4ff20d7c3bf7eaefaec966f5dabdd94b95dc12e080961922f45287eb9352a68371465c7ff71c7aa9681bf0caf0c3885f0b3104becf9ebfd64917261379d32979a14a968bcb38d61b44d74d0c8f2e4a75173475dfba374333014b3611893759616f6c2359d112fe69dc01adb570ef839be330591ab2dc3671fbafb33830519696eeef5b939fff61ba515cb13dc61e937df1f1a61fbf55261f63e32e381eaf389f87d320b11ebbcf60a100"/235, @ANYRES32=0x0, @ANYBLOB="b9bea888e16000001400350076657468305f746f5f7465616d0000000a000100bbbbbbbbbbbb0000"], 0x40}}, 0x2) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 688.838115ms ago: executing program 1 (id=5177): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0xfffff87a, 0x4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r0, 0xa8}, 0x8) (async) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@dellinkprop={0x2c, 0x6d, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40804}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_IFALIASn={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8081) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000400)={{0xff, @rand_addr=0x64010101, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x6, 0x34}, {@empty, 0x4e20, 0x1, 0x9f26, 0x2, 0x9}}, 0x44) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r5, 0x29, 0x1, &(0x7f0000000480)={@remote}, &(0x7f00000004c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc0000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000006c0)={r0, 0xb, 0x4, [0x7, 0x101, 0x1, 0x90bf]}, 0x10) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10) ioctl$SIOCPNGETOBJECT(r9, 0x89e0, &(0x7f0000000780)=0x9) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newnexthop={0x60, 0x68, 0x2, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x6, 0x0, 0x20}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r10}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffff7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x14cd}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x101}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000cc) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)={r9}) ioctl$SIOCAX25NOUID(r11, 0x89e3, &(0x7f0000000980)=0x1) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000009c0)={r0, @in={{0x2, 0x4e21, @broadcast}}, [0x12, 0x9, 0x1490, 0x3, 0x3, 0xfffffffffffff319, 0x8001, 0x0, 0xf1, 0x1f, 0x6, 0xf, 0x2, 0x1, 0x3]}, &(0x7f0000000ac0)=0x100) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000b00)={r0, 0x80b3}, &(0x7f0000000b40)=0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000b80)={r4, 0xff, 0x116114f, 0x5f60}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r13, 0x0, 0x62, 0x48, &(0x7f0000000bc0)="c9a4a96538403011c1f42fb4cbf77cf7cb5a97d408e737bb49c328cbf3aecdc6873500f9ee4ff335f53061db34433d1b8816ac6d1f6444b81d52e7e589e855d9539949e259f672a1753fe5e600a9efcfdd18f296f7e21dcb8b7b9dd484d4a5b1419f", &(0x7f0000000c40)=""/72, 0x0, 0x0, 0xb8, 0x44, &(0x7f0000000cc0)="1d42e3408da0902b90e6f1749419921b2ef3757d1d65e759bbf2a4fb4386a62c4bd27372711e14dbb1c4292826e61203690e54651d1d7bbcf1ae4e1e3f3a3c935124524fb1399ef1e26f1649d9274dfa210b093bdb9474137dfa325120e2d84133a30fe38c7798737079f06bb6e371074c671f588650a59a2cecb6ed9d1a7cfe463cb35c14df2f11dbfbb3c691cbc56954640ee7159527fc180752276823fe2046b4b898ffcd99ef2462fc6609e7742dc7ded9826ad74b4c", &(0x7f0000000d80)="1445a7e91f81bbe22ebea00fc370f06145cb6d8cb25cb597dbba2df5df57ba6577e013f62dee9e6e9fbf6ff217f9cbfc87892451fc2e43f9f264266542d81f9a9461a8f4", 0x1, 0x0, 0x4}, 0x50) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0xcf}, &(0x7f0000000ec0)=0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000f00)={r12, 0x6, 0x1, [0x8]}, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) 620.310416ms ago: executing program 2 (id=5178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x400, 0x0, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0xfe}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10004044) 564.736654ms ago: executing program 1 (id=5179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 64) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (rerun: 64) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0x8, 0x4}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 462.931648ms ago: executing program 0 (id=5180): socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmmsg$sock(r4, &(0x7f0000000480)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @remote}, 0x0, 0x2, 0x3, 0x4}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1db05bed554be541b04bbd5a4ef0bb2868c428f0d7a0dc0f498948ab16a243c51fcb28428d9aed89", 0x28}, {&(0x7f0000000200)="b38dd0cd38818a7e3e95e73b80bf5a54d2d373271e27b72593ca10f734e3c05b0e0861ad0c5eb81c7bbcc3f7c2a9020e2688410e7a575619a8f437d65cd34d92717cf05f57e89721e685", 0x4a}, {&(0x7f0000000280)="d0e30612982495351472ca5873a537a1b63e535341109d14b42d1a1282c3274625b493401ef8f172", 0x28}], 0x3, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffb9}}, @txtime={{0x18, 0x1, 0x3d, 0x298d}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x15d1}}], 0x90}}], 0x1, 0x20040010) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 460.635356ms ago: executing program 2 (id=5181): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x806}}, 0x14}, 0x1, 0x0, 0x0, 0x54091}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2231000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd700006001b001500000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000e000000230000000a00060008021100000000000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x44080) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 376.530692ms ago: executing program 1 (id=5182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 375.593348ms ago: executing program 3 (id=5183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0401000010008102000000000000000000000000000000000000000000000000ffffffff0000000000000000000000001fff0000000109e9000000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe880000000000000000000000000001000000003c00000064010102000000000000000000000000000000000000000000000000000000000000ff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000800000000000000000000000000000000a0000002d0000000000000014000e00e000000200"/182], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x6) openat$tun(0xffffff9c, &(0x7f00000001c0), 0xe000, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x21, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x7, 0x3, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x7d}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000}], &(0x7f0000000480)='GPL\x00', 0x14c1, 0xb8, &(0x7f00000004c0)=""/184, 0x40f00, 0x63, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0x2bd, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r4, r1], &(0x7f0000000680)=[{0x4, 0x1, 0x6, 0x8}], 0x10, 0x800}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000780)={0xffffffffffffffff, r5}) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x1170, 0x1170, 0x160, 0x1170, 0x248, 0x1398, 0x1398, 0x248, 0x1398, 0x8000000, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@private1, @mcast2, [], [], 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {0xff}}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x17, 0x5, 0xc, 0x1, 0x6, 0x45, 0x7, 0x10001]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000007c0)=0x5d, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @empty, 0xffffffff}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x4, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x2, 0x8, 0x5, 0x1, 0x400, 0x4, 0x5}}, {0xe, 0x2, [0x3, 0x7ff, 0x8, 0x6, 0x101]}}]}]}, 0xb8}}, 0x20000000) 240.445213ms ago: executing program 0 (id=5184): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000001808018014000200776c616e3100000061ea1e0b00000800093eb7176a000000"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000ff030000b1f8f427d33e49f0de45f95b3d6b62364179023ee8989c1dc6875b83", @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf2512000000080009000600000008000900ff030000"], 0x24}}, 0x4c880) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r14, 0x952de000) openat$cgroup_ro(r14, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xd}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x10008844) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 234.492036ms ago: executing program 3 (id=5185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 209.91622ms ago: executing program 1 (id=5186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1f0, 0xd8, 0x1f0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x90, 0xd8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@socket0={{0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r5, @ANYBLOB="3000c700"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000040)=0x7b60) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r10, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r10, 0x80) accept$netrom(r10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 584.414µs ago: executing program 2 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) unshare(0x8000600) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=5188): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000410007010000000007000000017c00000400fc809400018006000600800a00008500908008"], 0xac}}, 0x4010) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000012"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000000fd020000000008000400", @ANYRES32=r10, @ANYBLOB="0600150008000000180016"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRES8=0x0], 0x54}, 0x1, 0x0, 0x0, 0x24088000}, 0x4808) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r13, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x4000000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xfffffffffffffe8a, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) kernel console output (not intermixed with test programs): : netlink: Flow actions may not be safe on all matching packets. [ 336.949908][T16649] SET target dimension over the limit! [ 336.967154][T16344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.032261][T16653] netlink: 'syz.1.3105': attribute type 4 has an invalid length. [ 337.040971][T16344] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.097163][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.104329][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.151385][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.158665][T13713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.244188][T16664] bridge_slave_1: mtu less than device minimum [ 337.331652][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 337.557336][T16676] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 337.765816][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.829654][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3116'. [ 337.925977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.940734][T16344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.229269][T16344] veth0_vlan: entered promiscuous mode [ 338.273821][T16344] veth1_vlan: entered promiscuous mode [ 338.388001][T16716] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 338.438685][T16344] veth0_macvtap: entered promiscuous mode [ 338.474380][T16344] veth1_macvtap: entered promiscuous mode [ 338.538962][T16725] netlink: 'syz.4.3123': attribute type 7 has an invalid length. [ 338.544845][T16344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.580143][T16725] netlink: 'syz.4.3123': attribute type 8 has an invalid length. [ 338.604946][T16344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.660318][T16344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.686324][T16344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.715153][T16344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.736310][T16344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.763108][T16733] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 338.966149][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.047091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.071464][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.174143][T13713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.190419][T13713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.224826][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.672442][T16774] SET target dimension over the limit! [ 339.707311][T16776] tipc: Enabling of bearer rejected, failed to enable media [ 339.845878][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.009615][ C0] net_ratelimit: 1 callbacks suppressed [ 340.009639][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.269419][T16788] netlink: 'syz.3.3137': attribute type 21 has an invalid length. [ 340.300690][T16788] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.332378][T16788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.339749][T16788] IPv6: NLM_F_CREATE should be set when creating new route [ 340.347117][T16788] IPv6: NLM_F_CREATE should be set when creating new route [ 340.354377][T16788] IPv6: NLM_F_CREATE should be set when creating new route [ 340.476912][T16780] macsec0: entered promiscuous mode [ 340.482420][T16780] macsec0: entered allmulticast mode [ 340.489348][T16786] veth1_macvtap: entered allmulticast mode [ 340.510768][T16786] macsec0: left promiscuous mode [ 340.527344][T16786] macsec0: left allmulticast mode [ 340.535668][T16786] veth1_macvtap: left allmulticast mode [ 340.637763][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.647747][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.671411][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.690643][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.706299][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.719757][T16801] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 340.992869][T16808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 341.045588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.302878][T16816] __nla_validate_parse: 10 callbacks suppressed [ 341.302899][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 341.656664][T16827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3149'. [ 341.926003][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.956696][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3152'. [ 341.987542][T16841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3152'. [ 342.028755][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.038849][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.061757][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.079962][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.087119][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.099117][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.117408][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'. [ 342.164207][T16850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3155'. [ 342.302353][T16846] lo speed is unknown, defaulting to 1000 [ 342.322453][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3154'. [ 342.615061][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.774939][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 342.937903][T16853] lo speed is unknown, defaulting to 1000 [ 343.047653][T16875] openvswitch: netlink: IPv4 tun info is not correct [ 343.125572][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.362758][T16846] chnl_net:caif_netlink_parms(): no params data found [ 343.418351][T16886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3164'. [ 343.434086][T16886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3164'. [ 343.682670][T16851] lo speed is unknown, defaulting to 1000 [ 343.902100][ T12] bridge_slave_1: left allmulticast mode [ 343.910806][ T12] bridge_slave_1: left promiscuous mode [ 343.926475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.955694][ T12] bridge_slave_0: left allmulticast mode [ 343.961520][ T12] bridge_slave_0: left promiscuous mode [ 344.005871][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.019372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.164498][T16922] xt_recent: Unsupported userspace flags (00000061) [ 344.171348][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.184630][ T5847] Bluetooth: hci2: command tx timeout [ 344.434367][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 344.675283][ T12] dvmrp0 (unregistering): left allmulticast mode [ 344.699169][ T12] dvmrp1 (unregistering): left allmulticast mode [ 344.773929][ T12] bridge0 (unregistering): left promiscuous mode [ 345.207443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.263040][ T12] bond0 (unregistering): (slave bridge9): Releasing active interface [ 345.497682][ T12] bond1 (unregistering): Released all slaves [ 345.512324][ T12] bond2 (unregistering): Released all slaves [ 345.627291][ T12] bond3 (unregistering): Released all slaves [ 345.642690][ T12] bond4 (unregistering): Released all slaves [ 345.761152][ T12] bond0 (unregistering): Released all slaves [ 345.779295][ T12] bond5 (unregistering): Released all slaves [ 345.844950][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.864526][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.876620][T16846] bridge_slave_0: entered allmulticast mode [ 345.918550][T16846] bridge_slave_0: entered promiscuous mode [ 345.947304][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.968829][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.982769][T16846] bridge_slave_1: entered allmulticast mode [ 346.004344][T16846] bridge_slave_1: entered promiscuous mode [ 346.128412][ T12] tipc: Disabling bearer [ 346.137296][ T12] tipc: Disabling bearer [ 346.143594][ T12] tipc: Left network mode [ 346.245679][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.255546][ T5847] Bluetooth: hci2: command tx timeout [ 346.344346][T16944] __nla_validate_parse: 4 callbacks suppressed [ 346.344386][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'. [ 346.413674][T16944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3177'. [ 346.515204][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.553951][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.579100][T16944] net veth1_virt_wifi .: renamed from virt_wifi0 [ 346.822202][ T3507] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 346.886793][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'. [ 347.010147][T16970] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 347.024917][T16846] team0: Port device team_slave_0 added [ 347.263171][T16846] team0: Port device team_slave_1 added [ 347.286119][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.533487][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 347.723827][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.765788][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.829139][T16993] netlink: 'syz.1.3189': attribute type 18 has an invalid length. [ 347.856062][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.899058][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.914356][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.947888][T16996] netlink: 'syz.2.3188': attribute type 1 has an invalid length. [ 347.975233][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.043308][ T12] hsr_slave_0: left promiscuous mode [ 348.058496][ T12] hsr_slave_1: left promiscuous mode [ 348.075188][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.092507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.146604][ T12] pim6reg (unregistering): left allmulticast mode [ 348.327230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.335455][ T5847] Bluetooth: hci2: command tx timeout [ 349.063419][T16996] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 349.113564][T16999] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 349.267057][T16846] hsr_slave_0: entered promiscuous mode [ 349.310889][T16846] hsr_slave_1: entered promiscuous mode [ 349.327271][T16846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.334907][T16846] Cannot create hsr debugfs directory [ 349.365559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.687757][T17034] IPVS: set_ctl: invalid protocol: 16947 172.30.1.3:20003 [ 349.704096][T17034] IPVS: set_ctl: invalid protocol: 16947 172.30.1.3:20003 [ 349.793037][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 349.890802][T17047] netlink: 'syz.3.3205': attribute type 10 has an invalid length. [ 349.971667][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 349.985965][T17050] nbd: nbd0 already in use [ 350.049842][T17047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.076094][T17047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.180946][ T12] IPVS: stop unused estimator thread 0... [ 350.225677][T17061] netlink: zone id is out of range [ 350.259269][T17061] netlink: zone id is out of range [ 350.277777][T17061] netlink: zone id is out of range [ 350.283874][T17061] netlink: zone id is out of range [ 350.289519][T17061] netlink: zone id is out of range [ 350.294930][T17061] netlink: zone id is out of range [ 350.300939][T17061] netlink: zone id is out of range [ 350.307498][T17061] netlink: zone id is out of range [ 350.313241][T17061] netlink: zone id is out of range [ 350.321325][T17061] netlink: zone id is out of range [ 350.405839][ T5847] Bluetooth: hci2: command tx timeout [ 350.543689][T17071] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 350.637376][T17070] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3214'. [ 350.757221][T17078] netlink: 'syz.3.3217': attribute type 11 has an invalid length. [ 350.765297][T17078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3217'. [ 350.802521][T17078] netlink: 'syz.3.3217': attribute type 1 has an invalid length. [ 350.820467][T17078] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3217'. [ 350.841903][T16846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.891158][T16846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.922550][T16846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.961858][T16846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.000891][T17089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3221'. [ 351.168033][T17101] netlink: 'syz.3.3224': attribute type 26 has an invalid length. [ 351.361275][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.399407][T17112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3228'. [ 351.451376][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.480465][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.487720][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.513458][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.520725][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.901139][T17137] netlink: 'syz.4.3234': attribute type 24 has an invalid length. [ 351.999140][T17147] lo speed is unknown, defaulting to 1000 [ 352.116235][ T5943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.237847][T16846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.242386][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.269310][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.290106][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.351031][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.367780][T16846] veth0_vlan: entered promiscuous mode [ 352.374952][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.391100][T16846] veth1_vlan: entered promiscuous mode [ 352.414577][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.425217][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.437158][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.448083][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 352.574960][T16846] veth0_macvtap: entered promiscuous mode [ 352.647399][T16846] veth1_macvtap: entered promiscuous mode [ 352.803315][T16846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.849217][T16846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.872610][T16846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.897804][T16846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.917348][T16846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.945590][T16846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.126125][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.327301][T17184] netlink: 'syz.2.3244': attribute type 4 has an invalid length. [ 353.349708][T17186] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 353.370155][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.410519][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.429905][T17186] batman_adv: batadv0: Adding interface: team0 [ 353.454267][T17186] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.493773][T17186] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 353.676351][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.684250][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.061791][T17191] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.071120][T17191] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.081933][T17191] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.098946][T17191] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.163919][T17191] ip6tnl1: left promiscuous mode [ 354.170460][T17191] ip6tnl1: left allmulticast mode [ 354.350786][T17201] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 354.393756][T17201] team0: Device ipvlan1 failed to register rx_handler [ 355.066842][T17221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.074180][T17221] IPv6: NLM_F_CREATE should be set when creating new route [ 355.081508][T17221] IPv6: NLM_F_CREATE should be set when creating new route [ 355.088804][T17221] IPv6: NLM_F_CREATE should be set when creating new route [ 355.148063][T17221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.328262][T17224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.362939][T17224] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.405767][T17224] net_ratelimit: 12 callbacks suppressed [ 355.405781][T17224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.443895][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.458968][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.472491][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.481197][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.500493][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.605590][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.717125][T17231] lo speed is unknown, defaulting to 1000 [ 356.429833][T17257] __nla_validate_parse: 60 callbacks suppressed [ 356.429854][T17257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3267'. [ 356.540460][T17261] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3268'. [ 356.553264][T17261] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3268'. [ 356.585311][T17261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3268'. [ 356.645543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.720792][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3270'. [ 356.893738][T17231] chnl_net:caif_netlink_parms(): no params data found [ 356.930365][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 356.951437][T17273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3272'. [ 357.094533][T17277] netlink: 'syz.0.3273': attribute type 83 has an invalid length. [ 357.172847][T17282] blkio.reset_stats is deprecated [ 357.272125][T17231] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.306374][T17231] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.325777][T17231] bridge_slave_0: entered allmulticast mode [ 357.345696][T17231] bridge_slave_0: entered promiscuous mode [ 357.375338][T17281] tipc: Started in network mode [ 357.387018][T17281] tipc: Node identity 72b0e4534bfb, cluster identity 4711 [ 357.394370][T17281] tipc: Enabled bearer , priority 0 [ 357.424552][T17289] syzkaller0: entered promiscuous mode [ 357.434408][T17289] syzkaller0: entered allmulticast mode [ 357.448893][T17231] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.465633][T17231] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.473012][T17231] bridge_slave_1: entered allmulticast mode [ 357.489966][T17231] bridge_slave_1: entered promiscuous mode [ 357.528359][T17288] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 357.530469][T17281] tipc: Resetting bearer [ 357.605615][ T5851] Bluetooth: hci1: command tx timeout [ 357.611873][T17281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 357.663084][T17284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 357.682607][T17231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.685582][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.739284][T17231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.773668][T17284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 357.875746][T17278] tipc: Resetting bearer [ 357.943768][T17278] tipc: Disabling bearer [ 358.011119][T17231] team0: Port device team_slave_0 added [ 358.039436][T17231] team0: Port device team_slave_1 added [ 358.165749][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 358.204035][T17309] xt_hashlimit: invalid rate [ 358.227440][T17231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.234470][T17231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.288513][T17309] xt_hashlimit: invalid rate [ 358.293876][T17309] xt_hashlimit: invalid rate [ 358.336436][T17309] xt_hashlimit: invalid rate [ 358.342727][T17309] xt_hashlimit: invalid rate [ 358.347598][T17231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.388629][T17231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.406960][T17231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.496390][T17231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.654200][T17320] vlan2: entered allmulticast mode [ 358.695860][T17320] team_slave_1: entered allmulticast mode [ 358.711552][T17231] hsr_slave_0: entered promiscuous mode [ 358.725541][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.728701][T17231] hsr_slave_1: entered promiscuous mode [ 358.749863][T17231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.762402][T17324] netlink: 'syz.3.3287': attribute type 39 has an invalid length. [ 358.772538][T17327] netlink: 'syz.3.3287': attribute type 39 has an invalid length. [ 358.780949][T17231] Cannot create hsr debugfs directory [ 358.891962][T17329] netlink: 'syz.2.3289': attribute type 1 has an invalid length. [ 358.932030][T17329] netlink: 'syz.2.3289': attribute type 3 has an invalid length. [ 358.971399][T17329] NCSI netlink: No device for ifindex 0 [ 359.309806][T17339] openvswitch: netlink: Flow key attr not present in new flow. [ 359.433874][T17231] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.476517][T17231] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 359.515897][T17350] netlink: 'syz.0.3294': attribute type 30 has an invalid length. [ 359.547551][T17350] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.557273][T17350] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.566853][T17350] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.575637][T17350] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.629869][T17350] netlink: 'syz.0.3294': attribute type 30 has an invalid length. [ 359.677724][T17231] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.687664][ T5851] Bluetooth: hci1: command tx timeout [ 359.700340][T17231] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 359.764767][T17360] gretap0: entered allmulticast mode [ 359.765581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.827850][T17231] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.844089][T17231] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.071162][T17231] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.096197][T17231] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.676798][T17231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.691127][T17231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.723899][T17231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.759995][T17231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.805659][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.060642][T17231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.142054][T17231] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.173234][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.180489][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.213097][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.220363][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.299452][T17432] team_slave_0: mtu less than device minimum [ 361.355036][T17231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.421216][T17231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.432322][T17436] netlink: 'syz.2.3319': attribute type 7 has an invalid length. [ 361.528513][T17436] : entered promiscuous mode [ 361.766362][ T5851] Bluetooth: hci1: command tx timeout [ 361.845632][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.006675][T17467] __nla_validate_parse: 8 callbacks suppressed [ 362.006695][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 362.060605][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 362.097548][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3324'. [ 362.263489][T17231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.447879][T17231] veth0_vlan: entered promiscuous mode [ 362.508256][T17231] veth1_vlan: entered promiscuous mode [ 362.523198][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'. [ 362.647564][T17231] veth0_macvtap: entered promiscuous mode [ 362.675282][T17231] veth1_macvtap: entered promiscuous mode [ 362.689226][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'. [ 362.775021][T17231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.824750][T17231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.861032][T17231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.885739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.888407][T17231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.936938][T17231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.975525][T17231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.184011][T17502] netlink: 'syz.3.3335': attribute type 21 has an invalid length. [ 363.192855][T17502] netlink: 'syz.3.3335': attribute type 22 has an invalid length. [ 363.206178][T17502] netlink: 'syz.3.3335': attribute type 23 has an invalid length. [ 363.219049][T17502] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3335'. [ 363.329495][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.334136][T17508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3336'. [ 363.346615][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.408835][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 363.438471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.452157][T17513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3337'. [ 363.459251][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.475173][T17508] sit0: entered promiscuous mode [ 363.494148][T17508] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3336'. [ 363.849951][ T5851] Bluetooth: hci1: command tx timeout [ 363.926699][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.752650][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.763694][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.764934][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.772979][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.781206][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.793649][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.801552][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.965531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.976900][T17559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.996313][T17559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.103522][T17559] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.120200][T17559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.130057][T17559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.139567][T17559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.209158][T17559] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.218316][T17559] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.227709][T17559] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.236674][T17559] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.414682][T17571] lo speed is unknown, defaulting to 1000 [ 365.955924][T17609] vcan1: entered promiscuous mode [ 365.977216][T17609] vcan1: entered allmulticast mode [ 366.022651][T17620] netlink: 'syz.0.3368': attribute type 11 has an invalid length. [ 366.203580][T17620] validate_nla: 2 callbacks suppressed [ 366.203602][T17620] netlink: 'syz.0.3368': attribute type 5 has an invalid length. [ 366.370708][T17636] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 366.392358][T17636] netlink: 'syz.3.3373': attribute type 2 has an invalid length. [ 366.792821][T17571] chnl_net:caif_netlink_parms(): no params data found [ 366.887619][ T5851] Bluetooth: hci3: command tx timeout [ 366.964208][T17571] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.972375][T17571] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.980703][T17571] bridge_slave_0: entered allmulticast mode [ 366.990118][T17571] bridge_slave_0: entered promiscuous mode [ 367.000710][T17571] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.008282][T17571] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.015809][T17571] bridge_slave_1: entered allmulticast mode [ 367.024264][T17571] bridge_slave_1: entered promiscuous mode [ 367.131365][T17571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.145978][T17571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.202058][T17673] xt_cgroup: path and classid specified [ 367.229409][T17571] team0: Port device team_slave_0 added [ 367.243525][T17571] team0: Port device team_slave_1 added [ 367.330201][T17677] __nla_validate_parse: 12 callbacks suppressed [ 367.330222][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 367.387330][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'. [ 367.388833][T17677] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.405618][T17677] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.431249][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 367.443032][T17571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.454202][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.481219][T17571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.505831][T17674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.631862][T17674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.647683][T17684] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 367.740740][T17571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.825655][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.928578][T17571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.053022][T17703] tipc: Enabled bearer , priority 0 [ 368.139829][T17571] hsr_slave_0: entered promiscuous mode [ 368.151052][T17571] hsr_slave_1: entered promiscuous mode [ 368.157588][T17571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.165208][T17571] Cannot create hsr debugfs directory [ 368.194815][T17703] tipc: Disabling bearer [ 368.255045][T17719] vlan3: entered allmulticast mode [ 368.260902][T17719] team0: entered allmulticast mode [ 368.267118][T17719] team0: Device vlan3 is already an upper device of the team interface [ 368.451468][T17729] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 368.463325][ T977] IPVS: starting estimator thread 0... [ 368.576802][T17732] IPVS: using max 24 ests per chain, 57600 per kthread [ 368.597945][T17731] lo speed is unknown, defaulting to 1000 [ 368.921775][T17742] syzkaller0: entered promiscuous mode [ 368.942199][T17742] syzkaller0: entered allmulticast mode [ 368.966607][ T5851] Bluetooth: hci3: command tx timeout [ 369.257236][T17571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.409389][T17571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.564711][T17571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.823073][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 371.045874][ T5851] Bluetooth: hci3: command tx timeout [ 371.369150][T17571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.448724][T17775] netlink: 'syz.3.3409': attribute type 29 has an invalid length. [ 371.777177][T17793] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 371.779431][T17799] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3414'. [ 371.865110][T17793] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 371.878183][T17571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.920688][T17571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.961363][T17807] bridge_slave_1: left allmulticast mode [ 371.973292][T17807] bridge_slave_1: left promiscuous mode [ 371.987336][T17807] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.002527][T17807] bridge_slave_0: left allmulticast mode [ 372.015994][T17807] bridge_slave_0: left promiscuous mode [ 372.021997][T17807] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.103131][T17571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.117186][T17571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.319624][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 372.402623][T17571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.456536][T17571] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.524306][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.531557][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.557119][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.564376][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.730888][T17843] Cannot find set identified by id 0 to match [ 372.765823][T17843] Cannot find set identified by id 0 to match [ 372.811577][T17848] x_tables: unsorted entry at hook 3 [ 372.976173][T17859] netlink: 'syz.2.3429': attribute type 3 has an invalid length. [ 372.999714][T17859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.111628][T17860] veth5: entered allmulticast mode [ 373.126005][ T5851] Bluetooth: hci3: command tx timeout [ 373.198129][T17871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3434'. [ 373.237577][T17571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.724656][T17876] xt_CT: No such helper "snmp" [ 373.891221][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3439'. [ 374.120571][T17571] veth0_vlan: entered promiscuous mode [ 374.190832][T17571] veth1_vlan: entered promiscuous mode [ 374.293367][T17571] veth0_macvtap: entered promiscuous mode [ 374.355207][T17571] veth1_macvtap: entered promiscuous mode [ 374.400448][T17571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.431140][T17571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.464827][T17571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.487967][T17571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.505647][T17571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.514520][T17571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.558166][T17921] pimreg: entered allmulticast mode [ 374.607243][T17921] pimreg: left allmulticast mode [ 374.612376][T17921] syz_tun: left allmulticast mode [ 374.831636][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 374.852255][T13713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.893803][T13713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.014329][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.030418][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.162515][T17953] sit0: entered promiscuous mode [ 375.196185][T17953] netlink: 'syz.2.3457': attribute type 1 has an invalid length. [ 375.204206][T17953] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3457'. [ 375.817847][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3467'. [ 375.839076][T17992] netlink: 'syz.0.3466': attribute type 7 has an invalid length. [ 375.839714][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3467'. [ 375.926273][T17992] : entered promiscuous mode [ 375.955052][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'. [ 375.989498][T17999] bridge_slave_0: left allmulticast mode [ 375.995651][T17999] bridge_slave_0: left promiscuous mode [ 376.002942][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.038047][T17999] bridge_slave_1: left allmulticast mode [ 376.050574][T17999] bridge_slave_1: left promiscuous mode [ 376.059465][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.094728][T18005] netlink: zone id is out of range [ 376.108128][T18005] netlink: zone id is out of range [ 376.113465][T18005] netlink: zone id is out of range [ 376.119826][T17999] bond0: (slave bond_slave_0): Releasing backup interface [ 376.127362][T18005] netlink: zone id is out of range [ 376.132831][T18005] netlink: zone id is out of range [ 376.153936][T18005] netlink: zone id is out of range [ 376.158760][T17999] bond0: (slave bond_slave_1): Releasing backup interface [ 376.163328][T18005] netlink: zone id is out of range [ 376.173163][T18005] netlink: zone id is out of range [ 376.178788][T18005] netlink: zone id is out of range [ 376.184205][T18005] netlink: zone id is out of range [ 376.248835][T17999] team0: Port device team_slave_0 removed [ 376.298663][T17999] team0: Port device team_slave_1 removed [ 376.314860][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.342814][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.363438][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.380791][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.610916][T12508] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 378.159015][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 378.192733][T18087] veth0: entered promiscuous mode [ 378.394251][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 378.437950][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 378.465980][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 378.574605][T18086] veth0: left promiscuous mode [ 378.734330][T18124] tun0: tun_chr_ioctl cmd 1074025675 [ 378.768013][T18124] tun0: persist disabled [ 378.928678][T18132] syzkaller0: entered promiscuous mode [ 378.949949][T18132] syzkaller0: entered allmulticast mode [ 379.020054][T18128] tipc: Started in network mode [ 379.043043][T18128] tipc: Node identity 466c02b52dd3, cluster identity 4711 [ 379.081791][T18128] tipc: Enabled bearer , priority 0 [ 379.122203][T18135] lo speed is unknown, defaulting to 1000 [ 379.253127][T18128] tipc: Resetting bearer [ 379.346326][T18128] tipc: Disabling bearer [ 379.425812][T18159] x_tables: duplicate underflow at hook 1 [ 379.560439][T18166] Bluetooth: MGMT ver 1.23 [ 380.101164][T18183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3515'. [ 380.535901][T18201] vlan1: entered allmulticast mode [ 380.541111][T18201] veth0_vlan: entered allmulticast mode [ 381.126672][T18235] block nbd1: server does not support multiple connections per device. [ 381.153376][T18235] block nbd1: shutting down sockets [ 382.039590][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3540'. [ 382.114517][T18266] syzkaller1: entered promiscuous mode [ 382.120194][T18266] syzkaller1: entered allmulticast mode [ 382.231469][T18276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3544'. [ 382.288597][T18276] net_ratelimit: 20 callbacks suppressed [ 382.288617][T18276] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 382.395988][T18281] x_tables: duplicate underflow at hook 1 [ 382.422074][T18284] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 382.511244][T18291] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3549'. [ 382.622227][T18299] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3550'. [ 382.712417][T18307] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 382.882848][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 382.893688][T18314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3555'. [ 383.550887][T18326] infiniband syz!: set down [ 383.555585][T18326] infiniband syz!: added team_slave_0 [ 383.604834][T18326] RDS/IB: syz!: added [ 383.609600][T18326] smc: adding ib device syz! with port count 1 [ 383.615930][T18326] smc: ib device syz! port 1 has pnetid [ 383.687516][T18355] netlink: 'syz.4.3567': attribute type 1 has an invalid length. [ 383.765122][T18355] bond1 (unregistering): Released all slaves [ 383.826121][T18358] ip6tnl1: entered promiscuous mode [ 383.843043][T18358] ip6tnl1: entered allmulticast mode [ 383.895076][T18363] netlink: 'syz.3.3568': attribute type 4 has an invalid length. [ 383.939781][T18363] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3568'. [ 384.026942][T18368] netlink: 'syz.1.3569': attribute type 10 has an invalid length. [ 384.062770][T18368] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 384.197751][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 384.437362][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3574'. [ 384.569596][T18388] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 384.625971][T18388] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3575'. [ 384.645308][T18396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.726168][ T5851] Bluetooth: hci3: command tx timeout [ 384.886140][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3576'. [ 385.063461][T18410] netlink: 'syz.0.3580': attribute type 1 has an invalid length. [ 385.078573][T18409] x_tables: duplicate underflow at hook 1 [ 385.089890][T18410] netlink: 'syz.0.3580': attribute type 2 has an invalid length. [ 385.154500][T18404] syzkaller0: entered promiscuous mode [ 385.188091][T18404] syzkaller0: entered allmulticast mode [ 385.275529][T18419] nbd1: detected capacity change from 0 to 63 [ 385.287841][ T5851] block nbd1: Receive control failed (result -32) [ 385.343366][T18421] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3584'. [ 387.412842][T18457] netlink: 'syz.3.3593': attribute type 1 has an invalid length. [ 387.425777][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 387.453118][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 387.548006][T18462] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 387.738008][T18465] bond2 (unregistering): Released all slaves [ 387.753067][T18472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3595'. [ 387.827265][T18462] bond1: (slave gretap1): making interface the new active one [ 387.872088][T18462] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 387.931647][T18472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.082197][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3598'. [ 388.331647][T18486] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 388.353158][T18488] lo speed is unknown, defaulting to 1000 [ 388.436389][T18486] ifb1: entered promiscuous mode [ 388.451398][T18486] ifb1: entered allmulticast mode [ 389.520439][T18519] 8021q: VLANs not supported on ip_vti0 [ 389.679516][T18526] __nla_validate_parse: 2 callbacks suppressed [ 389.679538][T18526] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3610'. [ 389.788131][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 389.804175][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3610'. [ 389.959344][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cbdbc00: rx timeout, send abort [ 390.183118][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 390.460507][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cbdb800: rx timeout, send abort [ 390.469296][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cbdbc00: abort rx timeout. Force session deactivation [ 390.510151][T18552] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 390.560474][T18552] netlink: 'syz.3.3618': attribute type 2 has an invalid length. [ 390.588366][T18552] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 390.626851][T18552] netlink: 'syz.3.3618': attribute type 2 has an invalid length. [ 390.820368][T18561] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3620'. [ 390.849611][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 390.863444][T18561] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3620'. [ 390.968857][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cbdb800: abort rx timeout. Force session deactivation [ 391.119656][T18577] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.231541][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 391.312267][T18583] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 391.345159][T18586] netlink: 'syz.2.3627': attribute type 2 has an invalid length. [ 391.550012][T18598] tipc: Started in network mode [ 391.566812][T18598] tipc: Node identity ac14142f, cluster identity 4711 [ 391.585526][T18598] tipc: New replicast peer: 0.0.0.0 [ 391.591299][T18598] tipc: Enabled bearer , priority 10 [ 391.803809][T18611] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 391.812823][T18609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3634'. [ 391.963596][T18617] tipc: Enabled bearer , priority 0 [ 392.027147][T18622] syzkaller1: entered promiscuous mode [ 392.039700][T18622] syzkaller1: entered allmulticast mode [ 392.214512][T18629] pim6reg1: entered promiscuous mode [ 392.226941][T18629] pim6reg1: entered allmulticast mode [ 392.518981][T18623] tipc: Disabling bearer [ 392.570221][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 392.706001][ T5930] tipc: Node number set to 2886997039 [ 393.352942][T18690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 393.372170][T18690] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 393.383083][T18690] gretap1: entered promiscuous mode [ 393.394523][T18690] gretap1: entered allmulticast mode [ 393.902195][T18721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.268237][T18744] xt_ecn: cannot match TCP bits for non-tcp packets [ 394.861092][T18730] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.869138][T18730] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.376902][T18730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.716337][T18730] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.726653][T18730] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.736739][T18730] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.753748][T18730] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.111125][T18756] netlink: 'syz.2.3678': attribute type 11 has an invalid length. [ 396.133848][T18756] __nla_validate_parse: 9 callbacks suppressed [ 396.133869][T18756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3678'. [ 396.230173][T18761] IPVS: Unknown mcast interface: vcan0 [ 396.253104][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 396.439542][T18776] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3684'. [ 396.481197][T18776] 0ªX¹¦D: renamed from gretap0 [ 396.519413][T18776] 0ªX¹¦D: entered allmulticast mode [ 396.530849][T18776] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 396.813356][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 397.257527][T18809] tipc: Enabled bearer , priority 0 [ 397.281081][T18809] syzkaller0: entered promiscuous mode [ 397.287694][T18809] syzkaller0: entered allmulticast mode [ 397.300610][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3694'. [ 397.316504][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 397.328653][T18809] tipc: Resetting bearer [ 397.346228][T18808] tipc: Resetting bearer [ 397.364269][T18808] tipc: Disabling bearer [ 397.712027][T18830] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3700'. [ 397.750434][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 398.199478][T18849] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3706'. [ 398.244692][T18851] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3706'. [ 398.276777][T18849] openvswitch: netlink: Flow key attr not present in new flow. [ 398.313754][T18851] openvswitch: netlink: Flow key attr not present in new flow. [ 398.961483][T18881] openvswitch: netlink: Unknown key attributes 2 [ 399.250780][T18898] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 399.437378][T18910] pimreg3: entered allmulticast mode [ 399.624268][T18922] tipc: Enabling of bearer rejected, media not registered [ 399.841102][T18930] openvswitch: netlink: Message has -1 unknown bytes. [ 399.850206][T18934] netlink: 'syz.0.3735': attribute type 1 has an invalid length. [ 400.014791][T18941] ip6gre1: entered allmulticast mode [ 400.024643][T18941] Cannot find add_set index 0 as target [ 400.094734][T18947] netlink: 'syz.0.3737': attribute type 21 has an invalid length. [ 400.103392][T18947] netlink: 'syz.0.3737': attribute type 5 has an invalid length. [ 400.319990][T18953] netlink: 'syz.3.3739': attribute type 3 has an invalid length. [ 400.420127][T18964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.814083][T18984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 400.892975][T18992] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 401.153736][T19008] __nla_validate_parse: 16 callbacks suppressed [ 401.153758][T19008] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3752'. [ 401.232843][T19014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3754'. [ 401.273012][T19017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.321411][T19017] netlink: 'syz.1.3756': attribute type 7 has an invalid length. [ 401.359297][T19017] netlink: 'syz.1.3756': attribute type 8 has an invalid length. [ 401.385795][T19019] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.385961][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.439875][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.477386][T19029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3759'. [ 401.489783][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.506719][T19033] Cannot find del_set index 5 as target [ 401.538402][T19026] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.547359][T19026] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.556487][T19026] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.565239][T19026] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.619546][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.680600][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3756'. [ 401.783633][T19047] netlink: 'syz.0.3763': attribute type 2 has an invalid length. [ 401.912774][T19057] rdma_rxe: rxe_newlink: failed to add lo [ 402.173662][T19074] netlink: 'syz.1.3769': attribute type 2 has an invalid length. [ 402.219265][T19074] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 402.230412][T19074] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 402.303596][T19077] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 402.621859][T19086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.690173][T19087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.994859][T19114] 8021q: VLANs not supported on lo [ 403.170526][T19123] team0: Device ipvlan1 failed to register rx_handler [ 403.202252][T19126] 8021q: VLANs not supported on ip_vti0 [ 404.056234][T19164] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 404.108572][T19170] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 404.511210][T19196] sctp: [Deprecated]: syz.3.3805 (pid 19196) Use of int in maxseg socket option. [ 404.511210][T19196] Use struct sctp_assoc_value instead [ 404.656335][T19202] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.679704][T19240] validate_nla: 5 callbacks suppressed [ 405.679726][T19240] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 405.711141][T19242] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 405.746260][T19240] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 405.866842][T19243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.907919][T19247] xt_cgroup: invalid path, errno=-2 [ 406.314718][T19267] netlink: 'syz.0.3828': attribute type 1 has an invalid length. [ 406.428442][T19273] __nla_validate_parse: 13 callbacks suppressed [ 406.428464][T19273] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3830'. [ 406.454851][T19275] ip6tnl1: entered promiscuous mode [ 406.481784][T19275] ip6tnl1: entered allmulticast mode [ 406.497360][T19277] netlink: 'syz.2.3831': attribute type 1 has an invalid length. [ 406.505554][T19277] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3831'. [ 406.516614][T19275] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 406.547040][T19275] bond3: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 406.587821][T19275] bond3: (slave ip6tnl1): making interface the new active one [ 406.602237][T19275] bond3: (slave ip6tnl1): Enslaving as an active interface with an up link [ 406.706291][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 407.257401][T19300] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 407.535308][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'. [ 407.873242][T19333] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3846'. [ 408.447400][T19357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3855'. [ 408.548025][T19354] veth3: entered allmulticast mode [ 408.822997][T19374] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 409.173659][T19397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3867'. [ 409.208083][T19397] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3867'. [ 409.233871][T19401] netlink: 'syz.2.3867': attribute type 21 has an invalid length. [ 409.242102][T19400] netlink: 'syz.3.3870': attribute type 5 has an invalid length. [ 409.250392][T19401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3867'. [ 409.269315][T19400] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3870'. [ 409.274028][T19401] netlink: 'syz.2.3867': attribute type 21 has an invalid length. [ 409.548447][T19419] SET target dimension over the limit! [ 409.764919][T19428] nbd: must specify an index to disconnect [ 410.396657][T19457] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 410.422496][T19459] dvmrp0: entered allmulticast mode [ 410.560755][T19466] netlink: 'syz.3.3888': attribute type 10 has an invalid length. [ 410.619062][T19469] erspan0: entered promiscuous mode [ 410.632226][T19469] vlan2: entered promiscuous mode [ 410.674488][T19472] bridge0: port 1(gretap0) entered blocking state [ 410.684711][T19472] bridge0: port 1(gretap0) entered disabled state [ 410.692836][T19472] gretap0: entered allmulticast mode [ 410.701614][T19472] gretap0: entered promiscuous mode [ 410.930817][T19486] nbd: socks must be embedded in a SOCK_ITEM attr [ 411.425382][T19506] tipc: Invalid UDP bearer configuration [ 411.425786][T19506] tipc: Enabling of bearer rejected, failed to enable media [ 411.446156][T19489] delete_channel: no stack [ 411.924313][T19536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.954628][ T5851] block nbd2: Receive control failed (result -32) [ 412.124160][T19540] vcan1: left promiscuous mode [ 412.154455][T19547] netlink: 'syz.2.3920': attribute type 2 has an invalid length. [ 412.174141][T19547] __nla_validate_parse: 7 callbacks suppressed [ 412.174165][T19547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3920'. [ 412.248639][T19551] netlink: 'syz.2.3920': attribute type 2 has an invalid length. [ 412.275858][T19551] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3920'. [ 412.321711][T19554] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3921'. [ 412.340521][T19560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.373049][T19560] macvtap1: entered promiscuous mode [ 412.385974][T19560] vlan0: entered promiscuous mode [ 412.391502][T19560] macvtap1: entered allmulticast mode [ 412.418321][T19560] vlan0: entered allmulticast mode [ 412.449057][T19560] veth0_vlan: entered allmulticast mode [ 412.486499][T19560] vlan0: left allmulticast mode [ 412.507865][T19560] veth0_vlan: left allmulticast mode [ 412.514793][T19560] vlan0: left promiscuous mode [ 412.585207][T19571] netem: change failed [ 412.790184][T19579] ipvlan0: entered promiscuous mode [ 412.815639][T19586] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3929'. [ 412.835862][T19579] ipvlan0: entered allmulticast mode [ 412.844765][T19579] veth0_vlan: entered allmulticast mode [ 412.881282][T19587] netlink: 'syz.4.3930': attribute type 3 has an invalid length. [ 412.907203][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'. [ 413.209717][T19605] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 413.238163][T19605] netlink: 'syz.0.3934': attribute type 2 has an invalid length. [ 413.246966][T19605] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 413.254812][T19605] netlink: 'syz.0.3934': attribute type 2 has an invalid length. [ 413.263333][T19605] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 413.336147][T19611] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3936'. [ 413.336463][T19605] netlink: 'syz.0.3934': attribute type 2 has an invalid length. [ 413.361960][T19605] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 413.426147][T19616] openvswitch: netlink: EtherType 0 is less than min 600 [ 413.516265][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 413.539144][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 413.553775][T19619] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3940'. [ 413.656836][T19629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3943'. [ 413.716471][T19629] veth3: entered allmulticast mode [ 414.028383][T19645] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 414.043358][T19645] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 414.726143][T19686] bridge_slave_0: invalid flags given to default FDB implementation [ 415.457175][T19715] xt_l2tp: v2 doesn't support IP mode [ 415.485042][T19719] vlan2: entered promiscuous mode [ 415.504478][T19719] vlan2: entered allmulticast mode [ 415.514329][T19719] hsr_slave_1: entered allmulticast mode [ 415.706458][T19723] lo: entered promiscuous mode [ 415.753898][T19723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.803328][T19723] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 415.839094][T19722] xt_CT: No such helper "syz0" [ 415.901385][T19731] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 415.909628][T19731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.133750][T19731] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 416.880440][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 416.941045][T19775] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.954174][T19775] IPv6: NLM_F_REPLACE set, but no existing node found! [ 417.768119][T19785] __nla_validate_parse: 12 callbacks suppressed [ 417.768211][T19785] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3992'. [ 417.976444][T19798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.019860][T19801] team0: Device vti0 is of different type [ 418.037237][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 418.046745][T19804] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 418.068091][T19804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.357166][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 418.381449][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4001'. [ 418.532916][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 418.559033][T19837] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 418.566773][T19837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.660240][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'. [ 418.768361][T19847] validate_nla: 63 callbacks suppressed [ 418.768381][T19847] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 418.786391][T19847] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4009'. [ 418.964800][T19858] netlink: 392 bytes leftover after parsing attributes in process `syz.0.4010'. [ 418.990754][T19860] netlink: 392 bytes leftover after parsing attributes in process `syz.0.4010'. [ 419.181757][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4012'. [ 419.368937][T19878] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 419.960969][T19910] netlink: 'syz.4.4026': attribute type 8 has an invalid length. [ 420.298000][T19924] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 420.934348][T19951] netlink: 'syz.1.4040': attribute type 8 has an invalid length. [ 421.254138][T19976] netlink: 'syz.4.4047': attribute type 1 has an invalid length. [ 421.888919][T20020] vlan4: entered promiscuous mode [ 421.905676][T20020] gretap0: entered promiscuous mode [ 421.972001][T20029] Cannot find set identified by id 0 to match [ 422.235954][T20042] Bluetooth: MGMT ver 1.23 [ 422.650349][T20066] netlink: 'syz.3.4072': attribute type 1 has an invalid length. [ 422.796421][T20074] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.950272][T20079] __nla_validate_parse: 13 callbacks suppressed [ 422.950292][T20079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4077'. [ 423.091817][T20085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.352662][T20101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.597202][T20108] syz_tun: entered allmulticast mode [ 423.887479][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4087'. [ 423.912378][T20117] netlink: 'syz.0.4089': attribute type 18 has an invalid length. [ 423.958192][T20117] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.967673][T20117] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.976957][T20117] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.986995][T20117] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.012848][T20120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.280482][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'. [ 424.739847][T20170] xt_cgroup: path and classid specified [ 425.009018][T20184] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4108'. [ 425.059336][T20184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4108'. [ 425.076448][T20183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4108'. [ 425.531335][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'. [ 425.642400][T20208] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4115'. [ 425.680033][T20208] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4115'. [ 425.710756][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4117'. [ 425.720786][T20208] netlink: 'syz.2.4115': attribute type 6 has an invalid length. [ 425.743933][T20208] netlink: 'syz.2.4115': attribute type 5 has an invalid length. [ 425.753810][T20214] netlink: 'syz.3.4117': attribute type 7 has an invalid length. [ 425.775847][T20214] netlink: 'syz.3.4117': attribute type 8 has an invalid length. [ 426.041647][T20227] netlink: 'syz.4.4121': attribute type 4 has an invalid length. [ 426.094583][T20233] netlink: 'syz.3.4125': attribute type 32 has an invalid length. [ 426.125911][T20233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 426.293844][T20240] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 426.311111][T20240] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 426.343034][T20248] netlink: 'syz.3.4126': attribute type 4 has an invalid length. [ 427.336269][T20289] lo: entered allmulticast mode [ 427.341621][T20289] lo: left allmulticast mode [ 427.573521][T20300] netlink: 'syz.2.4143': attribute type 33 has an invalid length. [ 427.691982][T20305] netlink: 'syz.1.4145': attribute type 4 has an invalid length. [ 428.060448][T20331] __nla_validate_parse: 14 callbacks suppressed [ 428.060471][T20331] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4154'. [ 428.117758][T20332] Unsupported ieee802154 address type: 0 [ 428.452076][T20355] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.545230][T20364] netlink: 576 bytes leftover after parsing attributes in process `syz.1.4162'. [ 428.587069][T20367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4165'. [ 428.623221][T20367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4165'. [ 428.702036][T20368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.806085][T20374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4168'. [ 428.880134][T20374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4168'. [ 428.984747][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4172'. [ 429.036581][T20392] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 429.040743][T20389] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 429.132090][T20399] x_tables: duplicate underflow at hook 2 [ 429.226987][T20401] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4173'. [ 429.482749][T20414] xt_l2tp: v2 sid > 0xffff: 262144 [ 429.503082][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4178'. [ 429.624659][T20412] syzkaller0: entered promiscuous mode [ 429.630573][T20412] syzkaller0: entered allmulticast mode [ 429.644199][T20418] validate_nla: 2 callbacks suppressed [ 429.644218][T20418] netlink: 'syz.3.4177': attribute type 29 has an invalid length. [ 429.658898][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4177'. [ 431.829902][T20424] netlink: 'syz.1.4180': attribute type 3 has an invalid length. [ 431.848641][T20435] 8021q: VLANs not supported on gre0 [ 431.856770][T20442] lo speed is unknown, defaulting to 1000 [ 432.130747][T20474] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 432.212037][T20481] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 432.606258][T20510] netlink: 'syz.2.4203': attribute type 7 has an invalid length. [ 433.014955][T20523] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 433.098107][T20529] __nla_validate_parse: 8 callbacks suppressed [ 433.098129][T20529] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4209'. [ 433.484455][T20548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4213'. [ 433.485109][T20545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4216'. [ 433.539125][T20539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 433.582021][T20551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4218'. [ 433.641512][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 433.771700][T20562] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 433.786029][T20562] bond4: (slave vcan0): Error -95 calling set_mac_address [ 433.829814][T20553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4219'. [ 433.883738][T20570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4225'. [ 433.909212][T20570] netlink: 'syz.1.4225': attribute type 1 has an invalid length. [ 434.392745][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4232'. [ 434.651638][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4238'. [ 434.655351][T20612] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 434.690571][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4239'. [ 434.898721][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 434.937500][T20632] ip6t_srh: unknown srh match flags 536B [ 434.959837][T20632] sctp: [Deprecated]: syz.2.4245 (pid 20632) Use of int in max_burst socket option. [ 434.959837][T20632] Use struct sctp_assoc_value instead [ 435.093334][T20644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.094279][T20645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.284972][T20650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.303664][T20650] macvlan2: entered promiscuous mode [ 435.309639][T20650] macvlan2: entered allmulticast mode [ 435.317067][T20650] bond2: (slave macvlan2): Opening slave failed [ 435.881764][T20664] netlink: 'syz.4.4255': attribute type 1 has an invalid length. [ 436.030890][T20673] netlink: 'syz.1.4258': attribute type 2 has an invalid length. [ 436.063802][T20677] netlink: 'syz.3.4257': attribute type 1 has an invalid length. [ 436.176427][T20677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.233312][T20684] vlan2: entered promiscuous mode [ 436.276782][T20684] bond3: entered promiscuous mode [ 436.282175][T20684] vlan2: entered allmulticast mode [ 436.287561][T20684] bond3: entered allmulticast mode [ 436.375672][T20677] bond3: (slave gretap1): making interface the new active one [ 436.383559][T20677] gretap1: entered promiscuous mode [ 436.397275][T20677] gretap1: entered allmulticast mode [ 436.406024][T20677] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 436.445709][T20690] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 436.522266][T20686] lo speed is unknown, defaulting to 1000 [ 437.340925][T20726] ip6erspan0: entered promiscuous mode [ 437.375774][T20734] netlink: 'syz.1.4275': attribute type 26 has an invalid length. [ 437.562826][T20740] ip6gretap1: entered promiscuous mode [ 437.760444][T20747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 438.221058][T20767] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 438.229404][T20767] __nla_validate_parse: 51 callbacks suppressed [ 438.229421][T20767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4286'. [ 438.251494][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 438.473078][T20781] xt_cgroup: path and classid specified [ 438.660069][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.687111][T20787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.758817][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.804385][T20787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.835091][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4291'. [ 439.006697][T20795] x_tables: ip_tables: osf match: only valid for protocol 6 [ 439.053428][T20802] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 439.097449][T20803] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 439.199992][T20808] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.212006][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4296'. [ 439.260655][T20808] macsec0: entered promiscuous mode [ 439.420724][T20820] netlink: 'syz.1.4300': attribute type 39 has an invalid length. [ 439.666864][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 439.698845][T20832] netlink: 'syz.1.4305': attribute type 6 has an invalid length. [ 439.871976][T20840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4308'. [ 440.355808][T20858] netlink: 'syz.2.4315': attribute type 10 has an invalid length. [ 440.421848][T20858] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 440.992313][T20889] sock: sock_set_timeout: `syz.4.4325' (pid 20889) tries to set negative timeout [ 441.092171][T20899] Cannot find del_set index 4 as target [ 441.216269][T20905] openvswitch: netlink: Missing valid actions attribute. [ 441.259962][T20905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.318533][T20902] netlink: 'syz.3.4326': attribute type 2 has an invalid length. [ 441.684845][T20882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.700476][T20882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.710704][T20882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.724992][T20882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.816219][T20882] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.825149][T20882] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.834372][T20882] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.843560][T20882] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.947164][T20897] lo speed is unknown, defaulting to 1000 [ 442.061434][T20910] xt_policy: neither incoming nor outgoing policy selected [ 442.091933][T20914] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.165825][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 442.689087][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4338'. [ 443.073725][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4344'. [ 443.082163][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4345'. [ 443.132801][T20964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.155658][T20966] x_tables: duplicate underflow at hook 3 [ 443.171691][T20964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.180763][T20968] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20001 [ 443.195273][T20964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.195633][ T10] IPVS: starting estimator thread 0... [ 443.204204][T20964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.232285][T20964] geneve2: entered promiscuous mode [ 443.259039][T20964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.310549][T20964] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.322301][T20964] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.323235][T20979] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4348'. [ 443.341422][T20971] IPVS: using max 24 ests per chain, 57600 per kthread [ 443.350676][T20964] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.450139][T20962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4344'. [ 443.480987][T20970] gretap0: left allmulticast mode [ 443.487847][T20970] gretap0: left promiscuous mode [ 443.493131][T20970] bridge0: port 1(gretap0) entered disabled state [ 443.530256][T20970] bond0: (slave bridge_slave_1): Releasing backup interface [ 443.624349][T20980] team0: Mode changed to "activebackup" [ 443.637663][T20982] vlan0: entered promiscuous mode [ 443.788397][T20975] tipc: Started in network mode [ 443.793540][T20975] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 443.812835][T20975] tipc: Enabled bearer , priority 0 [ 444.129023][T21001] netlink: 'syz.3.4355': attribute type 1 has an invalid length. [ 444.137690][T21001] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4355'. [ 444.926253][T18748] tipc: Node number set to 10136234 [ 445.048247][T21043] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 445.365968][T21063] netlink: 'syz.3.4373': attribute type 1 has an invalid length. [ 445.403013][T21063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4373'. [ 445.412745][T21054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4369'. [ 445.467452][T21050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4369'. [ 445.568276][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 445.600142][T21067] netlink: 'syz.2.4375': attribute type 64 has an invalid length. [ 445.638499][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4375'. [ 445.728286][T21078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4380'. [ 445.817013][T21080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4381'. [ 445.960843][T21092] sctp: [Deprecated]: syz.0.4385 (pid 21092) Use of int in max_burst socket option. [ 445.960843][T21092] Use struct sctp_assoc_value instead [ 446.397370][T21120] netlink: 'syz.2.4393': attribute type 7 has an invalid length. [ 446.420206][T21120] netlink: 'syz.2.4393': attribute type 8 has an invalid length. [ 446.444408][T21120] team0: entered promiscuous mode [ 446.459657][T21120] bond0: entered promiscuous mode [ 446.473333][T21120] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 446.484421][T21120] Cannot create hsr debugfs directory [ 446.497885][T21120] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 446.522987][T21120] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 446.547394][T21120] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 447.462694][T21161] delete_channel: no stack [ 448.212900][T21209] tipc: Enabling of bearer rejected, failed to enable media [ 448.237761][T21211] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 449.357815][T21249] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.368185][T21249] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.377264][T21249] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.405357][T21249] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.501004][T21256] tipc: Enabled bearer , priority 10 [ 449.510675][T21266] __nla_validate_parse: 7 callbacks suppressed [ 449.510694][T21266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4438'. [ 449.550861][T21266] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4438'. [ 449.848044][T21285] syzkaller0: entered promiscuous mode [ 449.853792][T21285] syzkaller0: entered allmulticast mode [ 449.862233][T21287] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 449.953122][T21298] syzkaller0: mtu less than device minimum [ 449.960999][T21295] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 450.137642][T21303] ip6t_srh: unknown srh invflags 5F00 [ 450.207379][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4449'. [ 450.377367][T21316] netlink: 'syz.4.4451': attribute type 1 has an invalid length. [ 450.403695][T21316] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4451'. [ 450.552974][T21336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4453'. [ 450.611136][T21337] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 450.736103][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4458'. [ 450.748153][T21344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4458'. [ 450.767465][T21344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4458'. [ 450.777418][T21344] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4458'. [ 450.786836][T21344] netlink: 'syz.2.4458': attribute type 3 has an invalid length. [ 450.794795][T21344] netlink: 'syz.2.4458': attribute type 2 has an invalid length. [ 450.814226][T21344] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4458'. [ 450.922728][T21353] netlink: 'syz.3.4461': attribute type 10 has an invalid length. [ 452.507168][T21353] team0: Device ipvlan1 failed to register rx_handler [ 452.744901][T21368] 8021q: VLANs not supported on ip6_vti0 [ 452.797801][T21368] dvmrp0: entered allmulticast mode [ 453.199472][T21382] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 453.273225][T21382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 453.322007][T21382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 453.991246][T21431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.002096][T21438] netlink: 'syz.0.4480': attribute type 29 has an invalid length. [ 454.015175][T21431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.033210][T21431] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 454.051047][T21431] bond0 (unregistering): Released all slaves [ 454.534268][T21469] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 454.644856][T21479] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.806233][T21476] netlink: 'syz.1.4494': attribute type 1 has an invalid length. [ 454.826515][T21476] __nla_validate_parse: 3 callbacks suppressed [ 454.826536][T21476] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4494'. [ 454.876425][T21476] netlink: 'syz.1.4494': attribute type 1 has an invalid length. [ 454.919281][T21476] netlink: 'syz.1.4494': attribute type 2 has an invalid length. [ 454.928139][T21476] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4494'. [ 455.183818][T21513] netlink: 'syz.0.4502': attribute type 21 has an invalid length. [ 455.258339][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4504'. [ 455.546701][T21531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4508'. [ 455.671037][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4509'. [ 455.722134][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4509'. [ 455.910600][T21551] netlink: 'syz.3.4514': attribute type 1 has an invalid length. [ 456.002415][T21555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4512'. [ 456.013066][T21551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4514'. [ 456.104500][T21552] bond4: (slave gretap2): making interface the new active one [ 456.123907][T21552] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 456.176597][T21551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.433460][T21572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4519'. [ 456.648027][T21584] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 457.184097][T21603] openvswitch: netlink: IP tunnel dst address not specified [ 457.542823][T21614] batadv1: entered allmulticast mode [ 457.545560][T21615] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 457.556919][T21615] netlink: 'syz.3.4531': attribute type 2 has an invalid length. [ 457.630926][T21619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4534'. [ 457.771311][T21623] ip6t_rpfilter: unknown options [ 457.807418][T21623] tipc: Enabled bearer , priority 10 [ 458.396372][T21641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 458.964675][T21664] netlink: 'syz.0.4548': attribute type 62 has an invalid length. [ 459.023094][T21670] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 459.582878][T21693] sctp: [Deprecated]: syz.0.4557 (pid 21693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.582878][T21693] Use struct sctp_sack_info instead [ 459.770004][T21700] syzkaller1: entered promiscuous mode [ 459.784136][T21700] syzkaller1: entered allmulticast mode [ 460.134130][T21708] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 460.513709][T21735] xt_NFQUEUE: number of total queues is 0 [ 460.543865][T21735] __nla_validate_parse: 3 callbacks suppressed [ 460.543885][T21735] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4567'. [ 460.618610][T21738] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 460.628063][T21738] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 460.764744][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 461.670823][T21762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4576'. [ 461.691502][T21762] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 461.707997][T21762] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 461.730701][T21762] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 461.749940][T21762] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 461.980231][T21775] veth0: entered promiscuous mode [ 462.042873][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4579'. [ 462.194702][T21775] veth0 (unregistering): left promiscuous mode [ 462.295133][T21781] batman_adv: batadv0: Removing interface: team0 [ 462.320733][T21781] bridge_slave_0: left allmulticast mode [ 462.344576][T21781] bridge_slave_0: left promiscuous mode [ 462.355128][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4586'. [ 462.364242][T21548] Set syz1 is full, maxelem 65536 reached [ 462.375308][T21781] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.393246][T21781] bridge_slave_1: left allmulticast mode [ 462.402017][T21781] bridge_slave_1: left promiscuous mode [ 462.414664][T21781] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.434544][T21781] bond0: (slave bond_slave_0): Releasing backup interface [ 462.456322][T21781] bond0: (slave bond_slave_1): Releasing backup interface [ 462.468234][T21781] team0: Port device team_slave_0 removed [ 462.485841][T21781] team0: Port device team_slave_1 removed [ 462.494962][T21781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.513682][T21781] bond0: (slave wlan1): Releasing backup interface [ 462.530057][T21781] bond3: (slave gretap1): Releasing active interface [ 462.544021][T21781] gretap1: left promiscuous mode [ 462.549682][T21781] gretap1: left allmulticast mode [ 462.579556][T21781] bond4: (slave gretap2): Releasing active interface [ 462.597024][T21793] (unnamed net_device) (uninitialized): option mode: invalid value (36) [ 462.799289][T21810] sctp: [Deprecated]: syz.0.4591 (pid 21810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.799289][T21810] Use struct sctp_sack_info instead [ 462.832006][T21811] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4590'. [ 462.854860][T21810] netlink: 'syz.0.4591': attribute type 2 has an invalid length. [ 462.898611][T21814] bridge_slave_0: entered promiscuous mode [ 462.971754][T21811] tunl0: entered promiscuous mode [ 463.023491][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 463.131395][T21831] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 463.166235][T21833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4598'. [ 463.186360][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4598'. [ 463.393073][T21847] tipc: Enabling of bearer rejected, failed to enable media [ 463.456343][T21847] tipc: Enabling of bearer rejected, failed to enable media [ 463.810629][T21870] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 463.832658][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4608'. [ 463.842314][T21867] netlink: 'syz.2.4608': attribute type 7 has an invalid length. [ 463.850591][T21867] netlink: 'syz.2.4608': attribute type 8 has an invalid length. [ 463.892210][T21867] syz_tun: entered promiscuous mode [ 463.903982][T21874] netlink: 'syz.4.4610': attribute type 10 has an invalid length. [ 463.938831][T21867] syz_tun: left promiscuous mode [ 463.976892][T21874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.995870][T21874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.012710][T21874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.033508][T21874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.057884][T21874] team0: Port device geneve0 added [ 464.553818][T21898] sctp: [Deprecated]: syz.1.4618 (pid 21898) Use of int in max_burst socket option deprecated. [ 464.553818][T21898] Use struct sctp_assoc_value instead [ 465.026465][T21924] tipc: Enabling of bearer rejected, failed to enable media [ 465.157647][T21929] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 465.410088][T21936] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 465.738089][T21968] __nla_validate_parse: 8 callbacks suppressed [ 465.738111][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 465.909859][T21975] bond5: entered promiscuous mode [ 465.915044][T21975] bond5: entered allmulticast mode [ 465.923549][T21975] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.047675][T21985] tipc: Enabling of bearer rejected, failed to enable media [ 466.221901][T21997] netlink: 'syz.4.4647': attribute type 2 has an invalid length. [ 466.246011][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'. [ 466.294579][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4648'. [ 466.317933][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4648'. [ 466.337288][T22003] set match dimension is over the limit! [ 466.994751][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.043460][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.057921][T22036] xt_TCPMSS: Only works on TCP SYN packets [ 467.082142][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.113538][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.132760][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.191928][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.222098][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.229096][T22042] netlink: 'syz.3.4662': attribute type 1 has an invalid length. [ 467.242315][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.249031][T22042] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.4662'. [ 467.255857][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.305693][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.330426][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.348958][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.374789][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.396925][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.416518][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.436296][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.443419][T22047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4664'. [ 467.456554][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4663'. [ 467.458008][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.486712][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.517370][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.557107][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.608352][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.651384][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.681667][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.693562][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.765954][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 467.777422][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.824176][T22028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.844721][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.870538][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.936969][T22069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4671'. [ 467.955006][T22069] vlan2: entered allmulticast mode [ 467.983532][T22075] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4671'. [ 468.003200][ T5856] IPVS: starting estimator thread 0... [ 468.016477][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.057021][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.094606][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.105916][T22078] IPVS: using max 24 ests per chain, 57600 per kthread [ 468.132476][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.163302][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.187506][T22033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.236228][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 468.472043][T22096] netlink: 'syz.4.4682': attribute type 1 has an invalid length. [ 468.576606][T22105] netlink: 'syz.3.4685': attribute type 6 has an invalid length. [ 468.814475][T22119] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 468.912859][T22125] netlink: 'syz.3.4692': attribute type 1 has an invalid length. [ 469.072323][T22136] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 469.231676][T22142] netlink: 'syz.1.4697': attribute type 2 has an invalid length. [ 469.243082][T22142] syzkaller1: entered promiscuous mode [ 469.252876][T22142] syzkaller1: entered allmulticast mode [ 469.456777][T22154] RDS: rds_bind could not find a transport for 7c00::, load rds_tcp or rds_rdma? [ 469.600518][T22163] netlink: 'syz.0.4704': attribute type 1 has an invalid length. [ 470.038235][T22176] syzkaller0: mtu greater than device maximum [ 470.045675][T22181] syzkaller0: mtu greater than device maximum [ 470.100949][T22187] syzkaller1: entered promiscuous mode [ 470.115906][T22187] syzkaller1: entered allmulticast mode [ 470.312270][T22201] dvmrp1: entered allmulticast mode [ 470.362891][T22207] vlan2: entered allmulticast mode [ 470.392975][T22207] team0: entered allmulticast mode [ 470.407548][T22207] team_slave_0: entered allmulticast mode [ 470.414755][T22207] team_slave_1: entered allmulticast mode [ 470.428733][T22207] team0: Device vlan2 is already an upper device of the team interface [ 470.567893][T22220] x_tables: duplicate entry at hook 1 [ 470.752169][T22229] __nla_validate_parse: 11 callbacks suppressed [ 470.752190][T22229] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4723'. [ 470.810992][T22235] xt_HMARK: proto mask must be zero with L3 mode [ 470.837971][T22234] tipc: Trying to set illegal importance in message [ 470.843465][T22235] netlink: 'syz.3.4725': attribute type 1 has an invalid length. [ 470.853444][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4727'. [ 470.853470][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4727'. [ 470.939098][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'. [ 470.969069][ T5847] Bluetooth: hci3: command 0x0405 tx timeout [ 470.993697][T22244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4728'. [ 471.017294][T22240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.026727][T22240] bond6: (slave bond7): making interface the new active one [ 471.035058][T22240] bond6: (slave bond7): Enslaving as an active interface with an up link [ 471.114979][T22250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4731'. [ 471.374033][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 471.457944][T22274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4737'. [ 471.518685][T22281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4738'. [ 471.541024][T22278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4739'. [ 472.070121][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 472.269841][T22336] netlink: 'syz.2.4753': attribute type 10 has an invalid length. [ 472.284175][T22336] team0: Device veth0_vlan failed to register rx_handler [ 473.822633][T22409] netlink: 'syz.3.4763': attribute type 21 has an invalid length. [ 474.096109][T22423] tc_dump_action: action bad kind [ 474.248937][T22435] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 474.908776][T22465] netlink: 'syz.1.4779': attribute type 7 has an invalid length. [ 474.969883][T22476] netlink: 'syz.1.4779': attribute type 7 has an invalid length. [ 475.100785][T22484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.135203][T22486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.276075][T22494] x_tables: duplicate underflow at hook 2 [ 475.416972][T22503] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 475.676711][T22515] netlink: 'syz.2.4793': attribute type 10 has an invalid length. [ 475.698965][T22515] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 475.791671][T22524] netlink: 'syz.4.4797': attribute type 83 has an invalid length. [ 475.944793][T22533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.972245][T22535] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 475.993767][T22535] __nla_validate_parse: 18 callbacks suppressed [ 475.993806][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 476.038288][T22537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4802'. [ 476.044672][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4801'. [ 476.083837][T22538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4802'. [ 476.457683][T22562] netlink: 'syz.1.4809': attribute type 21 has an invalid length. [ 476.515634][T22562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4809'. [ 476.534334][T22566] sctp: [Deprecated]: syz.2.4810 (pid 22566) Use of int in maxseg socket option. [ 476.534334][T22566] Use struct sctp_assoc_value instead [ 476.687465][T22575] erspan0: mtu less than device minimum [ 476.752035][T22579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4814'. [ 476.883320][T22584] lo: entered promiscuous mode [ 476.927073][T22584] tunl0: entered promiscuous mode [ 476.947767][T22584] gre0: entered promiscuous mode [ 476.971912][T22597] openvswitch: netlink: Missing key (keys=40, expected=100) [ 477.017549][T22584] gretap0: entered promiscuous mode [ 477.057043][T22584] erspan0: entered promiscuous mode [ 477.073654][T22584] ip_vti0: entered promiscuous mode [ 477.083772][T22579] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 477.138885][T22603] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 477.173201][T22602] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4819'. [ 477.249559][T22605] syzkaller0: entered promiscuous mode [ 477.255126][T22605] syzkaller0: entered allmulticast mode [ 477.919791][T22647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4831'. [ 477.986814][T22650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4831'. [ 478.008530][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 478.021913][T22652] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4835'. [ 478.075944][T22655] netlink: 'syz.1.4836': attribute type 12 has an invalid length. [ 478.092814][T22653] netlink: 'syz.3.4834': attribute type 1 has an invalid length. [ 478.108418][T22655] netlink: 'syz.1.4836': attribute type 12 has an invalid length. [ 478.117433][T22653] nbd: couldn't find device at index 1048576 [ 478.348619][T22667] tipc: New replicast peer: 0.0.0.0 [ 478.354416][T22667] tipc: Enabled bearer , priority 10 [ 478.405866][T22667] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 478.839598][T22695] netlink: 'syz.1.4849': attribute type 32 has an invalid length. [ 478.942257][T22701] netlink: 'syz.0.4851': attribute type 83 has an invalid length. [ 478.957113][T22701] 8021q: VLANs not supported on ip_vti0 [ 479.705665][T22738] netlink: 'syz.0.4860': attribute type 2 has an invalid length. [ 479.718301][T22739] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 479.916131][T22744] tipc: Enabled bearer , priority 0 [ 479.931702][T22750] : renamed from hsr0 [ 479.966712][T22744] syzkaller0: entered promiscuous mode [ 479.975582][T22744] syzkaller0: entered allmulticast mode [ 480.054615][T22743] tipc: Resetting bearer [ 480.150305][T22743] tipc: Disabling bearer [ 480.242604][T22757] macsec0: entered promiscuous mode [ 480.266059][T22757] bridge0: entered promiscuous mode [ 480.953859][T22796] chnl_net:caif_netlink_parms(): no params data found [ 481.027492][T22802] __nla_validate_parse: 11 callbacks suppressed [ 481.027511][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4885'. [ 481.059239][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4885'. [ 481.087778][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4885'. [ 481.099677][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4885'. [ 481.333705][T22824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4889'. [ 482.447720][T22388] bond1 (unregistering): Released all slaves [ 482.567752][T22388] bond2 (unregistering): Released all slaves [ 482.582898][T22388] bond3 (unregistering): Released all slaves [ 482.711453][T22388] bond0 (unregistering): Released all slaves [ 482.887018][T22388] : left promiscuous mode [ 482.902443][T22846] netlink: 'syz.2.4894': attribute type 7 has an invalid length. [ 482.948758][T22850] netlink: 'syz.4.4896': attribute type 4 has an invalid length. [ 483.019132][T22857] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4898'. [ 483.053812][T22388] tipc: Left network mode [ 483.082810][T22388] IPVS: stopping backup sync thread 9364 ... [ 483.288179][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 484.352546][T22906] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4913'. [ 484.432071][T22388] hsr_slave_0: left promiscuous mode [ 484.809892][T22934] xt_hashlimit: overflow, rate too high: 0 [ 484.877134][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4918'. [ 485.653992][T22938] vlan2: entered allmulticast mode [ 485.683191][T22938] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 485.741823][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.762281][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.973866][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4925'. [ 485.989078][T22388] IPVS: stop unused estimator thread 0... [ 486.067891][T22967] __nla_validate_parse: 2 callbacks suppressed [ 486.067910][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4926'. [ 486.229608][T22973] lo speed is unknown, defaulting to 1000 [ 486.247385][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4930'. [ 486.663448][T22995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.916031][T23009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4941'. [ 486.994401][T23009] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 487.021780][T23009] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 487.171596][T23018] xt_hashlimit: overflow, rate too high: 0 [ 487.342340][T23021] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4945'. [ 487.375834][T23021] 0ªX¹¦D: entered promiscuous mode [ 487.657468][T23024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4946'. [ 488.007538][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4947'. [ 488.703373][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 488.766938][T23057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4953'. [ 489.149488][T23077] netlink: 'syz.3.4959': attribute type 4 has an invalid length. [ 489.169343][T23077] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4959'. [ 489.229274][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'. [ 489.320257][T23090] netlink: 'syz.0.4960': attribute type 39 has an invalid length. [ 489.539283][T23098] netlink: 'syz.1.4963': attribute type 18 has an invalid length. [ 489.624457][T23101] netlink: 'syz.2.4964': attribute type 1 has an invalid length. [ 489.908139][T23115] tipc: Bearer : already 2 bearers with priority 10 [ 489.916025][T23115] tipc: Bearer : trying with adjusted priority [ 489.923110][T23115] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 490.023442][T23115] lo: left promiscuous mode [ 490.031105][T23115] tunl0: left promiscuous mode [ 490.040520][T23115] gre0: left promiscuous mode [ 490.045793][T23115] gretap0: left promiscuous mode [ 490.053499][T23115] erspan0: left promiscuous mode [ 490.066172][T23115] ip_vti0: left promiscuous mode [ 490.086631][T23115] sit0: left promiscuous mode [ 490.126294][T23115] bridge_slave_0: left promiscuous mode [ 490.137575][T23115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.145704][T23134] netlink: 'syz.1.4974': attribute type 1 has an invalid length. [ 490.279757][T23137] netlink: 'syz.0.4976': attribute type 20 has an invalid length. [ 490.374415][T23144] netlink: 'syz.1.4978': attribute type 1 has an invalid length. [ 490.377007][T23141] xt_connbytes: Forcing CT accounting to be enabled [ 490.391827][T23142] xt_hashlimit: size too large, truncated to 1048576 [ 490.398130][T23141] --map-set only usable from mangle table [ 490.405627][T23144] netlink: 'syz.1.4978': attribute type 8 has an invalid length. [ 490.428588][T23137] bridge0: port 3(30ªX¹¦D) entered blocking state [ 490.436144][T23137] bridge0: port 3(30ªX¹¦D) entered disabled state [ 490.813828][T23164] macvlan2: entered promiscuous mode [ 490.819601][T23164] macvlan2: entered allmulticast mode [ 491.143742][T23188] tipc: Bearer : already 2 bearers with priority 10 [ 491.156515][T23189] openvswitch: netlink: IP tunnel TTL not specified. [ 491.160227][T23188] tipc: Bearer : trying with adjusted priority [ 491.173381][T23188] tipc: Enabling of bearer rejected, failed to enable media [ 491.184563][T23189] __nla_validate_parse: 11 callbacks suppressed [ 491.184586][T23189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4990'. [ 491.330556][ T30] audit: type=1800 audit(1752987882.929:2): pid=23198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4995" name="memory.events" dev="tmpfs" ino=2142 res=0 errno=0 [ 491.433859][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 491.535038][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4999'. [ 491.670306][T23213] netlink: 'syz.3.5000': attribute type 75 has an invalid length. [ 492.011114][T23236] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5005'. [ 492.215730][T23235] infiniband syz2: set down [ 492.220419][T23235] infiniband syz2: added bond_slave_0 [ 492.254807][T23235] RDS/IB: syz2: added [ 492.259059][T23235] smc: adding ib device syz2 with port count 1 [ 492.265255][T23235] smc: ib device syz2 port 1 has pnetid [ 492.917645][T23262] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5015'. [ 493.279854][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5017'. [ 493.795197][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'. [ 494.023562][T23291] macvtap0: entered promiscuous mode [ 494.042539][T23291] vlan0: entered promiscuous mode [ 494.053106][T23291] macvtap0: entered allmulticast mode [ 494.085707][T23291] vlan0: entered allmulticast mode [ 494.093581][T23291] veth0_vlan: entered allmulticast mode [ 494.129085][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5027'. [ 494.138275][T23308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5027'. [ 494.159490][T23307] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5026'. [ 494.344815][T23320] netlink: 'syz.2.5031': attribute type 6 has an invalid length. [ 495.394720][T23358] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 495.602220][T23364] xt_l2tp: invalid flags combination: 4 [ 495.710117][T23368] netlink: 'syz.0.5047': attribute type 6 has an invalid length. [ 495.719177][T23369] netlink: 'syz.0.5047': attribute type 2 has an invalid length. [ 495.808872][T23371] netlink: 'syz.0.5049': attribute type 4 has an invalid length. [ 495.835512][T23371] netlink: 'syz.0.5049': attribute type 4 has an invalid length. [ 496.004709][T23375] tipc: Enabled bearer , priority 0 [ 496.023190][T23375] D: renamed from syzkaller0 [ 496.046217][T23375] tipc: Disabling bearer [ 496.546591][T23412] netlink: 'syz.3.5063': attribute type 10 has an invalid length. [ 496.741833][T23424] __nla_validate_parse: 8 callbacks suppressed [ 496.741853][T23424] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5067'. [ 496.981367][T23435] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.5069'. [ 496.996757][T23435] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 497.096440][T23432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5069'. [ 497.194050][T23439] lo speed is unknown, defaulting to 1000 [ 497.228927][T23436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 497.283865][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 497.353755][T23436] xfrm2: entered promiscuous mode [ 497.394098][T23436] xfrm2: entered allmulticast mode [ 497.445780][ T5847] Bluetooth: hci0: command tx timeout [ 497.624691][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 497.624691][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 497.998588][T23473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5077'. [ 498.252639][T23483] netlink: 'syz.3.5083': attribute type 3 has an invalid length. [ 498.275153][T23483] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5083'. [ 498.325320][T23487] tipc: Enabling of bearer rejected, failed to enable media [ 498.369762][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5085'. [ 498.923113][T23504] netlink: 'syz.3.5091': attribute type 3 has an invalid length. [ 498.973490][T23504] tipc: Enabling of bearer rejected, failed to enable media [ 498.993312][T23504] erspan0: entered promiscuous mode [ 499.005556][T23504] erspan0: left promiscuous mode [ 499.706648][T23529] bond6: (slave bond7): Releasing backup interface [ 499.775867][T23531] team0: Mode changed to "activebackup" [ 499.782139][T23529] team0: Unable to change to the same mode the team is in [ 499.856530][T23531] vlan0: entered promiscuous mode [ 499.904855][T23531] tipc: Enabled bearer , priority 0 [ 499.952104][T23529] tipc: Enabling of bearer rejected, already enabled [ 500.165788][T23550] netlink: 'syz.1.5106': attribute type 21 has an invalid length. [ 500.252170][T23550] netlink: 'syz.1.5106': attribute type 1 has an invalid length. [ 500.472539][T23566] xt_l2tp: missing protocol rule (udp|l2tpip) [ 500.492252][T23566] netlink: 'syz.1.5111': attribute type 23 has an invalid length. [ 500.760943][T23580] sctp: [Deprecated]: syz.3.5116 (pid 23580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.760943][T23580] Use struct sctp_sack_info instead [ 501.015535][ T5856] tipc: Node number set to 961274963 [ 501.105935][T23599] macvtap0: entered promiscuous mode [ 501.111465][T23599] macvtap0: entered allmulticast mode [ 501.117001][T23599] vlan0: entered allmulticast mode [ 501.353999][T23618] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 501.373448][T23618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.626863][T23613] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 501.627186][T23636] IPVS: length: 157 != 24 [ 501.642826][T23613] bond0 (unregistering): Released all slaves [ 501.679805][T23621] wg1: entered promiscuous mode [ 501.715635][T23628] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 501.722953][T23628] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 501.854701][T23649] netlink: 'syz.3.5138': attribute type 10 has an invalid length. [ 501.876478][T23651] netlink: 'syz.1.5136': attribute type 2 has an invalid length. [ 501.894180][T23649] __nla_validate_parse: 10 callbacks suppressed [ 501.894203][T23649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5138'. [ 501.914199][T23651] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5136'. [ 501.944355][T23649] batadv0: entered promiscuous mode [ 501.975528][T23649] batadv0: entered allmulticast mode [ 502.003085][T23649] bridge0: port 1(batadv0) entered blocking state [ 502.029855][T23649] bridge0: port 1(batadv0) entered disabled state [ 502.066567][T23660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5140'. [ 502.188522][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 502.198427][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 502.298994][T23664] macsec1: entered promiscuous mode [ 502.314497][T23664] bridge0: entered promiscuous mode [ 502.454901][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5146'. [ 503.073115][T23718] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 503.191559][T23725] xt_HMARK: spi-set and port-set can't be combined [ 503.310136][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5163'. [ 503.425366][T23739] netlink: 'syz.4.5165': attribute type 4 has an invalid length. [ 503.547473][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5168'. [ 503.730602][T23758] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5171'. [ 503.748250][T23758] netlink: 'syz.3.5171': attribute type 10 has an invalid length. [ 503.762538][T23758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5171'. [ 503.773452][T23758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.783183][T23758] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.792469][T23758] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.801472][T23758] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.824324][T23758] team0: Port device geneve0 added [ 504.148317][T23780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.267370][T23789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5180'. [ 504.350470][T23796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5183'. [ 504.400451][T23798] dvmrp0: entered allmulticast mode [ 504.413193][T23792] dvmrp0: left allmulticast mode [ 504.420189][T23792] dvmrp1: left allmulticast mode [ 504.530050][T23804] tipc: Enabled bearer , priority 0 [ 504.544849][T23808] xt_limit: Overflow, try lower: 0/0 [ 504.551463][T23804] syzkaller0: entered promiscuous mode [ 504.562074][T23804] syzkaller0: entered allmulticast mode [ 504.656553][ T30] audit: type=1800 audit(1752987896.259:3): pid=23812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5184" name="memory.events" dev="tmpfs" ino=1902 res=0 errno=0 [ 504.686748][T23804] tipc: Resetting bearer [ 504.714973][T23804] macsec0: entered promiscuous mode [ 504.720692][T23804] team0: entered promiscuous mode [ 504.725870][T23804] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 504.735190][T23804] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23804, name: syz.0.5184 [ 504.744398][T23804] preempt_count: 201, expected: 0 [ 504.749514][T23804] RCU nest depth: 0, expected: 0 [ 504.754505][T23804] 3 locks held by syz.0.5184/23804: [ 504.759809][T23804] #0: ffffffff8fa213b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 504.769488][T23804] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 504.778680][T23804] #2: ffff8880341b2368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 504.789485][T23804] Preemption disabled at: [ 504.789502][T23804] [] dev_uc_add+0x56/0x120 [ 504.799981][T23804] CPU: 1 UID: 0 PID: 23804 Comm: syz.0.5184 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 504.800012][T23804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.800031][T23804] Call Trace: [ 504.800041][T23804] [ 504.800051][T23804] dump_stack_lvl+0x189/0x250 [ 504.800087][T23804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.800115][T23804] ? __pfx__printk+0x10/0x10 [ 504.800150][T23804] ? print_lock_name+0xde/0x100 [ 504.800178][T23804] ? dev_uc_add+0x56/0x120 [ 504.800216][T23804] __might_resched+0x495/0x610 [ 504.800250][T23804] ? dev_uc_add+0x56/0x120 [ 504.800283][T23804] ? __pfx___might_resched+0x10/0x10 [ 504.800311][T23804] ? is_printk_cpu_sync_owner+0x32/0x40 [ 504.800364][T23804] __mutex_lock+0x106/0xe80 [ 504.800404][T23804] ? team_change_rx_flags+0x38/0x220 [ 504.800437][T23804] ? __pfx___mutex_lock+0x10/0x10 [ 504.800460][T23804] ? netdev_info+0x10a/0x160 [ 504.800493][T23804] ? __sock_sendmsg+0x21c/0x270 [ 504.800523][T23804] ? __pfx_netdev_info+0x10/0x10 [ 504.800568][T23804] team_change_rx_flags+0x38/0x220 [ 504.800604][T23804] ? __pfx_team_change_rx_flags+0x10/0x10 [ 504.800633][T23804] __dev_set_promiscuity+0x531/0x740 [ 504.800667][T23804] ? __pfx_netdev_info+0x10/0x10 [ 504.800708][T23804] netif_set_promiscuity+0x50/0xe0 [ 504.800743][T23804] dev_set_promiscuity+0x126/0x260 [ 504.800779][T23804] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 504.800808][T23804] __dev_set_promiscuity+0x531/0x740 [ 504.800844][T23804] ? __hw_addr_add_ex+0x3c5/0x770 [ 504.800880][T23804] __dev_set_rx_mode+0x17c/0x260 [ 504.800916][T23804] dev_uc_add+0xc8/0x120 [ 504.800974][T23804] macsec_dev_open+0xd9/0x530 [ 504.801003][T23804] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 504.801029][T23804] ? __pfx_macsec_dev_open+0x10/0x10 [ 504.801058][T23804] ? ib_device_get_by_netdev+0x84/0x4d0 [ 504.801081][T23804] ? hsr_netdev_notify+0x29e/0xcf0 [ 504.801111][T23804] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 504.801141][T23804] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 504.801178][T23804] ? ip6_route_dev_notify+0x9a/0x5b0 [ 504.801210][T23804] ? notifier_call_chain+0x3bf/0x3e0 [ 504.801247][T23804] __dev_open+0x46d/0x880 [ 504.801280][T23804] ? __pfx___dev_open+0x10/0x10 [ 504.801322][T23804] __dev_change_flags+0x1ea/0x6d0 [ 504.801356][T23804] ? validate_linkmsg+0x765/0x950 [ 504.801382][T23804] ? __pfx___dev_change_flags+0x10/0x10 [ 504.801430][T23804] rtnl_newlink_create+0x555/0xb00 [ 504.801478][T23804] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 504.801509][T23804] ? rtnl_newlink+0x8db/0x1c70 [ 504.801541][T23804] ? __pfx___mutex_lock+0x10/0x10 [ 504.801578][T23804] ? ns_capable+0x8a/0xf0 [ 504.801609][T23804] rtnl_newlink+0x16d6/0x1c70 [ 504.801658][T23804] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.801697][T23804] ? __lock_acquire+0xab9/0xd20 [ 504.801736][T23804] ? __lock_acquire+0xab9/0xd20 [ 504.801784][T23804] ? is_bpf_text_address+0x26/0x2b0 [ 504.801815][T23804] ? is_bpf_text_address+0x292/0x2b0 [ 504.801839][T23804] ? is_bpf_text_address+0x26/0x2b0 [ 504.801866][T23804] ? kernel_text_address+0xa5/0xe0 [ 504.801903][T23804] ? __lock_acquire+0xab9/0xd20 [ 504.801965][T23804] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.802000][T23804] rtnetlink_rcv_msg+0x7cf/0xb70 [ 504.802033][T23804] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 504.802062][T23804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.802113][T23804] netlink_rcv_skb+0x208/0x470 [ 504.802145][T23804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.802177][T23804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.802225][T23804] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.802255][T23804] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.802294][T23804] netlink_unicast+0x75c/0x8e0 [ 504.802337][T23804] netlink_sendmsg+0x805/0xb30 [ 504.802381][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.802417][T23804] ? aa_sock_msg_perm+0x94/0x160 [ 504.802445][T23804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.802468][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.802501][T23804] __sock_sendmsg+0x21c/0x270 [ 504.802530][T23804] ____sys_sendmsg+0x505/0x830 [ 504.802573][T23804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.802619][T23804] ? import_iovec+0x74/0xa0 [ 504.802655][T23804] ___sys_sendmsg+0x21f/0x2a0 [ 504.802691][T23804] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.802772][T23804] ? __fget_files+0x2a/0x420 [ 504.802791][T23804] ? __fget_files+0x3a0/0x420 [ 504.802826][T23804] __x64_sys_sendmsg+0x19b/0x260 [ 504.802865][T23804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.802913][T23804] ? rcu_is_watching+0x15/0xb0 [ 504.802956][T23804] ? do_syscall_64+0xbe/0x3b0 [ 504.802988][T23804] do_syscall_64+0xfa/0x3b0 [ 504.803011][T23804] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.803034][T23804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.803057][T23804] ? clear_bhb_loop+0x60/0xb0 [ 504.803084][T23804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.803113][T23804] RIP: 0033:0x7fea7a58e9a9 [ 504.803135][T23804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.803155][T23804] RSP: 002b:00007fea7b352038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.803179][T23804] RAX: ffffffffffffffda RBX: 00007fea7a7b5fa0 RCX: 00007fea7a58e9a9 [ 504.803195][T23804] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 000000000000000c [ 504.803209][T23804] RBP: 00007fea7a610d69 R08: 0000000000000000 R09: 0000000000000000 [ 504.803223][T23804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.803237][T23804] R13: 0000000000000000 R14: 00007fea7a7b5fa0 R15: 00007fff49196c78 [ 504.803274][T23804] [ 504.803289][T23804] [ 504.817480][T23820] netlink: zone id is out of range [ 504.825445][T23804] ============================= [ 504.825458][T23804] [ BUG: Invalid wait context ] [ 504.825470][T23804] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 Tainted: G W [ 504.825489][T23804] ----------------------------- [ 504.825497][T23804] syz.0.5184/23804 is trying to lock: [ 504.825509][T23804] ffff888029dace00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 505.388878][T23804] other info that might help us debug this: [ 505.394769][T23804] context-{5:5} [ 505.398226][T23804] 3 locks held by syz.0.5184/23804: [ 505.403425][T23804] #0: ffffffff8fa213b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 505.412948][T23804] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 505.422036][T23804] #2: ffff8880341b2368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 505.432731][T23804] stack backtrace: [ 505.436455][T23804] CPU: 1 UID: 0 PID: 23804 Comm: syz.0.5184 Tainted: G W 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 505.436479][T23804] Tainted: [W]=WARN [ 505.436484][T23804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.436494][T23804] Call Trace: [ 505.436502][T23804] [ 505.436510][T23804] dump_stack_lvl+0x189/0x250 [ 505.436544][T23804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.436571][T23804] ? __pfx__printk+0x10/0x10 [ 505.436605][T23804] ? print_lock_name+0xde/0x100 [ 505.436673][T23804] __lock_acquire+0xbcb/0xd20 [ 505.436692][T23804] ? team_change_rx_flags+0x38/0x220 [ 505.436712][T23804] lock_acquire+0x120/0x360 [ 505.436727][T23804] ? team_change_rx_flags+0x38/0x220 [ 505.436753][T23804] __mutex_lock+0x182/0xe80 [ 505.436770][T23804] ? team_change_rx_flags+0x38/0x220 [ 505.436794][T23804] ? team_change_rx_flags+0x38/0x220 [ 505.436815][T23804] ? __pfx___mutex_lock+0x10/0x10 [ 505.436831][T23804] ? netdev_info+0x10a/0x160 [ 505.436854][T23804] ? __sock_sendmsg+0x21c/0x270 [ 505.436875][T23804] ? __pfx_netdev_info+0x10/0x10 [ 505.436903][T23804] team_change_rx_flags+0x38/0x220 [ 505.436925][T23804] ? __pfx_team_change_rx_flags+0x10/0x10 [ 505.436945][T23804] __dev_set_promiscuity+0x531/0x740 [ 505.436969][T23804] ? __pfx_netdev_info+0x10/0x10 [ 505.436994][T23804] netif_set_promiscuity+0x50/0xe0 [ 505.437017][T23804] dev_set_promiscuity+0x126/0x260 [ 505.437041][T23804] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 505.437062][T23804] __dev_set_promiscuity+0x531/0x740 [ 505.437085][T23804] ? __hw_addr_add_ex+0x3c5/0x770 [ 505.437109][T23804] __dev_set_rx_mode+0x17c/0x260 [ 505.437133][T23804] dev_uc_add+0xc8/0x120 [ 505.437157][T23804] macsec_dev_open+0xd9/0x530 [ 505.437177][T23804] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 505.437195][T23804] ? __pfx_macsec_dev_open+0x10/0x10 [ 505.437215][T23804] ? ib_device_get_by_netdev+0x84/0x4d0 [ 505.437232][T23804] ? hsr_netdev_notify+0x29e/0xcf0 [ 505.437253][T23804] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 505.437271][T23804] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 505.437294][T23804] ? ip6_route_dev_notify+0x9a/0x5b0 [ 505.437315][T23804] ? notifier_call_chain+0x3bf/0x3e0 [ 505.437337][T23804] __dev_open+0x46d/0x880 [ 505.437359][T23804] ? __pfx___dev_open+0x10/0x10 [ 505.437382][T23804] __dev_change_flags+0x1ea/0x6d0 [ 505.437405][T23804] ? validate_linkmsg+0x765/0x950 [ 505.437422][T23804] ? __pfx___dev_change_flags+0x10/0x10 [ 505.437449][T23804] rtnl_newlink_create+0x555/0xb00 [ 505.437495][T23804] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 505.437517][T23804] ? rtnl_newlink+0x8db/0x1c70 [ 505.437538][T23804] ? __pfx___mutex_lock+0x10/0x10 [ 505.437559][T23804] ? ns_capable+0x8a/0xf0 [ 505.437577][T23804] rtnl_newlink+0x16d6/0x1c70 [ 505.437604][T23804] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.437637][T23804] ? __lock_acquire+0xab9/0xd20 [ 505.437666][T23804] ? __lock_acquire+0xab9/0xd20 [ 505.437700][T23804] ? is_bpf_text_address+0x26/0x2b0 [ 505.437728][T23804] ? is_bpf_text_address+0x292/0x2b0 [ 505.437750][T23804] ? is_bpf_text_address+0x26/0x2b0 [ 505.437768][T23804] ? kernel_text_address+0xa5/0xe0 [ 505.437787][T23804] ? __lock_acquire+0xab9/0xd20 [ 505.437812][T23804] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.437832][T23804] rtnetlink_rcv_msg+0x7cf/0xb70 [ 505.437854][T23804] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 505.437875][T23804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.437914][T23804] netlink_rcv_skb+0x208/0x470 [ 505.437936][T23804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.437956][T23804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.437981][T23804] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.438001][T23804] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.438023][T23804] netlink_unicast+0x75c/0x8e0 [ 505.438046][T23804] netlink_sendmsg+0x805/0xb30 [ 505.438071][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.438093][T23804] ? aa_sock_msg_perm+0x94/0x160 [ 505.438109][T23804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.438125][T23804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.438147][T23804] __sock_sendmsg+0x21c/0x270 [ 505.438164][T23804] ____sys_sendmsg+0x505/0x830 [ 505.438189][T23804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.438216][T23804] ? import_iovec+0x74/0xa0 [ 505.438238][T23804] ___sys_sendmsg+0x21f/0x2a0 [ 505.438261][T23804] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.438298][T23804] ? __fget_files+0x2a/0x420 [ 505.438311][T23804] ? __fget_files+0x3a0/0x420 [ 505.438328][T23804] __x64_sys_sendmsg+0x19b/0x260 [ 505.438352][T23804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.438379][T23804] ? rcu_is_watching+0x15/0xb0 [ 505.438398][T23804] ? do_syscall_64+0xbe/0x3b0 [ 505.438417][T23804] do_syscall_64+0xfa/0x3b0 [ 505.438432][T23804] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.438447][T23804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.438462][T23804] ? clear_bhb_loop+0x60/0xb0 [ 505.438479][T23804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.438493][T23804] RIP: 0033:0x7fea7a58e9a9 [ 505.438507][T23804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.438520][T23804] RSP: 002b:00007fea7b352038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.438536][T23804] RAX: ffffffffffffffda RBX: 00007fea7a7b5fa0 RCX: 00007fea7a58e9a9 [ 505.438547][T23804] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 000000000000000c [ 505.438556][T23804] RBP: 00007fea7a610d69 R08: 0000000000000000 R09: 0000000000000000 [ 505.438565][T23804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.438574][T23804] R13: 0000000000000000 R14: 00007fea7a7b5fa0 R15: 00007fff49196c78 [ 505.438591][T23804] [ 505.982870][T23804] team_slave_0: entered promiscuous mode [ 505.988683][T23804] team_slave_1: entered promiscuous mode [ 506.034294][T23802] tipc: Resetting bearer [ 506.076190][T23802] tipc: Disabling bearer