last executing test programs: 7.299450988s ago: executing program 4 (id=6168): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x401c0}, 0x24004050) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c00}, 0x8004) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5d}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x44}}, 0x20000881) read$alg(r6, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r6, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 6.362412839s ago: executing program 4 (id=6178): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'ip6erspan0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x3a, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) 6.162227002s ago: executing program 4 (id=6181): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) 6.004966298s ago: executing program 4 (id=6182): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0x7, 0x0, r0, 0x7ff, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0x7, 0x0, r0, 0x7ff, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x983}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa2e}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0xf}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4eca}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ac}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4eca}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ac}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000040) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000840)=""/181, &(0x7f0000000900)=0xb5) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000940)) sendmsg$xdp(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)="7f19afe9d25a26d393cffe7ab7ad333f0e53f86f374258d7bc88054760f3b44f3b1faa38c5b6c83ad11bf104cbf9177c2bd4dbd8c66b630c686ac54fcfa448", 0x3f}, {&(0x7f00000009c0)="f80bfc5ab3aa479964d52690bcb0b4333d3d93c85010dc6b21496ee0f63b479a0dbc621b17e8c67038c1506dc2344cf1ac49edfe9aaebbfcca7cb92addff0a5a2d94867ef999a6ecdaae78cd9cce1f94ae255f75ebc73d336c41e4bb747e924b314d7efa093142776b904f0b6eca030586fae738760b", 0x76}, {&(0x7f0000000a40)='1', 0x1}, {&(0x7f0000000a80)="e1fc609a4506c640fa2e32e89a430610d3a5a604680d3441ddb03b395442a67f8757a8f0470a986a5150ae5fb6eaded3c3b66adbeda7927608a503ee7d80271dba83bff5d74c513516ce81eb257f6296225f3493bebb4243be03bb3b5b684f92cc61e9186e4ecc6efa6fadcf38ae0a66ca5fc4bfbf44af9bbd3f30c7901b23ca7ab43a358a37d807919ebbffc4065f113ff18cbab4b35a5f0ae1e6f5f4903182bd43f944d8b2f754586680677583dc45c3293f53c9490638383e76c8ee1f58817b60babf525b49ee65a58819546aaabc4cea5bb2b8923c9a395c", 0xda}, {&(0x7f0000000b80)="02357b3b6a2b2ae1a8e09ae18119db84453b01d127162d35dcada351533068b2a6170e5a3e6233db1683771ee5b4e9389882f94965a804b29db50842ea1de6607f09822647c59dadce23d8df2ae1a97f478399a361ed3aad069a0d87e335cb91566ecf5f11eddb6a836087ba7d11bdce0680eb9209d971676fecdd5d6fa831f3ebbadb1755a2e80a91dcd9b7188b09871a177a87e875a29b16d1ab0b1e839098dd63e7719aa0ce49f8a7a02880", 0xad}], 0x5, 0x0, 0x0, 0x80}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r2) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r2) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) connect$802154_dgram(r3, &(0x7f0000000ec0)={0x24, @long={0x3, 0x2}}, 0x14) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x1a4, r8, 0x10, 0x0, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048004}, 0x2000c000) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000012c0)={0x1, 0x1, 0x1000, 0x37, &(0x7f0000001180)="f8a1aef7f00da709b0bdb79c55e077bb78471cc3bf89f49323c24e4882dabb419c2b14eb8c6368444ffbf99bc766c1e7267c1b918e0547", 0xce, 0x0, &(0x7f00000011c0)="d0efb75fe89c4cc1220aa5f338652ba8297555a9424f8d6493309a26850e32c4bf7d811e5129e17501d87e2fd79380035b1e6349e54e34e8a792fcc6c120e741931efd4f7d3f854fc5075f16adada46b8448af8d7bd9c6ea37a4828dcd34e80d93387fa44185fa5d14ac190bfbb624aa731f21d57f066a62e1ba4daf784d3300091a194f0af1ce5ace8186537de52296f4d5e5df571fddcb31592994032ec67b8e290ae3d1f12c93fa222fd313910554f7a0ad53211975d07379830c4187b8ac99ef2fe0227ca93684ddffeb5245"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000013c0)={'ipvlan1\x00', &(0x7f0000001340)=@ethtool_coalesce={0xe, 0x4, 0x7, 0x0, 0x70000000, 0x4, 0xf855, 0xa60, 0x1ff, 0x6, 0xffff, 0x0, 0xff, 0x9, 0x80000001, 0x0, 0x0, 0x7fffffff, 0x1c000000, 0x1, 0x72e, 0x6, 0xf4}}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000001400)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001a40)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000014c0)={0x504, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x549}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.-\xb2.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'secondname\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&!:\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'firstname\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "05b4f5ffc9949a14b850e568fd8424682653041b187cf1ed159c34cb6b5747f5751e833159dc858c763a5260dc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x398, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "2756ab821bc07d3e272cc2ddaaa38359110378079c24ca4d0619725fdfd420b90b594d76d8a2b2dded9e4929d21b534cba391e5f6d5a6fd32dff4ab79d8bac044d35b566d528b2fd3dc5cda8285333300461ae710e825d04f082e3eb1e1165afd0c20d359034b74f0c48007b7749e4d8b033ec3acbce37adb552121700d53707c68261e6835fb34cd3019255ff4d72884d17e32328a5a45bf352216afab98bc10860cc33745f72045497e5a39eca8647aac436fb5fc79d6a65010eee0b3785649aaef63ed81b6b7536b4042e275b896b78ef77c3a7322a47b5a26b4b3d3f16d925b378371956"}, @ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "39f57e7b519c1aeda8e786f3c0980fb2b6d5f95effea796965bab131cbc225a2447ae213aacb1be26a4a2fdbf3bd23b6231b9db6a36d150082d156dcba5c7e45b8516d70c74fca0c14fc35120d5112c046dd0560ec477a29954b7edd35fd643bbda5e7d156a6bc72b54cd450960f8b9f3955d13c85dc29c0aa56347fd7a10e96f2624b4b83c38e6e60b574bcaa063afa521acd991910b5f464b3e49485e30a17e60ed0bf18f692c267859ada17b13966404400ce6dc6e5b990dff42a76"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "adc6cb8c223e399bec7199f502ae3431df226f0c2adf3eb1c5e773a83bc98810ae8914182a188ce6f2920223f4f1a337431333cf4a03fa90c56ee8b88dd851500e25bcd58bd9d44ae4933f5a3acad4de96178f46"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-#,.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^--^%\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '&$&&-%@@!.}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\&&k/}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "d77d32356c040cad16947f05bc7e8ad3cbf314618c0986ac3cb2b734b478c0ca64e217fa650ff72365f736da43e49322610e7db9a0101051e072525155fe67973a525e98178fb93fd883e3a66fdd4e6346259fb26eb576ea1b0653cf4d62056eccb1bc0ef80b574d8a6469c5b14013b4c06a19e82a8493b78bb0fbe159dce24a6f6dbb86baf0fdbf8d27"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'ip6gre0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001ac0)={r10, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001ac0)={r10, 0x1, 0x6, @broadcast}, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0xc040) (async) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0xc040) 5.605856734s ago: executing program 3 (id=6183): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r3, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.533877205s ago: executing program 4 (id=6186): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000009c0)="651f6684982fa0c1146fe91f1eff225c0aa2ed477a14be10bb7d80328033759bd02bc3a4f0a9dfb808c3fb8e884275fa49df8442c8ad82285e32220acdd504b79e1d18676457bc95b9707b954e7a8f7565650dfb6d456ce6b3507de6ac24cba8850c5c603fa36a66c666838af9fb99a074714f6ea95cf531baa991b898c5dfd516cf7e584240bf786229b54fe7ba902ecd6ffb516dd3efcf960b3ae63cc9866e76ee9d76a62dcc57f9378e438a922b31bd5f1b6499f6ef9028e6d390528f3810dd6cbbb2d3da52c4d2370f34107bd6d466d7978f57d88f4b1f628c2870bfe2578248acc28c2d55672fe179fa8f58990a1a2763864851", 0xf6}, {&(0x7f0000000f40)="98c65fb44864549cb39f3af32539a8ebe6a5b8dd77f0160e1d6939b6ef7738beac3a2b9666623cf2dd16cf08e6faa6b3c0c45e3376db677e4973b6a4c98771aec79b8059cfaafc83bcdc4ac2e76358b958c37b8ce0ab5057d70854bc1d17cd3d837f97fb51a1b80c75ef9d17ae56f5ba60fd5f05eacdcd161b513af34dbe1354a5bcf301b95b6e", 0x87}, {&(0x7f0000001000)="bded3d3de542ce0cc3cb0366291f99a318aa78c6858972ff73f79f402f36f60e5472767050990a435fb7d141cd29a135dcd1f74e893c725d987616a482a8de9f34a5b3b351c99d4d93d112cd549d15b31829b58bff9c88130cc22bfc613ce44068d13273fe5d092997c7a6de18", 0x6d}, {&(0x7f0000001280)="6028c4cf99078291c0df8ca923ac119b144df6a736a21a3ef63cccf73770f30d88b8164576eff5c5c287a803a1e6ed75fc517603b0b33c851c0f92bb9276c581ad741159a4aa89ed901a2701ff7e53a547e5d61a94399bd0270255a4c0229f609b7ccdc0ae7e8ec42aef931988c97b013b3ec91f71b7d3be77e9e614177fba252c757208b2e8347487a30cbc0fb05548c85513f460f81a0ee54449f0cf307117f0053707290be2d6ea0cadd6dc1dc5f0c575b95038100d", 0xb7}], 0x4}}], 0x2, 0x84) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000004c0)={0x5, 0x100, 0x1ff, 0x5, 0xac, 0xd, 0x7f}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0xc000044) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$key(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x2, 0x17, 0x9, 0x5, 0x20c, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, {0x6, 0x3c, 0x53, 0x3, 0x0, 0xc, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_x_sec_ctx={0x201, 0x18, 0x80, 0x12, 0x1000, "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"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x1060}}, 0x8009004) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x2a0, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x274, 0x3, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x25c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "174fc2ae128d4e1bdf432dd38e97068435d161fed3fe7cfc0f5c9982b4a143111d20b255dae491a3dbc9beb1316187b5797f3b4afcb98e3f9816c0e61772ade21148a15d9bcbd1a150880ab1b350ca406fa44cb4cbbfa28b59def6e934f48848eb43357a0d2ae272ebbad346bbc1ccbdcb1baa787ebbbc81e5acfc9d7e7f9a0c9cee07ba47ffbb37e7b1aae79d01cbe044e465f171305d5ea6f99e187b73b1cde6c8522eca186d40fac8c87e98d198b706a13660d9d1f0405b322b6683ba871675a42c5014666334591de296c9"}, @NFTA_DATA_VALUE={0x19, 0x1, "94961e990f7380d09d414c91a85dc89447122a8c77"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "74bcf6295f94d173"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x4}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbd}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r7, &(0x7f00000003c0)=@in={0x2, 0x4e20, @broadcast}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendto$inet6(r7, &(0x7f0000000080)="2ac4e20250ab42d742ca43b3232b01649b350c6308a9c0ee16cf903fc055633a8c4b195aed42515370f5088e7bae3f9f1e2bfffb4bd50ad92abe7c1819043e3e7a19b648ce84a23b9b1d0dfdc61377b5b0659eec42ad73822c73469b39bd2ee84bfc137ad8cafbc0238183dc90717c73dbdde5df6702f3b7878e007080907de2de4b01561c72a325a2ebd82e70711a30a372848c6715fc4602cc0244c0217805d15c831510821fb0d6d4c18e1f4c2b3857b8079fe358477e62ce4f6b4dbe049be3c22fc7feb4b81891ab907e7f389e56649a04f98bae063f1ee49b74d84c2f48967eb91f7fc0e2db0b40c270e279dbed751093dc36", 0xf5, 0x20000c0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @private2, 0x39}, 0x1c) 5.37783096s ago: executing program 3 (id=6187): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x40, [0x4, 0x807, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x13, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffa, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.165448036s ago: executing program 3 (id=6190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0xd}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xc3e1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090527bd7006fddbdf255200000008000300", @ANYRES32=r10, @ANYBLOB="0500880001000000060048001f000000"], 0x2c}}, 0x4044000) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x258, r9, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x79}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb9, 0xfc, "1cb129b539bf4f4d7cde198bb3b461adb45212af982628d0e1b52fe356f2ae2b827943ebec51b857159043696cd892fea671bb4faf7ad3d3df08c4f26efee1daac6a87224daf4529c80eee4ccb512fe5740e4484ddbadcb8321ff2ec30481dd2914415de4efddb1b4e286aa3ecf29b9ef720d73d3729bfe2aee87e8793b28156df55a4fc60068e6f2380e26791eb7b4368cfdba1b7d1a4f425e3c22454fa89fbe02e058d2f9444f0067966193d8825b947322064ce"}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="be2341c33a89"}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x0, 0x3, 0x0, {0x6, 0x1ffd, 0x0, 0x3b1, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x0, 0xb}}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}, @NL80211_ATTR_KEYS={0x108, 0x51, 0x0, 0x1, [{0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a4f21fff5921bc6ba2c6d05d80"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f9182f816d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7dc2791bc7"}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d8a5e6244c6c191a56d2e8ba52"}, @NL80211_KEY_SEQ={0x12, 0x4, "d6521197d64032ca18d8a728eb20"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "303c2c1eb2e6c3b055049e7a99"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7c12f84c892d14b13f1710284f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4184e0052e"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "f0558c621729de8e7cb7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, "3198a6"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fbf0b033a2"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x8, 0x4, "25f2115e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_PBSS={0x4}]}, 0x258}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000080) 5.110633456s ago: executing program 4 (id=6191): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="ee859d23adff3a75bc684fae8a7941946914e5489909fa2ad4c03bd9d1d262b9d3f95bdd72ae7eb4c28ece48e8875cf3728c438731e6a2a24849178379246bc648cd00cd07c35c8cface09cad49b0631e730e6607c449bd4f5a4358aa40d868acce60ba2fb1ecb467c3631dd664f99c8713fd956ca735adcfb9a3fd406a5a3f9d25cfe7bdb4b34d552b4a3b6ea503c351d", 0x91}, {&(0x7f00000002c0)="87207a06ad3a0574f7ffd438a36f8f72874bb7dff34e85944ece86f834283cd53b76d71f1d6c3198d072799b2c5c973d51bcd6acade6dfde7fb5b13fc894a163768255f74d90997c2bcfa7ac3aeccfbf830cfde127c0a905842bf6321cf0c93cf0a7c86d96844a0590ee06aa3ffae557e561f0347ef57ccec47ea54dabdd4c9396953f630248f01bde95a10693df8f0bd0200fbb0de7d95e1cbc285dc0201aeae6", 0xa1}, {&(0x7f00000000c0)="038e3c2a35590da3963ac54119723973fd68fe1fd92e98108fea48f30f475caad21ce60b61117b56304bc042792f4d816d25cb6fd1667ba402d7ff78a4575f555c75887cac83fd", 0x47}], 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000008404a69b3e1d0f679280b09dd4b489561f252dedc2c061a53083ef6665678739f661088d0efb928f9e834edd0f2cbfab870be6a4c47f47cda344db9dac0ba8d4104c6b585d9b8a17d8f86fa8f686f9fdd0640f958e5db70e676750e5ed964724e551885600fff09ed61774b8da3cfaa29381aee7ac875667e804bec1f93b0741f806b96d1fe7444ab1061f2099f996913249fd2cc6688ad5e6266d7a2802d7b27fd55404d7a20859cdef114c688e13a89ec186ce6dd7a00f2cd50c6200ef4e9f27c53cab130eb86d6eb89129b9", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000000) 4.797948422s ago: executing program 3 (id=6193): r0 = socket(0x9, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0xb, 0x40, 0x7, 0x2}, 0x10}}, 0x0) 4.624004532s ago: executing program 3 (id=6196): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) unshare(0x40000000) 2.969716292s ago: executing program 2 (id=6210): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) unshare(0x22020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0xe, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2.9169132s ago: executing program 2 (id=6211): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000c0000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x64, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={{{}, {}, @broadcast}, @val, @val, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0xb}}, @val={0x72, 0x6}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x694f8d68345b4b28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) epoll_create1(0x0) (async) r8 = epoll_create1(0x0) epoll_create1(0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000400)={[0x3]}, 0x8) (async) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000400)={[0x3]}, 0x8) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r11, 0x941c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r12, &(0x7f0000000100)={0xa000000d}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r10, 0x8983, &(0x7f0000000440)={0x1, 'ipvlan1\x00', {}, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000003c0)={0x1008}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000003c0)={0x1008}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.805862845s ago: executing program 0 (id=6212): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {0x0, 0xe}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x6e}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.79781212s ago: executing program 1 (id=6213): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r3, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r1}, 0x14) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200)) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, @nl=@kern={0x10, 0x0, 0x0, 0x8000}, @can={0x1d, r1}, 0x9, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x9, 0x7, 0xe}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x2, 0x3}, {0xb}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4004884) 2.549361271s ago: executing program 0 (id=6214): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x0, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 1.853600315s ago: executing program 2 (id=6215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0c00000000001000017a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000200000600090000000000"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r11) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r12, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r11) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r11) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x28, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x76fd2bfaa992800c}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000bd7800fbdbdf250b0000000e0001006e657464657464657673696d3000002f000b0005000000000000000000000000d36c3b4a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 1.167435766s ago: executing program 1 (id=6216): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x22c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) 1.156438233s ago: executing program 0 (id=6217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0xfffb, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0xfffb, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) (async) 1.001859787s ago: executing program 1 (id=6218): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x8e, 0x5, 0x5, 0x34, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8000, 0x3}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x99, 0x7, 0x5be5, 0x500, 0x7, 0x410000, r3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x3, 0x2, 0x4, 0x6, 0xca]}, &(0x7f0000000080)=0x54) 969.592365ms ago: executing program 2 (id=6219): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "03482a6364cba537", "099e8615dd174113283dc04ef3089b0c", "e2e711b4", "ac0ad2f7a0c8a0cf"}, 0x28) 940.448805ms ago: executing program 0 (id=6220): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2}}, 0x0}, 0x94) 737.753582ms ago: executing program 2 (id=6221): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbf6814b8af5e1fd22a084d9bbbbbbbbbbbbbbbbbbbb080045000024000000d7a7e4c0afeb185500e0000001320088be0010040000000094f60f0a5d644911957f8296db6dc76cc391f4dfca2c8594aafbefdefac0c4a62b62"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9fef010018000000000000000000000000000000530000000000009aed3131f1ee029d31a1fd71ea41a3715f9fcf812cebdcc9a09a81310000c4233c615e8a46c1fa09492c1e1c5ee9ae4dba5a1ab36422e107e0e14e3b6c0b9ed1cd3668b8d89926c7deb2a8ba89c2f0"], 0x0, 0x1b}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000440)={'team_slave_1\x00'}) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbd}, &(0x7f0000000040)=0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) connect$l2tp6(r5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000700)={0x0, 0xc}, &(0x7f0000000740)=0xc) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1da) 717.647512ms ago: executing program 3 (id=6222): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x1, 0xb, 0x100, 0x4, 0xffffff81, 0x0, 0x7, 0x6ac}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x7fdffffc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x48) sendto$unix(r4, &(0x7f00000005c0)="0cb06fbe177c09fc66c49bf80b899162abd3de1362d3d7b0e60b4bdc7633ab56f516084485cef488d952162ed8d71d0e067ed25c7a08990ce449e6b6e8c227b5c50327d89e232041eae76497d2c8526c8175ce0e0a4b71f70dc3f0f0636f5e4161c2867f1332418ec25136ac6051af294dc50a355dffc9c16949b1b360aeb3f398983ec4fb6eb534bb50e635bd61eff494e249e62a3bd355272af87b130a6bfc6017429c109db82d8d1b9a9136f050f55bde4e792c8d309813cf0cacdf0d927658e3ec0b434448f41f91a2daacebd3e51674229373d8e5c82e6a7935371a95e46a015392dd2b4a1c7401ce63b9c042b6c9", 0xf1, 0x40880, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd700000000000250000000e0001007464657673696d0000000f0002006e657464657673696d30000008008c00020000000000ac0fd9496d1af04b6a70d22ced9a2d55d6224d385a269be629c7b5a413f9ce120ed14635a2d0fa4b3a53626df1485a3079c04e34433d4d5b5e07e25cff7584fe60bf6f000c2903895ed54d78c0a698fd45c1d62cedf618ae727b3019f6def0cbca6d42b4ab2103600a36e00c80dcbc0acdeef5fac0cce9f9e37028c2f7c8d094a1a6f5a31a87a67b10647c71f05d1e8f6d64eab79f2e750404696ecb94864cb71d4cc37adc569f5fee1f95da4d020ad4427262721cf806fb2c7122b21b0ef663271fe5f68523eddff6221e7928c6fe9d9c1d86dab747ade46d276eccae3e649c1b59b39d59a5d09006a442b22ff247277b850f8e"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c011}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r11, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) 692.692845ms ago: executing program 1 (id=6223): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r2, &(0x7f0000001200)=ANY=[], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x103}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 581.868641ms ago: executing program 0 (id=6224): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0xf, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) r5 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 316.385026ms ago: executing program 1 (id=6225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x80d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 231.542322ms ago: executing program 0 (id=6226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd75, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffc0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) 129.731745ms ago: executing program 1 (id=6227): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x7, "04030ec0a4"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(ccm(twofish-asm))\x00'}, 0x3b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8881}], 0x1, 0x20006850) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7fff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x8, [@null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7fff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x8, [@null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x13, r1, 0x68e6000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x13, r1, 0x68e6000) 0s ago: executing program 2 (id=6228): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59adbc0413a1f8480b0080005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0xc71d45f1bedbb519) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000500)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newtfilter={0x560, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x530, 0x2, [@TCA_CGROUP_ACT={0x52c, 0x1, [@m_simple={0xd8, 0x12, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'sfb\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\'\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xffffffff, 0x6, 0x6, 0x6}}, @TCA_DEF_DATA={0x15, 0x3, '^.]!\\\'*[/!@[{([#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x0, 0x7, 0xa00}}]}, {0x47, 0x6, "31a7e581587133415bb8ac876990b4145246503625a924c74977bb9b9d92bf4aa05fe8222cf3afbebe32328116ad4d5f04dd780beda0d408357158a3a502e7abc77d6c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xf4, 0x13, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x33, 0x20000000, 0xfffffffe, 0x101}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0x2, 0x0, 0x1}, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3, 0x0, 0x3, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff00, 0x1}}]}, {0x53, 0x6, "68d333215cf5d0caaceade30a1946704782ecd34ebe0aa79df3ce171a6200db80462d12b19518160585f92f06a6e45d1ddc785cf7a582d5225cf103efef0e8711342e6c786ecc33d1841c2f68d74a7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x14c, 0xa, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x12}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1, 0x10000000, 0x2, 0x8}, 0x2}}]}, {0xd1, 0x6, "bbcf0ee115a2f83424f41d8e5e7633d4f0384f9d8b37eabcd9fe93866e0d083a5942e02bfc9be5b66b0b1de168b17b297c640ba03ba2c4d037b232ff75bbf64d558b928f372b82587247c055a8b94bc965f3de10a7f4f09bd77f04656bad17ed85fe1ec90f3f928be0a89db7cd4aae55d2726f4e6162c37e73b541e69bafee80b2e275fea0f94f82cfb95273b00b6a0c6a62be6e05c280c20f836069f8274455c34dd4165b2cd5cef4a4b4950109b40ba14cefbb7e79a8a3eb26d873d439b24a93e7e62c41d2aaf4cd1057b80c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_xt={0x164, 0xe, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd2, 0x6, {0x5, 'filter\x00', 0x5, 0x3, "a05898adc8ae1805316de9fb10a91336e6197288c1d6eafad40ff200af8a76b99fe0e7fb08cf0d4f6941acb2503fadec1aee058fe570436a2b4f9b1e75d5b872d5e0c581f934d3710eb59e3f1347b4a6c6ed8059f82f61398f8d8039f13235eacf74d7a46f7bed4f04350262e7ca35038322a10ed845c84ce42db2704dba78283a3740564368e7e4ff6134b6a46e22fc8a1580dc9e5576b48b68be5e12fa67ded139da1ba51d0da3"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x5d, 0x6, "136ceb5a84fef9f56a7892c06de5f89c6564de21171108a75e22f8ec34435737fd27c247cd35bd9cee4b4279c5a34c7f8d7e56f5e0f4c6bfb94784af4b5b7fb1cc53467a148b3101c5221f2ac1ea92d7b6807c8d3741879674"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xac, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x8, 0x6, 0x8}}}]}, {0x64, 0x6, "84f5ca46effb999d1a5ae3b1134cd9e244ab1db1203ce834615c852b51d8ad349e0f704aa5577573c6f574c3f1a02b1e66eb5dd880d6e0381b0f1c3ae90f149fa5ae9509406c105c15e0441534a4ac4a6a067fd121bb6f23cfb170d3682e7b87"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) sendmsg$inet(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x39e4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x7}}], 0x18}, 0x40000c1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d80200001200000129bd7000fedbdf252502fc004e234e220900000005000000000000000300000005000000010000000000000001000000", @ANYRES32=r2, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20048c4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r13, 0x6, 0x9, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): e on all matching packets. [ 621.700594][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.841916][T20436] team0 (unregistering): Port device team_slave_0 removed [ 621.861217][T20253] Set syz1 is full, maxelem 65536 reached [ 621.865679][T20436] team0 (unregistering): Port device team_slave_1 removed [ 622.262957][T20461] netlink: 'syz.2.4041': attribute type 49 has an invalid length. [ 622.380670][T20469] __nla_validate_parse: 3 callbacks suppressed [ 622.380685][T20469] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.4045'. [ 622.405216][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 622.423418][T20477] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 622.439357][T20473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4047'. [ 622.472086][T20479] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.4045'. [ 622.495593][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 622.544830][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 622.572425][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4049'. [ 622.737671][T20490] netlink: 'syz.3.4051': attribute type 9 has an invalid length. [ 622.748725][T20490] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.4051'. [ 622.785353][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.793081][T20485] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.872209][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 622.888977][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 622.949322][T20485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.967737][T20485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.292668][T20485] veth3: left allmulticast mode [ 623.310316][T20485] ip6gre2: left allmulticast mode [ 623.338633][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.365359][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.392673][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.448474][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.327125][T20565] tipc: Enabling of bearer rejected, media not registered [ 624.571056][T20582] netlink: 'syz.1.4072': attribute type 4 has an invalid length. [ 624.612317][T20582] netlink: 'syz.1.4072': attribute type 4 has an invalid length. [ 624.857089][T20600] tipc: Enabled bearer , priority 0 [ 624.892069][T20600] syzkaller0: entered promiscuous mode [ 624.911755][T20600] syzkaller0: entered allmulticast mode [ 624.942341][T20604] lo: left promiscuous mode [ 624.947254][T20604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.017858][T20600] tipc: Resetting bearer [ 625.068562][T20595] tipc: Resetting bearer [ 625.070905][T20615] netlink: 'syz.2.4085': attribute type 1 has an invalid length. [ 625.124811][T20595] tipc: Disabling bearer [ 625.192718][T20615] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.201434][T20622] netdevsim netdevsim0 : renamed from netdevsim0 [ 625.226207][T20626] netlink: 'syz.0.4086': attribute type 10 has an invalid length. [ 625.280136][T20628] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 625.543048][T20646] veth11: entered allmulticast mode [ 625.806155][T20654] netlink: 'syz.2.4097': attribute type 3 has an invalid length. [ 626.017099][T20671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.334573][T20695] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 626.415082][T20702] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 626.619847][T20711] lo speed is unknown, defaulting to 1000 [ 626.640842][T20702] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 626.713269][T20702] veth9: entered promiscuous mode [ 626.730472][T20702] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 626.892480][T20727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.312874][T20744] netlink: 'syz.4.4124': attribute type 7 has an invalid length. [ 627.324917][T20744] netlink: 'syz.4.4124': attribute type 8 has an invalid length. [ 627.334396][T20747] lo: entered promiscuous mode [ 627.345022][T20747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.456398][T20750] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 627.505211][T20753] __nla_validate_parse: 19 callbacks suppressed [ 627.505226][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4127'. [ 627.563137][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4127'. [ 627.588204][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4127'. [ 627.622808][T20757] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4129'. [ 627.673196][T20758] tipc: Enabled bearer , priority 0 [ 627.720700][T20763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4130'. [ 627.729811][T20763] tipc: Invalid UDP bearer configuration [ 627.729861][T20763] tipc: Enabling of bearer rejected, failed to enable media [ 627.746181][T20758] syzkaller0: entered promiscuous mode [ 627.755894][T20758] syzkaller0: entered allmulticast mode [ 627.817602][T20758] tipc: Resetting bearer [ 627.888097][T20756] tipc: Resetting bearer [ 627.909907][T20769] atomic_op ffff888023e5a998 conn xmit_atomic 0000000000000000 [ 627.939738][T20756] tipc: Disabling bearer [ 627.971011][T20759] lo speed is unknown, defaulting to 1000 [ 628.128859][T20774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4133'. [ 628.153772][T20779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4135'. [ 628.156314][T20774] tipc: Can't bind to reserved service type 0 [ 628.176196][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 628.203637][T20779] veth0: entered promiscuous mode [ 628.219265][T20776] veth0: left promiscuous mode [ 628.248901][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4134'. [ 628.567276][T20792] pim6reg: entered allmulticast mode [ 628.611516][T20792] pim6reg: left allmulticast mode [ 628.626180][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4140'. [ 628.673670][T20796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 628.685438][T20796] gretap3: entered promiscuous mode [ 628.690649][T20796] gretap3: entered allmulticast mode [ 629.679064][T20857] netlink: 'syz.0.4162': attribute type 1 has an invalid length. [ 629.840058][T20864] tipc: Enabled bearer , priority 0 [ 629.850755][T20864] syzkaller0: entered promiscuous mode [ 629.857147][T20864] syzkaller0: entered allmulticast mode [ 629.869318][T20864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 629.899746][T20864] tipc: Resetting bearer [ 629.907115][T20864] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 629.917704][T20863] tipc: Resetting bearer [ 630.043791][T20863] tipc: Disabling bearer [ 630.480920][T20894] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 630.534838][T20901] team_slave_1: entered promiscuous mode [ 630.541636][T20901] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 630.549599][T20901] team0: Device macvtap1 is already an upper device of the team interface [ 630.562893][T20901] team_slave_1: left promiscuous mode [ 630.806007][T20917] tipc: Enabling of bearer rejected, failed to enable media [ 630.886370][T17682] Bluetooth: hci0: link tx timeout [ 630.892369][T17682] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 630.928124][T20921] bond0 (unregistering): Released all slaves [ 631.040619][T20930] tipc: Enabling of bearer rejected, failed to enable media [ 631.183851][T12670] IPVS: starting estimator thread 0... [ 631.278159][T20939] IPVS: using max 29 ests per chain, 69600 per kthread [ 631.367731][T20945] lo speed is unknown, defaulting to 1000 [ 632.128317][T20981] netlink: 'syz.3.4194': attribute type 1 has an invalid length. [ 632.251593][T20984] netlink: 'syz.4.4196': attribute type 4 has an invalid length. [ 632.518729][ T9350] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.546654][T20998] __nla_validate_parse: 8 callbacks suppressed [ 632.546668][T20998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4202'. [ 632.561128][ T9350] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.582971][T21001] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 632.610240][ T9350] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.638172][ T9350] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.656579][T21009] team_slave_0: entered allmulticast mode [ 632.776054][T21018] delete_channel: no stack [ 632.826486][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.843455][ T5878] Bluetooth: hci0: link tx timeout [ 632.848972][ T5878] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 632.858234][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4209'. [ 632.979156][ T5878] Bluetooth: hci0: command 0x0405 tx timeout [ 633.093358][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4209'. [ 633.122990][T21041] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4214'. [ 633.161421][T21041] openvswitch: netlink: IPv6 tunnel dst address is zero [ 633.354923][T21048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4216'. [ 633.653416][T21071] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 633.729965][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4221'. [ 633.883001][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 150 seconds [ 633.895578][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 150 seconds [ 633.907098][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 150 seconds [ 633.918811][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 150 seconds [ 634.050114][T21096] netlink: 'syz.3.4230': attribute type 64 has an invalid length. [ 634.061910][T21096] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4230'. [ 634.160428][T21105] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 4, id = 0 [ 634.334660][T21114] netlink: 'syz.3.4234': attribute type 1 has an invalid length. [ 634.342403][T21114] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4234'. [ 634.353475][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 634.384288][T21118] netlink: 'syz.2.4236': attribute type 21 has an invalid length. [ 634.392302][T21118] netlink: 'syz.2.4236': attribute type 22 has an invalid length. [ 634.400658][T21118] netlink: 'syz.2.4236': attribute type 23 has an invalid length. [ 634.409193][T21118] netlink: 'syz.2.4236': attribute type 25 has an invalid length. [ 634.417907][T21118] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4236'. [ 634.611251][T21131] dvmrp0: entered allmulticast mode [ 634.851631][T21143] openvswitch: netlink: Unknown key attributes 2 [ 635.840115][T21194] IPVS: Error joining to the multicast group [ 635.878278][T21194] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 635.889935][T21194] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.150634][T21206] tipc: Enabled bearer , priority 0 [ 636.178152][T21206] tipc: Resetting bearer [ 636.359336][T21204] tipc: Disabling bearer [ 636.782385][T21248] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 636.917645][T21259] netlink: 'syz.1.4278': attribute type 29 has an invalid length. [ 636.948853][T21259] netlink: 'syz.1.4278': attribute type 29 has an invalid length. [ 637.355745][T21277] netlink: 'syz.3.4281': attribute type 11 has an invalid length. [ 637.388146][T21277] netlink: 'syz.3.4281': attribute type 11 has an invalid length. [ 637.666787][T21287] __nla_validate_parse: 5 callbacks suppressed [ 637.666805][T21287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4285'. [ 638.046268][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'. [ 638.076183][T21298] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4289'. [ 638.204734][T21317] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4295'. [ 640.158249][T21342] netlink: 'syz.0.4299': attribute type 21 has an invalid length. [ 640.167478][T21342] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4299'. [ 640.308038][T21347] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4303'. [ 640.484970][T21354] atomic_op ffff88805560f198 conn xmit_atomic 0000000000000000 [ 640.581252][ T5927] IPVS: starting estimator thread 0... [ 640.674827][T21362] IPVS: using max 33 ests per chain, 79200 per kthread [ 640.692524][T21366] netlink: 'syz.3.4310': attribute type 1 has an invalid length. [ 640.711045][T21366] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4310'. [ 640.762398][T21371] Bluetooth: MGMT ver 1.23 [ 640.929504][T21376] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 640.982968][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4314'. [ 641.012238][T21376] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 641.026785][T21376] gretap2: entered promiscuous mode [ 641.032278][T21376] gretap2: entered allmulticast mode [ 641.063792][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 641.063792][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 641.679242][T21412] policy can only be matched on NF_INET_PRE_ROUTING [ 641.679273][T21412] unable to load match [ 642.741303][T21472] tipc: Enabled bearer , priority 0 [ 642.760009][T21473] syzkaller0: entered promiscuous mode [ 642.775038][T21473] syzkaller0: entered allmulticast mode [ 642.844353][T21473] tipc: Resetting bearer [ 642.953679][T21473] tipc: Disabling bearer [ 643.086335][T21486] netlink: 'syz.4.4347': attribute type 11 has an invalid length. [ 643.094997][T21491] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 643.105606][T21492] netlink: 'syz.0.4346': attribute type 1 has an invalid length. [ 643.178034][T21492] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 643.190455][T21492] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 643.245663][T21497] gretap3: entered promiscuous mode [ 643.307499][T21507] __nla_validate_parse: 6 callbacks suppressed [ 643.307514][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4351'. [ 643.333393][T21507] openvswitch: netlink: Flow key attr not present in new flow. [ 643.463208][T21519] netlink: 'syz.0.4354': attribute type 3 has an invalid length. [ 643.757858][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 643.768777][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 643.783868][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 643.800419][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 643.873357][T21551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4366'. [ 643.948726][T21555] tipc: Enabling of bearer rejected, failed to enable media [ 644.021727][T21557] sctp: [Deprecated]: syz.3.4370 (pid 21557) Use of int in maxseg socket option. [ 644.021727][T21557] Use struct sctp_assoc_value instead [ 644.078340][T21560] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 644.103758][T21562] syzkaller0: entered promiscuous mode [ 644.151273][T21562] syzkaller0: entered allmulticast mode [ 644.186865][T21561] tipc: Enabled bearer , priority 0 [ 644.349960][T21574] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 644.361896][T21569] tipc: Resetting bearer [ 644.375469][T21574] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4374'. [ 644.430914][T21569] tipc: Disabling bearer [ 644.867489][T21605] veth1_to_hsr: entered promiscuous mode [ 644.985971][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4384'. [ 645.034973][T21609] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4385'. [ 645.169374][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 645.226569][T21626] netlink: 'syz.3.4391': attribute type 1 has an invalid length. [ 645.293286][T21626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.905433][T21668] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 645.936202][T21669] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 645.983129][T21677] veth0: entered promiscuous mode [ 646.038021][T21675] veth0: left promiscuous mode [ 646.129415][T21682] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 647.038325][T21743] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 647.656844][T21767] netlink: 'syz.4.4425': attribute type 33 has an invalid length. [ 647.752643][T21774] sctp: [Deprecated]: syz.2.4428 (pid 21774) Use of int in maxseg socket option. [ 647.752643][T21774] Use struct sctp_assoc_value instead [ 647.776215][T21772] vlan2: entered allmulticast mode [ 647.784723][T21772] gretap0: entered allmulticast mode [ 647.987725][T21782] batadv1: entered allmulticast mode [ 650.729388][T21790] __nla_validate_parse: 11 callbacks suppressed [ 650.729409][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4433'. [ 651.649984][T21800] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4436'. [ 651.690546][T21800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4436'. [ 651.700593][T21803] netlink: 'syz.4.4437': attribute type 12 has an invalid length. [ 651.777652][T21806] netlink: 'syz.2.4439': attribute type 1 has an invalid length. [ 651.828729][T21808] netlink: 'syz.4.4441': attribute type 29 has an invalid length. [ 651.846968][T21808] netlink: 'syz.4.4441': attribute type 29 has an invalid length. [ 651.885217][T21808] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4441'. [ 651.910658][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4440'. [ 651.915695][T21808] unsupported nla_type 58 [ 651.937633][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4440'. [ 651.975929][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4440'. [ 651.981626][ T36] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 651.985023][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4440'. [ 651.993240][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.023085][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.037837][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.136558][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'. [ 652.149001][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'. [ 652.492756][T21849] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.622044][T21858] sctp: [Deprecated]: syz.4.4457 (pid 21858) Use of int in maxseg socket option. [ 652.622044][T21858] Use struct sctp_assoc_value instead [ 652.690826][T21865] netlink: 'syz.2.4458': attribute type 12 has an invalid length. [ 652.750008][T21872] sch_fq: defrate 0 ignored. [ 652.797338][T21865] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 653.121520][T21890] netlink: 'syz.2.4464': attribute type 1 has an invalid length. [ 653.267405][T21886] syzkaller0: entered promiscuous mode [ 653.279980][T21886] syzkaller0: entered allmulticast mode [ 653.340663][T21888] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 654.890783][T21918] kthread_run failed with err -4 [ 654.988117][T21926] netlink: zone id is out of range [ 655.001894][T21926] netlink: zone id is out of range [ 655.011364][T21926] netlink: zone id is out of range [ 655.042629][T21929] 8021q: VLANs not supported on ipvlan0 [ 655.047630][T21926] netlink: zone id is out of range [ 655.074646][T21926] netlink: zone id is out of range [ 655.084160][T21926] netlink: zone id is out of range [ 655.090503][T21926] netlink: zone id is out of range [ 655.097842][T21926] netlink: zone id is out of range [ 655.103384][T21926] netlink: zone id is out of range [ 655.593860][T21970] netlink: 'syz.0.4491': attribute type 1 has an invalid length. [ 655.696636][T21975] bond4: (slave gretap3): making interface the new active one [ 655.705373][T21975] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 655.724520][T21975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.783741][T21983] __nla_validate_parse: 8 callbacks suppressed [ 655.783754][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 655.808870][T21983] netlink: 'syz.0.4495': attribute type 1 has an invalid length. [ 655.847776][T21983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.950828][T21983] bond5: (slave gretap4): making interface the new active one [ 655.960226][T21983] bond5: (slave gretap4): Enslaving as an active interface with an up link [ 656.065436][T22002] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 656.086886][T22002] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4498'. [ 656.157293][T22002] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 656.748832][T22045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4510'. [ 657.268739][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4521'. [ 657.287901][T22085] ipvlan0: entered promiscuous mode [ 657.296675][T22085] ipvlan0: entered allmulticast mode [ 657.301992][T22085] veth0_vlan: entered allmulticast mode [ 657.376053][T22094] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4524'. [ 657.438011][T22085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 657.896910][T22129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4536'. [ 658.199903][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 658.428557][T22158] wireguard0: entered promiscuous mode [ 658.436530][T22153] delete_channel: no stack [ 658.451114][T22153] delete_channel: no stack [ 658.470202][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4547'. [ 658.498057][T22166] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 658.511239][T22166] syzkaller0: tun_chr_ioctl cmd 35092 [ 658.817817][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4555'. [ 658.897147][T22188] validate_nla: 1 callbacks suppressed [ 658.897165][T22188] netlink: 'syz.1.4558': attribute type 2 has an invalid length. [ 658.937851][T22197] net_ratelimit: 16 callbacks suppressed [ 658.937867][T22197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.125360][T22209] syz_tun: entered allmulticast mode [ 659.385562][T22232] tipc: Enabling of bearer rejected, failed to enable media [ 659.693062][T22248] tipc: Enabled bearer , priority 0 [ 659.740492][T22254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.783056][T22248] syzkaller0: entered promiscuous mode [ 659.788826][T22248] syzkaller0: entered allmulticast mode [ 659.795893][T22248] tipc: Resetting bearer [ 659.806938][T22247] tipc: Resetting bearer [ 659.837378][T22256] netlink: 'syz.0.4576': attribute type 1 has an invalid length. [ 659.846427][T22256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.858128][T22256] netlink: 'syz.0.4576': attribute type 27 has an invalid length. [ 660.201381][T22266] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 660.262351][T22267] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 661.054408][ T5878] Bluetooth: hci0: command 0x0405 tx timeout [ 661.357893][T22247] tipc: Disabling bearer [ 661.369707][T22206] syz_tun: left allmulticast mode [ 661.403068][T22266] team0: Port device dummy0 added [ 661.475460][T22267] team0: Port device dummy0 removed [ 661.528343][T22267] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 661.582907][T22276] __nla_validate_parse: 7 callbacks suppressed [ 661.582922][T22276] netlink: 800 bytes leftover after parsing attributes in process `syz.4.4582'. [ 661.600600][T22268] geneve2: entered promiscuous mode [ 661.628043][T22268] geneve2: entered allmulticast mode [ 661.648850][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 661.665720][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 661.761717][T22291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.792981][T22269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.805582][T22269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.827231][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 661.838059][T22288] tipc: Enabled bearer , priority 12 [ 661.853733][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 662.019761][T22299] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4591'. [ 662.343343][T22311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4593'. [ 662.606248][T22334] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4597'. [ 662.955804][T22338] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.4598'. [ 662.965234][T12672] tipc: Node number set to 3309418272 [ 663.099607][T22345] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4601'. [ 663.147919][T22344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.346237][T22365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4602'. [ 663.511917][T22269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.522758][T22269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.535591][T22269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.649672][T22269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.662074][T22269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.673114][T22269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.748011][T22269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.790374][T22269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.801645][T22269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.934529][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 180 seconds [ 663.946144][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 180 seconds [ 663.957270][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 180 seconds [ 663.968994][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 180 seconds [ 664.028640][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4610'. [ 664.038120][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4610'. [ 664.122273][ T997] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.155287][ T997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 664.172595][ T997] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.194778][ T997] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.212195][ T997] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 664.229597][ T997] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.299615][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.318521][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 664.352086][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.393596][ T997] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.407370][ T997] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 664.416311][ T997] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.738100][T22428] lo speed is unknown, defaulting to 1000 [ 664.918617][T22441] netlink: 'syz.1.4622': attribute type 18 has an invalid length. [ 664.927579][T22441] netlink: 'syz.1.4622': attribute type 18 has an invalid length. [ 664.937534][T22441] netlink: 'syz.1.4622': attribute type 21 has an invalid length. [ 664.945597][T22441] netlink: 'syz.1.4622': attribute type 5 has an invalid length. [ 665.473703][T22464] netlink: 'syz.4.4629': attribute type 1 has an invalid length. [ 665.482121][T22464] netlink: 'syz.4.4629': attribute type 2 has an invalid length. [ 665.490068][T22464] netlink: 'syz.4.4629': attribute type 1 has an invalid length. [ 666.175966][T22498] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 666.429292][T22515] netlink: 'syz.4.4646': attribute type 2 has an invalid length. [ 666.652190][T22538] __nla_validate_parse: 19 callbacks suppressed [ 666.652208][T22538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4654'. [ 666.704970][T22538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4654'. [ 666.773268][T22547] sit0: entered promiscuous mode [ 666.798730][T22547] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 666.837284][T22547] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4656'. [ 666.837847][T22552] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 666.869564][T22550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 667.048395][T22560] gtp0: entered promiscuous mode [ 667.079312][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 667.895182][T22605] netlink: 'syz.3.4674': attribute type 10 has an invalid length. [ 668.111978][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4680'. [ 668.280642][T22630] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4683'. [ 668.418179][T22640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4686'. [ 668.466886][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4688'. [ 668.641306][T22654] ip6tnl1: entered promiscuous mode [ 668.812704][T22668] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4695'. [ 669.047643][T22684] batman_adv: batadv0: Adding interface: dummy0 [ 669.071169][T22684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.123718][T22684] batman_adv: batadv0: Interface activated: dummy0 [ 669.169223][T22696] batadv0: mtu less than device minimum [ 669.189808][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.201741][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.213604][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.225683][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.237629][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.249489][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.261332][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.273138][T22696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.308827][T22698] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4703'. [ 669.499599][T22698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.519751][T22698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.561087][T22698] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 669.571361][T22698] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.578855][T22698] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.599705][T22698] bond0 (unregistering): Released all slaves [ 669.850374][T22732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.873669][T22733] bond0: (slave geneve2): making interface the new active one [ 669.901359][T22733] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 669.984219][T22742] syzkaller0: entered promiscuous mode [ 669.989999][T22742] syzkaller0: entered allmulticast mode [ 670.875883][T22798] validate_nla: 3 callbacks suppressed [ 670.875900][T22798] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 670.917103][T22800] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 670.953279][T22802] netlink: 'syz.3.4732': attribute type 1 has an invalid length. [ 671.384632][T22821] netlink: 'syz.1.4737': attribute type 21 has an invalid length. [ 671.669650][T22836] netlink: 'syz.4.4742': attribute type 4 has an invalid length. [ 671.677770][T22836] __nla_validate_parse: 9 callbacks suppressed [ 671.677784][T22836] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4742'. [ 674.469775][T22839] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 674.491948][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4746'. [ 674.544787][T22841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4743'. [ 674.615258][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4743'. [ 675.104642][T22888] netlink: 'syz.1.4759': attribute type 4 has an invalid length. [ 675.186460][T22891] netlink: 'syz.0.4760': attribute type 2 has an invalid length. [ 675.572500][T22908] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 675.585054][T22907] IPVS: stopping master sync thread 22908 ... [ 675.665545][T22910] tipc: Cannot configure node identity twice [ 676.085707][T22934] netlink: 'syz.2.4776': attribute type 1 has an invalid length. [ 676.100872][T22934] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 676.729882][T22978] netlink: 'syz.1.4791': attribute type 58 has an invalid length. [ 676.750190][T22978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4791'. [ 676.853375][T22983] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4794'. [ 677.030933][T22996] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4797'. [ 677.256651][T23013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4801'. [ 677.276925][T23007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4801'. [ 677.296034][T17682] Bluetooth: hci0: command 0x0405 tx timeout [ 677.351946][T23016] netlink: 'syz.4.4803': attribute type 10 has an invalid length. [ 677.403559][T23016] team0: Port device dummy0 added [ 677.425897][T23018] syzkaller0: entered promiscuous mode [ 677.431374][T23018] syzkaller0: entered allmulticast mode [ 677.499987][T23016] netlink: 'syz.4.4803': attribute type 10 has an invalid length. [ 677.535485][T23016] team0: Port device dummy0 removed [ 677.536292][T17682] Bluetooth: hci1: command 0x0406 tx timeout [ 677.544025][T23016] netlink: 'syz.4.4803': attribute type 10 has an invalid length. [ 677.605206][T23016] team0: Port device dummy0 added [ 678.135602][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'. [ 678.234322][T23064] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 678.523359][T23071] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 678.661411][T23071] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 678.926524][T23074] gretap1: entered promiscuous mode [ 679.091069][T23120] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 679.118906][T23120] netlink: 'syz.1.4823': attribute type 2 has an invalid length. [ 679.429777][T23138] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4828'. [ 679.563286][T23144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4830'. [ 679.900412][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4834'. [ 679.933324][T23166] chnl_net:caif_netlink_parms(): no params data found [ 680.377111][T23194] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4841'. [ 680.452657][T23196] net_ratelimit: 13 callbacks suppressed [ 680.452675][T23196] openvswitch: netlink: Missing key (keys=40, expected=100) [ 681.510004][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 681.532810][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 681.541040][ T5913] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 681.613604][T23269] 8021q: VLANs not supported on dvmrp0 [ 681.630699][T23266] 8021q: VLANs not supported on dvmrp0 [ 681.822157][T23280] __nla_validate_parse: 9 callbacks suppressed [ 681.822175][T23280] netlink: 212384 bytes leftover after parsing attributes in process `syz.3.4866'. [ 681.847486][T23280] netlink: zone id is out of range [ 681.852705][T23280] netlink: zone id is out of range [ 681.882917][T23280] netlink: zone id is out of range [ 681.909527][T23280] netlink: zone id is out of range [ 681.926486][T23289] netlink: 'syz.0.4869': attribute type 4 has an invalid length. [ 681.934528][T23289] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4869'. [ 681.941294][T23280] netlink: zone id is out of range [ 681.954703][T23280] netlink: zone id is out of range [ 681.960387][T23280] netlink: zone id is out of range [ 681.982109][T23280] netlink: zone id is out of range [ 682.004039][T23280] netlink: zone id is out of range [ 682.084648][T12668] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 682.334738][T12668] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 683.393536][T23370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4890'. [ 683.421835][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4890'. [ 683.451036][T23370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4890'. [ 683.639220][T23381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4894'. [ 684.428034][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4904'. [ 684.505945][T23428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4905'. [ 684.523032][T23428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4905'. [ 684.543237][T23425] netlink: 'syz.2.4904': attribute type 1 has an invalid length. [ 684.564142][T23425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4904'. [ 684.585026][T23433] netlink: 'syz.3.4907': attribute type 11 has an invalid length. [ 684.621843][T23424] netlink: 'syz.2.4904': attribute type 1 has an invalid length. [ 685.534709][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 685.883640][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 685.893521][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 685.901540][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 685.909491][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 685.916597][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 685.923452][T23476] IPVS: set_ctl: invalid protocol: 86 224.0.0.2:20004 [ 686.612450][T23512] netlink: 'syz.0.4930': attribute type 4 has an invalid length. [ 686.654451][T23517] netlink: 'syz.0.4930': attribute type 7 has an invalid length. [ 686.658979][T23518] netlink: 'syz.0.4930': attribute type 7 has an invalid length. [ 686.860788][T23528] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 687.106470][T23548] netlink: 'syz.3.4942': attribute type 29 has an invalid length. [ 687.215597][T23555] nbd: must specify a device to reconfigure [ 687.241656][T23555] __nla_validate_parse: 2 callbacks suppressed [ 687.241671][T23555] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4945'. [ 687.288614][T23562] netlink: 'syz.3.4946': attribute type 1 has an invalid length. [ 687.307318][T23562] netlink: 'syz.3.4946': attribute type 3 has an invalid length. [ 687.319425][T23555] 0{X: renamed from gretap0 [ 687.330942][T23562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4946'. [ 687.342997][T23560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4947'. [ 687.392053][T23555] net_ratelimit: 1 callbacks suppressed [ 687.392066][T23555] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 687.428412][T23566] netlink: 'syz.2.4948': attribute type 13 has an invalid length. [ 687.473152][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4948'. [ 687.493459][T23568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4949'. [ 687.529096][T23566] netlink: 'syz.2.4948': attribute type 13 has an invalid length. [ 687.559424][T23574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4949'. [ 687.573759][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4948'. [ 687.792099][T23587] netlink: 'syz.1.4955': attribute type 10 has an invalid length. [ 687.800774][T23587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4955'. [ 687.809995][T23587] dummy0: entered promiscuous mode [ 687.823639][T23587] bridge0: port 3(dummy0) entered blocking state [ 687.838897][T23587] bridge0: port 3(dummy0) entered disabled state [ 687.845746][T23587] dummy0: entered allmulticast mode [ 688.060813][T23602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4961'. [ 688.197726][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4962'. [ 688.312860][T23617] netlink: 'syz.4.4965': attribute type 10 has an invalid length. [ 689.245680][T23682] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 690.398246][T23722] bridge_slave_0: left promiscuous mode [ 690.730811][T23722] gtp0: left promiscuous mode [ 690.740123][T23722] ip6tnl1: left promiscuous mode [ 690.899782][ T9346] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.916878][ T9346] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.960000][ T9346] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.990964][ T9346] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.038543][ T9346] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.071531][ T9346] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.098312][T13646] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.141892][T13646] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.418486][T23781] netlink: 'syz.2.5006': attribute type 1 has an invalid length. [ 691.438622][T23783] netlink: 'syz.1.5007': attribute type 9 has an invalid length. [ 691.451656][T23781] netlink: 'syz.2.5006': attribute type 3 has an invalid length. [ 692.598282][T23842] __nla_validate_parse: 9 callbacks suppressed [ 692.598298][T23842] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.634794][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.656321][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.675141][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.697673][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.715856][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.751402][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.776131][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.802602][T23849] openvswitch: netlink: Key type 10512 is out of range max 32 [ 692.816467][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.825955][T23841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5020'. [ 692.843524][T23855] netlink: 'syz.1.5025': attribute type 11 has an invalid length. [ 693.032472][T23856] syzkaller0: entered promiscuous mode [ 693.040731][T23856] syzkaller0: entered allmulticast mode [ 693.363469][T23877] validate_nla: 1 callbacks suppressed [ 693.363486][T23877] netlink: 'syz.0.5032': attribute type 30 has an invalid length. [ 693.377962][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 694.018459][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 210 seconds [ 694.034380][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 210 seconds [ 694.045760][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 210 seconds [ 694.056939][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 210 seconds [ 694.669908][T23868] vlan3: entered allmulticast mode [ 694.676386][T23868] bridge0: entered allmulticast mode [ 694.681882][T23868] bridge5: port 1(vlan3) entered blocking state [ 694.688614][T23868] bridge5: port 1(vlan3) entered disabled state [ 694.697516][T23868] vlan3: entered promiscuous mode [ 694.702711][T23868] bridge0: entered promiscuous mode [ 694.723630][T23877] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 694.948503][T23894] veth13: entered allmulticast mode [ 694.953947][T23901] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 694.989926][T23889] syzkaller0: refused to change device tx_queue_len [ 695.117089][T23909] syz_tun: entered allmulticast mode [ 695.161683][T23908] syz_tun: left allmulticast mode [ 695.379680][T23919] bond0: option ad_select: unable to set because the bond device is up [ 695.405467][T23925] netlink: 'syz.2.5046': attribute type 1 has an invalid length. [ 695.448195][T23928] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 695.852565][T23945] netlink: 'syz.1.5054': attribute type 1 has an invalid length. [ 695.881373][T23946] netlink: 'syz.0.5052': attribute type 2 has an invalid length. [ 697.498440][T24026] netlink: 'syz.2.5080': attribute type 13 has an invalid length. [ 697.552177][T24026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.573097][T24026] netlink: 'syz.2.5080': attribute type 39 has an invalid length. [ 697.705456][T24039] __nla_validate_parse: 18 callbacks suppressed [ 697.705474][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5083'. [ 697.839536][T24041] : entered promiscuous mode [ 697.916629][T24048] netlink: 'syz.1.5088': attribute type 1 has an invalid length. [ 698.049492][T24061] nbd: nbd3 already in use [ 698.054983][T24061] nbd: nbd3 already in use [ 698.078614][T24055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.091707][T24055] bond3: (slave bond4): making interface the new active one [ 698.099731][T24055] bond3: (slave bond4): Enslaving as an active interface with an up link [ 698.210829][T24055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5088'. [ 699.179047][T24110] syzkaller0: entered promiscuous mode [ 699.202282][T24110] syzkaller0: entered allmulticast mode [ 699.219899][T24109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5101'. [ 699.231232][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 699.241093][T24118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5105'. [ 699.241121][T24118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5105'. [ 699.254861][T24118] gretap2: entered promiscuous mode [ 699.268001][T24116] netlink: 'syz.0.5104': attribute type 30 has an invalid length. [ 699.268966][T24118] gretap2: entered allmulticast mode [ 699.544906][T24132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5111'. [ 699.583602][T24132] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5111'. [ 699.628892][T24138] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5112'. [ 699.645019][T24144] netlink: 'syz.4.5114': attribute type 33 has an invalid length. [ 699.653020][T24144] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5114'. [ 700.742556][T24161] sctp: [Deprecated]: syz.4.5120 (pid 24161) Use of int in max_burst socket option deprecated. [ 700.742556][T24161] Use struct sctp_assoc_value instead [ 701.117294][T24185] tc_dump_action: action bad kind [ 701.694761][T24209] team0 (unregistering): Port device team_slave_0 removed [ 701.739164][T24209] team0 (unregistering): Port device team_slave_1 removed [ 701.852306][T24221] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 701.948532][T24225] netlink: 'syz.1.5142': attribute type 2 has an invalid length. [ 702.045546][T24232] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 702.468311][T24253] netlink: 'syz.1.5151': attribute type 1 has an invalid length. [ 702.490391][T24253] netlink: 'syz.1.5151': attribute type 1 has an invalid length. [ 702.574389][T12670] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec [ 702.606316][T24261] openvswitch: netlink: Flow key attr not present in new flow. [ 702.700799][T24255] tipc: Disabling bearer [ 703.243481][T24298] netlink: 'syz.4.5166': attribute type 4 has an invalid length. [ 703.388558][T24308] lo: entered allmulticast mode [ 703.423354][T24311] __nla_validate_parse: 15 callbacks suppressed [ 703.423370][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'. [ 703.462717][T24308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5169'. [ 703.529596][T24316] netlink: 'syz.0.5171': attribute type 23 has an invalid length. [ 703.716552][T24327] openvswitch: netlink: Flow key attr not present in new flow. [ 703.717999][T24325] sctp: [Deprecated]: syz.4.5175 (pid 24325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.717999][T24325] Use struct sctp_sack_info instead [ 703.775846][T24306] lo: left allmulticast mode [ 703.950982][T24335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5178'. [ 704.303039][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'. [ 704.322756][T24353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'. [ 704.453454][T24360] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 704.528369][T24360] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 704.606987][T24366] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.5188'. [ 704.630987][T24367] netlink: 'syz.4.5186': attribute type 10 has an invalid length. [ 704.671087][T24367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5186'. [ 704.722626][T24373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5190'. [ 704.743230][T24373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5190'. [ 704.766812][T24367] dummy0: entered promiscuous mode [ 704.792050][T24367] team0: Port device dummy0 removed [ 704.812910][T24367] bridge0: port 1(dummy0) entered blocking state [ 704.830705][T24367] bridge0: port 1(dummy0) entered disabled state [ 704.843090][T24367] dummy0: entered allmulticast mode [ 704.875173][T24373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5190'. [ 705.555818][T24414] nbd: couldn't find a device at index -373156329 [ 705.766753][T24422] hsr0 speed is unknown, defaulting to 1000 [ 705.772938][T24422] hsr0 speed is unknown, defaulting to 1000 [ 705.782660][T24422] hsr0 speed is unknown, defaulting to 1000 [ 705.843360][T24422] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 705.947710][T24422] hsr0 speed is unknown, defaulting to 1000 [ 705.972365][T24422] hsr0 speed is unknown, defaulting to 1000 [ 705.998604][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.022269][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.045266][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.070557][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.082240][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.106993][T24422] hsr0 speed is unknown, defaulting to 1000 [ 706.126994][T24439] netlink: 'syz.2.5208': attribute type 4 has an invalid length. [ 706.173328][T24439] netlink: 'syz.2.5208': attribute type 4 has an invalid length. [ 706.892985][T24485] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 708.180213][T24548] openvswitch: netlink: Key type 85 is out of range max 32 [ 708.199675][T24548] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 708.223011][T24548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.546025][T24578] __nla_validate_parse: 12 callbacks suppressed [ 708.546044][T24578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5248'. [ 708.734120][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 708.981160][T24590] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5254'. [ 709.075293][T24594] pim6reg1: entered promiscuous mode [ 709.080699][T24594] pim6reg1: entered allmulticast mode [ 709.287748][T24611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5262'. [ 709.590212][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5266'. [ 709.600958][T24631] netlink: 'syz.1.5266': attribute type 30 has an invalid length. [ 709.629040][T24632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5267'. [ 709.746433][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 710.175770][T24660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5278'. [ 710.243320][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5277'. [ 710.326611][T24667] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 710.539522][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 710.591868][T24687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5288'. [ 711.013588][T24720] netlink: 'syz.4.5299': attribute type 1 has an invalid length. [ 711.244235][T24735] netlink: 'syz.4.5303': attribute type 11 has an invalid length. [ 711.492819][T24750] tipc: Enabling of bearer rejected, failed to enable media [ 711.518020][T24750] netlink: 'syz.0.5305': attribute type 4 has an invalid length. [ 711.566509][T24750] wlan1: mtu less than device minimum [ 711.800537][T24766] lo speed is unknown, defaulting to 1000 [ 711.842357][T24770] tipc: Enabling of bearer rejected, failed to enable media [ 711.862922][T24771] tipc: Enabled bearer , priority 0 [ 711.872246][T24771] syzkaller0: entered promiscuous mode [ 711.879367][T24771] syzkaller0: entered allmulticast mode [ 711.958018][T24771] tipc: Resetting bearer [ 712.020091][T24768] tipc: Resetting bearer [ 712.080481][T24768] tipc: Disabling bearer [ 712.375161][T24766] hsr0 speed is unknown, defaulting to 1000 [ 712.463364][T24800] lo speed is unknown, defaulting to 1000 [ 712.725763][T24800] hsr0 speed is unknown, defaulting to 1000 [ 712.887524][T24820] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 713.429807][T24843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 713.451897][T24843] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 713.478696][T24843] gretap4: entered promiscuous mode [ 713.485661][T24843] gretap4: entered allmulticast mode [ 713.851274][T24863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.914046][T24867] netlink: 'syz.1.5343': attribute type 18 has an invalid length. [ 713.941735][T24864] __nla_validate_parse: 16 callbacks suppressed [ 713.941750][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 714.380125][T24891] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5351'. [ 714.429827][T24891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5351'. [ 714.639137][T24913] sctp: [Deprecated]: syz.4.5357 (pid 24913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 714.639137][T24913] Use struct sctp_sack_info instead [ 714.827654][T24930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5361'. [ 715.041482][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5365'. [ 715.108694][T24950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5366'. [ 715.159559][T24952] netlink: 'syz.0.5367': attribute type 2 has an invalid length. [ 715.239650][T24958] netlink: 'syz.0.5369': attribute type 29 has an invalid length. [ 715.248090][T24958] netlink: 'syz.0.5369': attribute type 29 has an invalid length. [ 715.292509][T24961] netlink: 'syz.0.5370': attribute type 1 has an invalid length. [ 715.304817][T24961] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5370'. [ 715.662033][T24977] ip6erspan0: entered promiscuous mode [ 715.834900][T24989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5379'. [ 715.856483][T24987] syzkaller1: entered promiscuous mode [ 715.874574][T24987] syzkaller1: entered allmulticast mode [ 716.027641][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 716.037357][T24995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5382'. [ 716.046745][T24995] netlink: 'syz.2.5382': attribute type 15 has an invalid length. [ 716.312342][T25026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.708034][T25047] netlink: 'syz.0.5397': attribute type 5 has an invalid length. [ 717.408849][T25104] netlink: 'syz.0.5414': attribute type 83 has an invalid length. [ 718.048985][T25148] netlink: 'syz.4.5428': attribute type 7 has an invalid length. [ 718.066176][T25148] : entered promiscuous mode [ 718.117266][T25150] netlink: 'syz.0.5427': attribute type 1 has an invalid length. [ 718.142810][T25150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.160037][T25150] netlink: 'syz.0.5427': attribute type 7 has an invalid length. [ 718.830599][ T5233] udevd[5233]: worker [14379] /devices/virtual/block/nbd4 timeout; kill it [ 718.882506][ T5233] udevd[5233]: seq 24265 '/devices/virtual/block/nbd4' killed [ 718.967021][T25209] __nla_validate_parse: 11 callbacks suppressed [ 718.967037][T25209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5442'. [ 719.090204][T25224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.131595][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5446'. [ 719.189571][T25224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5446'. [ 720.017654][T25262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5460'. [ 720.060724][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5461'. [ 720.094796][T25264] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5461'. [ 720.129258][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5463'. [ 720.171520][T25267] xfrm1: entered promiscuous mode [ 720.214614][T25267] xfrm1: entered allmulticast mode [ 720.225235][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'. [ 720.234449][T25277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'. [ 720.264258][T25268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5463'. [ 720.753455][T25295] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 721.557564][T25338] openvswitch: netlink: Flow key attribute not present in set flow. [ 721.672269][T25346] lo speed is unknown, defaulting to 1000 [ 721.715506][T25348] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 722.075308][T25346] hsr0 speed is unknown, defaulting to 1000 [ 723.077395][T25429] validate_nla: 1 callbacks suppressed [ 723.077411][T25429] netlink: 'syz.2.5512': attribute type 8 has an invalid length. [ 723.508430][T25459] lo speed is unknown, defaulting to 1000 [ 723.854967][T25459] hsr0 speed is unknown, defaulting to 1000 [ 724.033705][T25480] __nla_validate_parse: 11 callbacks suppressed [ 724.033724][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5526'. [ 724.096506][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 240 seconds [ 724.108134][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 240 seconds [ 724.119853][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 240 seconds [ 724.133266][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 240 seconds [ 724.233044][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 724.283722][T25485] C: renamed from team_slave_0 [ 724.310095][T25485] netlink: 'syz.4.5528': attribute type 1 has an invalid length. [ 724.318092][T25485] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 724.731301][T25511] netlink: 'syz.1.5536': attribute type 13 has an invalid length. [ 724.740216][T25511] digital: digital_start_poll: Unknown protocol [ 725.029290][T25522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5540'. [ 725.046743][T25522] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5540'. [ 725.058096][T25522] netlink: 'syz.0.5540': attribute type 6 has an invalid length. [ 725.072688][T25522] netlink: 'syz.0.5540': attribute type 5 has an invalid length. [ 725.091085][T25522] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5540'. [ 725.221832][T25534] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 725.633460][T25560] pim6reg1: entered promiscuous mode [ 725.683339][T25560] pim6reg1: entered allmulticast mode [ 725.912678][T25576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.941603][T25585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.545878][T25601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5559'. [ 726.571439][T25601] netlink: 'syz.0.5559': attribute type 1 has an invalid length. [ 726.586827][T25601] netlink: 'syz.0.5559': attribute type 1 has an invalid length. [ 726.615010][T25601] netlink: 'syz.0.5559': attribute type 2 has an invalid length. [ 726.643089][T25601] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5559'. [ 726.726370][T25610] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5561'. [ 726.736706][T25610] netlink: 'syz.3.5561': attribute type 11 has an invalid length. [ 726.809232][T25596] infiniband syz2: set down [ 726.813992][T25596] infiniband syz2: added bond_slave_1 [ 726.875661][T25596] RDS/IB: syz2: added [ 726.880621][T25596] smc: adding ib device syz2 with port count 1 [ 726.886961][T25596] smc: ib device syz2 port 1 has pnetid [ 727.610016][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5568'. [ 727.633221][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5568'. [ 727.748108][T25646] tipc: Enabled bearer , priority 0 [ 727.764329][T25646] syzkaller0: entered promiscuous mode [ 727.779947][T25646] syzkaller0: entered allmulticast mode [ 727.829376][T25646] 0{X: renamed from gretap0 [ 727.888839][T25646] 0{X: entered allmulticast mode [ 727.907179][T25646] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 727.954895][T25661] netlink: 'syz.3.5572': attribute type 1 has an invalid length. [ 727.964475][T25646] veth1_to_bond: mtu less than device minimum [ 727.991107][T25645] tipc: Resetting bearer [ 728.035917][T25645] tipc: Disabling bearer [ 728.239380][T25676] pim6reg1: entered promiscuous mode [ 728.263785][T25676] pim6reg1: entered allmulticast mode [ 728.607823][T25701] dummy0: entered promiscuous mode [ 728.613123][T25706] netlink: 'syz.2.5581': attribute type 3 has an invalid length. [ 728.621507][T25706] netlink: 'syz.2.5581': attribute type 1 has an invalid length. [ 728.637144][T25701] batadv_slave_1: entered promiscuous mode [ 728.864025][T25717] netlink: 'syz.0.5586': attribute type 4 has an invalid length. [ 729.054657][T25728] netlink: 'syz.0.5586': attribute type 4 has an invalid length. [ 729.063706][T25730] IPv6: Can't replace route, no match found [ 729.120721][T25731] __nla_validate_parse: 8 callbacks suppressed [ 729.120735][T25731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5590'. [ 729.146591][T25737] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5591'. [ 729.164667][T25731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5590'. [ 729.228495][T25731] gretap5: entered promiscuous mode [ 729.233818][T25731] gretap5: entered allmulticast mode [ 729.402924][T25748] netlink: 'syz.3.5592': attribute type 1 has an invalid length. [ 729.423595][T25748] netlink: 'syz.3.5592': attribute type 10 has an invalid length. [ 729.445226][T25748] netlink: 'syz.3.5592': attribute type 4 has an invalid length. [ 729.473630][T25748] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5592'. [ 729.497579][T25752] netlink: 'syz.2.5595': attribute type 3 has an invalid length. [ 729.743773][T25763] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5596'. [ 729.766278][T25763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'. [ 729.840519][T25769] sock: sock_set_timeout: `syz.2.5596' (pid 25769) tries to set negative timeout [ 729.875410][T25770] syzkaller1: entered promiscuous mode [ 729.886533][T25770] syzkaller1: entered allmulticast mode [ 729.964312][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5599'. [ 730.120379][T25779] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 730.149646][T25779] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 730.346099][T25792] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5603'. [ 730.346188][T25789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5603'. [ 730.409159][T25794] netlink: 'syz.2.5607': attribute type 1 has an invalid length. [ 730.431736][T25796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5606'. [ 730.474655][T25800] netlink: 'syz.2.5607': attribute type 1 has an invalid length. [ 730.519528][T25794] 8021q: adding VLAN 0 to HW filter on device bond9 [ 730.803226][T25814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.814115][T25814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.598155][T25848] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 731.618240][T25848] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 731.822667][T25855] openvswitch: netlink: IP tunnel TTL not specified. [ 732.729035][T25910] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.755999][T25910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.779046][ T30] audit: type=1107 audit(1755382848.411:39): pid=25914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H^њJMw:z}:~^@piBHqS$XOP|hޅ/!z8]ӹ%W3l+غ0֑9*|` MA0 ' [ 732.817587][T12687] lo speed is unknown, defaulting to 1000 [ 732.823329][T12687] syz0: Port: 1 Link ACTIVE [ 732.846890][T23748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.849366][T12687] lo speed is unknown, defaulting to 1000 [ 733.075141][T23748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.154808][T12670] lo speed is unknown, defaulting to 1000 [ 733.170903][T12670] lo speed is unknown, defaulting to 1000 [ 733.184968][T12687] lo speed is unknown, defaulting to 1000 [ 733.266958][T25948] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 733.451768][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.490882][T25960] delete_channel: no stack [ 733.511962][T25957] pimreg: entered allmulticast mode [ 733.526516][T25962] geneve4: entered promiscuous mode [ 733.577834][T25962] geneve4: entered allmulticast mode [ 733.602255][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.697966][T25963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.751331][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.769557][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 733.953548][T25991] validate_nla: 8 callbacks suppressed [ 733.953564][T25991] netlink: 'syz.1.5665': attribute type 1 has an invalid length. [ 733.975520][T25991] netlink: 'syz.1.5665': attribute type 2 has an invalid length. [ 734.076026][T25994] netlink: 'syz.0.5666': attribute type 12 has an invalid length. [ 734.346317][T26013] sctp: [Deprecated]: syz.0.5671 (pid 26013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.346317][T26013] Use struct sctp_sack_info instead [ 734.366808][T26007] netlink: 'syz.1.5670': attribute type 2 has an invalid length. [ 734.384250][T26014] __nla_validate_parse: 15 callbacks suppressed [ 734.384266][T26014] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5672'. [ 734.400235][T26013] sctp: [Deprecated]: syz.0.5671 (pid 26013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.400235][T26013] Use struct sctp_sack_info instead [ 734.497913][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.517217][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.633811][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5675'. [ 734.710298][T26023] netlink: 'syz.1.5676': attribute type 26 has an invalid length. [ 734.904242][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.923430][T26037] netlink: 'syz.1.5681': attribute type 1 has an invalid length. [ 734.939979][T26037] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5681'. [ 734.955627][T26037] netlink: 'syz.1.5681': attribute type 2 has an invalid length. [ 734.993396][T26037] netlink: 'syz.1.5681': attribute type 1 has an invalid length. [ 734.994470][T26043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5683'. [ 735.076767][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5683'. [ 735.162765][T26048] lo speed is unknown, defaulting to 1000 [ 735.453656][T25963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.500658][T25963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 735.667725][T25963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.682296][T25963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 735.788198][T26079] openvswitch: netlink: IP tunnel dst address not specified [ 735.795769][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5689'. [ 735.864837][T25963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.877112][T25963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 735.886537][T26083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5693'. [ 735.897163][T26083] netlink: 'syz.3.5693': attribute type 7 has an invalid length. [ 735.928864][T26083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5693'. [ 735.940448][T26048] hsr0 speed is unknown, defaulting to 1000 [ 736.053760][T13641] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 736.071183][T13641] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.121057][T13641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 736.129992][T13641] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.167220][T13641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 736.179868][T13641] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.219844][T13641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 736.239597][T13641] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.381693][T26101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.701765][T26118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5703'. [ 736.721584][T26117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.776306][T26120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5706'. [ 737.073411][T26134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.219064][T26145] openvswitch: netlink: Flow actions attr not present in new flow. [ 737.303536][T26149] netlink: 'syz.4.5713': attribute type 4 has an invalid length. [ 737.435534][ T1970] lo speed is unknown, defaulting to 1000 [ 737.441295][ T1970] syz0: Port: 1 Link DOWN [ 737.483475][ T1970] lo speed is unknown, defaulting to 1000 [ 737.675269][T26160] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 737.933153][T26176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.527453][T26210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 738.783597][T26230] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 738.842418][T26232] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 738.879648][T26232] gretap2: left promiscuous mode [ 738.884792][T26232] gretap2: left allmulticast mode [ 738.894163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.921380][ T30] audit: type=1800 audit(1755382854.571:40): pid=26235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5735" name="memory.events" dev="tmpfs" ino=2783 res=0 errno=0 [ 738.987798][T26232] ip6erspan0: left promiscuous mode [ 738.993694][ T30] audit: type=1804 audit(1755382854.571:41): pid=26235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5735" name="/newroot/548/memory.events" dev="tmpfs" ino=2783 res=1 errno=0 [ 739.005368][T26232] xfrm1: left promiscuous mode [ 739.037062][T26232] xfrm1: left allmulticast mode [ 739.047519][T13646] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.060925][T13646] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.099073][T13646] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.119696][T13646] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.181591][T26240] tc_dump_action: action bad kind [ 739.264575][T26244] erspan0: entered allmulticast mode [ 739.353154][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.360461][T26252] IPv6: NLM_F_CREATE should be set when creating new route [ 739.367732][T26252] IPv6: NLM_F_CREATE should be set when creating new route [ 739.374984][T26252] IPv6: NLM_F_CREATE should be set when creating new route [ 739.402249][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.414278][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.421832][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.429989][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.439289][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.450960][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.458806][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.489230][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.520119][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.552975][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.579073][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.605505][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.613087][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.629891][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.642341][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.658522][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.672305][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.687959][T26267] validate_nla: 4 callbacks suppressed [ 739.687973][T26267] netlink: 'syz.4.5747': attribute type 4 has an invalid length. [ 739.709710][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.719665][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.733447][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.743189][T26273] netlink: 'syz.4.5747': attribute type 4 has an invalid length. [ 739.760165][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.803585][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.806297][T26277] netlink: 'syz.0.5749': attribute type 1 has an invalid length. [ 739.819588][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.876374][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.891789][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.901362][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.917887][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.932155][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.957651][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.970529][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.992619][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.013812][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.029734][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.094110][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 740.359337][T26310] __nla_validate_parse: 3 callbacks suppressed [ 740.359355][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5758'. [ 740.423366][T26316] netlink: 'syz.0.5760': attribute type 1 has an invalid length. [ 740.434903][T26313] netlink: 'syz.0.5760': attribute type 1 has an invalid length. [ 740.498037][T26320] netlink: 'syz.2.5762': attribute type 1 has an invalid length. [ 740.505939][T26320] netlink: 'syz.2.5762': attribute type 4 has an invalid length. [ 740.513664][T26320] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5762'. [ 740.526470][T26320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5762'. [ 740.577979][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5763'. [ 740.751234][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'. [ 740.764012][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'. [ 740.772999][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'. [ 741.564703][T26379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.809555][T26385] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5780'. [ 741.835957][T26385] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5780'. [ 741.845283][T26385] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5780'. [ 741.914142][T26387] netlink: 'syz.2.5781': attribute type 10 has an invalid length. [ 741.985558][T26387] team0: Device ipvlan1 failed to register rx_handler [ 742.612062][T26423] netlink: 'syz.0.5796': attribute type 10 has an invalid length. [ 742.653080][T26423] bridge0: port 3(team0) entered blocking state [ 742.689305][T26423] bridge0: port 3(team0) entered disabled state [ 742.705238][T26423] team0: entered allmulticast mode [ 742.711754][T26423] team_slave_0: entered allmulticast mode [ 742.725267][T26423] team_slave_1: entered allmulticast mode [ 742.734768][T26423] team0: entered promiscuous mode [ 742.739807][T26423] team_slave_0: entered promiscuous mode [ 742.745882][T26423] team_slave_1: entered promiscuous mode [ 743.255403][T26485] netlink: 'syz.3.5811': attribute type 11 has an invalid length. [ 743.785171][T26516] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 743.801757][T26520] netem: unknown loss type 0 [ 743.821455][T26520] netem: change failed [ 744.361418][T26557] syzkaller0: entered promiscuous mode [ 744.372271][T26557] syzkaller0: entered allmulticast mode [ 745.970126][T26566] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 746.188953][T26606] IPv6: addrconf: prefix option has invalid lifetime [ 746.197357][T26601] __nla_validate_parse: 19 callbacks suppressed [ 746.197371][T26601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5846'. [ 746.301510][T26610] unknown channel width for channel at 909000KHz? [ 746.329064][T26610] unknown channel width for channel at 909000KHz? [ 746.346232][T26610] unknown channel width for channel at 909000KHz? [ 746.450691][T26620] validate_nla: 1 callbacks suppressed [ 746.450706][T26620] netlink: 'syz.3.5853': attribute type 1 has an invalid length. [ 746.586017][T26620] 8021q: adding VLAN 0 to HW filter on device bond12 [ 746.602228][T26620] bond11: (slave bond12): making interface the new active one [ 746.611892][T26633] netlink: 'syz.1.5854': attribute type 10 has an invalid length. [ 746.621283][T26620] bond11: (slave bond12): Enslaving as an active interface with an up link [ 746.665476][T26621] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 746.731737][T26631] dvmrp1: entered allmulticast mode [ 746.820867][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5860'. [ 746.868243][T26642] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 746.901774][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5860'. [ 747.140627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.227008][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'. [ 747.272909][T26668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5863'. [ 747.609633][T26696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5870'. [ 747.747163][T26702] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 747.774079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.068376][T26725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5881'. [ 748.089106][T26725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5881'. [ 748.672661][T26759] tipc: Enabling of bearer rejected, failed to enable media [ 749.119851][T26788] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 749.134207][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 749.135813][T26789] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 749.230369][T26788] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 749.250147][T26793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5900'. [ 749.375207][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5902'. [ 749.431150][T26797] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 749.650002][T26818] netlink: 'syz.2.5907': attribute type 1 has an invalid length. [ 749.932474][T26830] netlink: 'syz.1.5910': attribute type 30 has an invalid length. [ 750.153522][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 750.172390][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.172452][T26835] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 750.180214][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.203441][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 750.214786][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 750.285552][T26841] bond7: entered promiscuous mode [ 750.300380][T26841] bond7: entered allmulticast mode [ 750.315734][T26841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.347538][T26846] IPVS: set_ctl: invalid protocol: 183 172.30.1.1:20257 [ 750.411317][T26849] netlink: 'syz.0.5916': attribute type 1 has an invalid length. [ 750.496776][T26841] bond7 (unregistering): Released all slaves [ 750.660576][T26836] lo speed is unknown, defaulting to 1000 [ 750.757714][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 750.775403][T23748] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 750.804719][ T3021] bond2: (slave ip6gretap1): link status up again after 0 ms [ 750.830808][ T3021] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 750.923529][T26877] netlink: 'syz.0.5926': attribute type 1 has an invalid length. [ 750.971253][T26877] 8021q: adding VLAN 0 to HW filter on device bond9 [ 750.988167][T26878] vlan0: entered promiscuous mode [ 750.993311][T26878] bond9: entered promiscuous mode [ 750.999452][T26878] vlan0: entered allmulticast mode [ 751.005037][T26878] bond9: entered allmulticast mode [ 751.014320][ T3021] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.119730][T23748] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 751.201593][ T3021] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.298509][T26906] __nla_validate_parse: 11 callbacks suppressed [ 751.298525][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5933'. [ 751.336247][ T9346] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.447473][T26904] syzkaller0: entered promiscuous mode [ 751.453182][T26904] syzkaller0: entered allmulticast mode [ 751.495588][T26836] hsr0 speed is unknown, defaulting to 1000 [ 751.733583][T26930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5937'. [ 752.270950][T17682] Bluetooth: hci2: command tx timeout [ 753.348727][T26947] syzkaller0: entered promiscuous mode [ 753.365082][T26947] syzkaller0: entered allmulticast mode [ 753.401550][T26952] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (65485) ! [ 753.507939][T26962] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5944'. [ 753.734928][ T3021] net_ratelimit: 1 callbacks suppressed [ 753.734946][ T3021] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.799635][T26836] chnl_net:caif_netlink_parms(): no params data found [ 753.914180][T13641] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.021990][T26836] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.041031][T26836] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.055240][T26836] bridge_slave_0: entered allmulticast mode [ 754.064449][T26836] bridge_slave_0: entered promiscuous mode [ 754.073746][T26836] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.082373][T26836] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.089779][T26836] bridge_slave_1: entered allmulticast mode [ 754.098388][T26836] bridge_slave_1: entered promiscuous mode [ 754.156045][T26836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.173444][T26836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.185146][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 270 seconds [ 754.196043][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 270 seconds [ 754.207137][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 270 seconds [ 754.218461][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 270 seconds [ 754.265904][T26836] team0: Port device team_slave_0 added [ 754.275001][T26836] team0: Port device team_slave_1 added [ 754.321710][T26836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.328766][T26836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.356434][T17682] Bluetooth: hci2: command tx timeout [ 754.361987][T26836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.396704][T26836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.403779][T26836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.431742][T26836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.440417][T27013] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 754.450400][T27013] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 754.524683][T26836] hsr_slave_0: entered promiscuous mode [ 754.531581][T26836] hsr_slave_1: entered promiscuous mode [ 754.538775][T26836] debugfs: 'hsr0' already exists in 'hsr' [ 754.545350][T26836] Cannot create hsr debugfs directory [ 754.555395][ T9346] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.935137][ T9346] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 754.972590][T26836] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.978978][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5963'. [ 754.994489][T27031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5964'. [ 755.014428][T26836] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 755.057781][T26836] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.125241][T27038] sit0: left promiscuous mode [ 755.239515][T27038] team_slave_0: left allmulticast mode [ 755.262128][T27038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.275281][T27038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.377861][T27038] veth3: left promiscuous mode [ 755.395574][T27038] gretap2: left promiscuous mode [ 755.400607][T27038] gretap2: left allmulticast mode [ 755.417401][T26836] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.444526][T26836] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 755.457514][T26836] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.538979][ T37] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.571392][ T37] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.596106][ T37] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.614023][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.709765][T26836] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.731025][T26836] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 755.780603][T26836] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 755.854540][ T37] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.881691][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.915375][T27057] netlink: 'syz.0.5966': attribute type 2 has an invalid length. [ 755.948385][T26836] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.997883][T26836] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 756.039778][T26836] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 756.093079][ T37] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.132792][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.414900][T17682] Bluetooth: hci2: command tx timeout [ 756.453790][T26836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.472927][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5973'. [ 756.474381][T26836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 756.509153][T26836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 756.529034][T26836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 756.564300][T27095] netlink: 'syz.4.5975': attribute type 10 has an invalid length. [ 756.622131][T27099] netlink: 'syz.2.5976': attribute type 2 has an invalid length. [ 756.732727][T26836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.767455][T26836] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.787559][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.794727][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.836768][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.843954][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.028639][T27081] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 757.416885][T27130] dvmrp0: entered allmulticast mode [ 757.611765][T27135] sctp: [Deprecated]: syz.4.5984 (pid 27135) Use of int in max_burst socket option deprecated. [ 757.611765][T27135] Use struct sctp_assoc_value instead [ 757.746771][T27137] netlink: 'syz.1.5986': attribute type 1 has an invalid length. [ 757.779918][T27137] netlink: 'syz.1.5986': attribute type 2 has an invalid length. [ 757.821229][T27137] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.5986'. [ 758.089220][T26836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.185141][T27147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5989'. [ 758.216532][T27147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5989'. [ 758.295717][T27147] bond0: entered promiscuous mode [ 758.300950][T27147] geneve2: entered promiscuous mode [ 758.317944][T27147] bond0: left promiscuous mode [ 758.329532][T27147] geneve2: left promiscuous mode [ 758.347908][T27162] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5991'. [ 758.409089][T27157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5991'. [ 758.471127][T26836] veth0_vlan: entered promiscuous mode [ 758.494511][T17682] Bluetooth: hci2: command tx timeout [ 758.526905][T26836] veth1_vlan: entered promiscuous mode [ 758.580435][T26836] veth0_macvtap: entered promiscuous mode [ 758.607220][T26836] veth1_macvtap: entered promiscuous mode [ 758.667536][T26836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.752693][T26836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.807245][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.865790][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.866200][T27182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5997'. [ 758.963345][ T9346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.984479][ T9346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.193385][T27196] netlink: 340 bytes leftover after parsing attributes in process `syz.1.5999'. [ 759.220446][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.239544][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.275028][T27191] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5999'. [ 759.295001][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5999'. [ 759.325560][T27200] sctp: [Deprecated]: syz.2.6001 (pid 27200) Use of int in max_burst socket option deprecated. [ 759.325560][T27200] Use struct sctp_assoc_value instead [ 759.356600][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.367315][T27203] sctp: [Deprecated]: syz.2.6001 (pid 27203) Use of int in max_burst socket option deprecated. [ 759.367315][T27203] Use struct sctp_assoc_value instead [ 759.382028][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.208232][T27246] nbd: nbd1 already in use [ 760.551216][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.561015][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.568971][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 760.580834][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 760.589223][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 760.658237][T14383] udevd[14383]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 760.715035][T27262] lo speed is unknown, defaulting to 1000 [ 761.013442][T27274] syzkaller1: entered promiscuous mode [ 761.037550][T27274] syzkaller1: entered allmulticast mode [ 761.151409][T27262] hsr0 speed is unknown, defaulting to 1000 [ 761.491407][T27304] nft_compat: unsupported protocol 1 [ 761.557252][T27310] netlink: 'syz.4.6033': attribute type 21 has an invalid length. [ 761.565366][T27310] __nla_validate_parse: 2 callbacks suppressed [ 761.565380][T27310] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6033'. [ 761.749107][T27319] ipvlan2: entered promiscuous mode [ 761.775870][T27322] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 761.913028][T27327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6040'. [ 761.947874][ T5934] IPVS: starting estimator thread 0... [ 762.074250][T27333] IPVS: using max 31 ests per chain, 74400 per kthread [ 762.212209][T27262] chnl_net:caif_netlink_parms(): no params data found [ 762.298844][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 762.337812][T27262] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.345245][T27262] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.352527][T27262] bridge_slave_0: entered allmulticast mode [ 762.360727][T27262] bridge_slave_0: entered promiscuous mode [ 762.371215][T27262] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.378520][T27262] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.385763][T27262] bridge_slave_1: entered allmulticast mode [ 762.393501][T27262] bridge_slave_1: entered promiscuous mode [ 762.444750][T27360] syzkaller0: entered promiscuous mode [ 762.457141][T27360] syzkaller0: entered allmulticast mode [ 762.471984][T27262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.487951][T27262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.572637][T27262] team0: Port device team_slave_0 added [ 762.596474][T27262] team0: Port device team_slave_1 added [ 762.652755][T27262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.661113][T17682] Bluetooth: hci5: command tx timeout [ 762.668363][T27262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.695188][T27262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.717623][T27262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.731637][T27262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.763891][T27262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.818331][T27262] hsr_slave_0: entered promiscuous mode [ 762.824819][T27262] hsr_slave_1: entered promiscuous mode [ 762.830890][T27262] debugfs: 'hsr0' already exists in 'hsr' [ 762.837309][T27262] Cannot create hsr debugfs directory [ 762.898140][T27360] netlink: 'syz.3.6046': attribute type 11 has an invalid length. [ 762.926610][T27360] netlink: 'syz.3.6046': attribute type 11 has an invalid length. [ 762.935141][T27360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6046'. [ 763.311310][T27389] digital: digital_start_poll: Unknown protocol [ 763.333326][T27379] lo speed is unknown, defaulting to 1000 [ 763.496960][T27400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6058'. [ 763.585575][T27379] hsr0 speed is unknown, defaulting to 1000 [ 763.983345][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6064'. [ 764.135704][T27262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.155822][T27262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.176649][T27262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.212113][T27262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.465646][T27262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.489006][T27262] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.531027][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.538218][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.591688][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.598833][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.735219][T17682] Bluetooth: hci5: command tx timeout [ 764.940972][T27262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.992516][T27262] veth0_vlan: entered promiscuous mode [ 765.004922][T27262] veth1_vlan: entered promiscuous mode [ 765.034751][T27262] veth0_macvtap: entered promiscuous mode [ 765.045300][T27262] veth1_macvtap: entered promiscuous mode [ 765.054000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.067364][T27262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.083698][T27262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.102067][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.112554][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.124173][ T3021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.133123][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.209260][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.226270][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.249978][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.258205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.744022][T27450] tipc: Started in network mode [ 765.748923][T27450] tipc: Node identity f2026457280a, cluster identity 4711 [ 765.781449][T27450] tipc: Enabled bearer , priority 0 [ 765.822905][T27458] syzkaller0: entered promiscuous mode [ 765.833048][T27458] syzkaller0: entered allmulticast mode [ 765.877992][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6068'. [ 766.032311][T27450] tipc: Resetting bearer [ 766.096507][T27448] tipc: Resetting bearer [ 766.218433][T27448] tipc: Disabling bearer [ 766.520202][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6079'. [ 766.575481][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6079'. [ 766.597796][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6079'. [ 766.704818][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 766.714038][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 766.722212][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 766.730828][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 766.739078][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 766.791119][T27488] lo speed is unknown, defaulting to 1000 [ 766.815705][T17682] Bluetooth: hci5: command tx timeout [ 767.326482][T27488] hsr0 speed is unknown, defaulting to 1000 [ 767.369376][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6088'. [ 767.401234][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6088'. [ 767.544566][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6088'. [ 767.553446][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6088'. [ 767.761404][ T3534] bridge_slave_1: left allmulticast mode [ 767.775040][ T3534] bridge_slave_1: left promiscuous mode [ 767.805706][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.840616][ T3534] bridge_slave_0: left allmulticast mode [ 767.852200][ T3534] bridge_slave_0: left promiscuous mode [ 767.867517][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.911263][T27555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6097'. [ 768.382783][ T3534] bond2 (unregistering): (slave gretap0): Releasing active interface [ 768.444214][ T3534] dvmrp0 (unregistering): left allmulticast mode [ 768.577161][ T3534] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 768.650013][ T3534] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 768.699369][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6101'. [ 768.708549][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6101'. [ 768.814265][T17682] Bluetooth: hci1: command tx timeout [ 768.821248][ T3534] bond3 (unregistering): (slave bridge3): Releasing active interface [ 768.897883][T17682] Bluetooth: hci5: command tx timeout [ 768.958066][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.969987][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.980765][ T3534] bond0 (unregistering): Released all slaves [ 769.014840][T27585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6101'. [ 769.092359][ T3534] bond1 (unregistering): (slave veth5): Releasing backup interface [ 769.103141][ T3534] bond1 (unregistering): Released all slaves [ 769.210157][ T3534] bond2 (unregistering): Released all slaves [ 769.230427][ T3534] bond3 (unregistering): Released all slaves [ 769.333104][ T3534] bond4 (unregistering): (slave wlan0): Releasing active interface [ 769.342465][ T3534] tipc: Resetting bearer [ 769.353762][ T3534] bond4 (unregistering): Released all slaves [ 769.422379][T27572] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 769.579573][ T3534] : left promiscuous mode [ 769.630224][ T3534] tipc: Disabling bearer [ 769.656204][ T3534] tipc: Disabling bearer [ 769.671515][ T3534] tipc: Left network mode [ 769.699643][ T3534] IPVS: stopping master sync thread 13012 ... [ 769.755915][T27595] netlink: 'syz.0.6104': attribute type 29 has an invalid length. [ 769.865347][T27608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.886314][T27608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.910292][T27603] bond7 (unregistering): Released all slaves [ 769.942843][T27595] netlink: 'syz.0.6104': attribute type 29 has an invalid length. [ 770.215757][T27621] Bluetooth: MGMT ver 1.23 [ 770.319393][T27588] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 770.324162][T27623] netlink: 'syz.1.6109': attribute type 4 has an invalid length. [ 770.616709][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.676243][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.719126][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.763992][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 770.895571][T17682] Bluetooth: hci1: command tx timeout [ 771.297338][T27638] lo speed is unknown, defaulting to 1000 [ 771.472545][ T3534] team_slave_0: left promiscuous mode [ 771.478230][ T3534] team_slave_1: left promiscuous mode [ 771.494769][ T3534] veth1_macvtap: left promiscuous mode [ 771.501997][ T3534] veth1_vlan: left promiscuous mode [ 771.740149][T27641] __nla_validate_parse: 9 callbacks suppressed [ 771.740175][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6113'. [ 772.110217][ T3534] vlan1 (unregistering): left allmulticast mode [ 772.120435][T27672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.340741][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 772.386606][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 772.826933][T27638] hsr0 speed is unknown, defaulting to 1000 [ 772.849616][T27488] chnl_net:caif_netlink_parms(): no params data found [ 772.892081][T27675] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6124'. [ 772.917528][T27676] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6124'. [ 772.924531][T27677] openvswitch: netlink: Flow key attr not present in new flow. [ 772.974177][T17682] Bluetooth: hci1: command tx timeout [ 773.474859][T27488] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.504098][T27488] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.535441][T27488] bridge_slave_0: entered allmulticast mode [ 773.550908][T27488] bridge_slave_0: entered promiscuous mode [ 773.602760][T27488] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.627175][T27488] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.646696][T27488] bridge_slave_1: entered allmulticast mode [ 773.656327][T27488] bridge_slave_1: entered promiscuous mode [ 773.666167][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.682112][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6133'. [ 773.683551][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.715778][ T3534] IPVS: stop unused estimator thread 0... [ 773.738054][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.766952][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.792265][T27709] tipc: Enabled bearer , priority 0 [ 773.795136][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.834261][T27715] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 773.882466][T27713] syzkaller0: entered promiscuous mode [ 773.892350][T27713] syzkaller0: entered allmulticast mode [ 773.924934][T27488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.967558][T27488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.020801][T27709] tipc: Resetting bearer [ 774.143144][T27731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6137'. [ 774.309720][T27488] team0: Port device team_slave_0 added [ 774.338451][T27488] team0: Port device team_slave_1 added [ 774.444351][T27708] tipc: Resetting bearer [ 774.470394][T27708] tipc: Disabling bearer [ 774.681410][T27488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.711337][T27488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.787554][T27488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.923436][T27488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.937804][T27488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.032622][T27488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.056400][T17682] Bluetooth: hci1: command tx timeout [ 775.266407][T27488] hsr_slave_0: entered promiscuous mode [ 775.284625][T27488] hsr_slave_1: entered promiscuous mode [ 775.295765][T27488] debugfs: 'hsr0' already exists in 'hsr' [ 775.301499][T27488] Cannot create hsr debugfs directory [ 775.442084][T27765] tipc: Enabled bearer , priority 0 [ 775.451197][T27765] syzkaller0: entered promiscuous mode [ 775.457225][T27765] syzkaller0: entered allmulticast mode [ 775.544209][T27765] tipc: Resetting bearer [ 775.588311][T27764] tipc: Resetting bearer [ 775.613395][T27764] tipc: Disabling bearer [ 775.735218][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6150'. [ 775.746093][T27783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6150'. [ 775.766434][T27783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6150'. [ 775.918598][T27488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 775.943968][T27488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 775.976358][T27800] netlink: 'syz.0.6157': attribute type 15 has an invalid length. [ 775.984947][T27800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6157'. [ 776.060746][T27488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 776.104738][T27488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.158476][T27809] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 776.168235][ T5993] IPVS: starting estimator thread 0... [ 776.197431][T27488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 776.207844][T27488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.283955][T27810] IPVS: using max 26 ests per chain, 62400 per kthread [ 776.299653][T27488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 776.331848][T27488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.357625][T27826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6162'. [ 776.600963][T27488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.613299][T27488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.631351][T27488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.660103][T27488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 776.821728][T27488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.890863][T27488] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.917469][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.924673][ T9341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.940056][T13641] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.947265][T13641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.069831][T27854] netlink: 'syz.1.6169': attribute type 3 has an invalid length. [ 777.091250][T27854] __nla_validate_parse: 1 callbacks suppressed [ 777.091265][T27854] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6169'. [ 777.238004][T27859] tipc: Invalid UDP bearer configuration [ 777.238057][T27859] tipc: Enabling of bearer rejected, failed to enable media [ 777.374542][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6172'. [ 777.424986][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6172'. [ 777.438111][T27865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6172'. [ 777.496964][T27488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.633401][T27488] veth0_vlan: entered promiscuous mode [ 777.682430][T27488] veth1_vlan: entered promiscuous mode [ 777.797777][T27488] veth0_macvtap: entered promiscuous mode [ 777.831100][T27488] veth1_macvtap: entered promiscuous mode [ 777.881274][T27488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.953266][T27488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.006258][T13644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.038848][T13644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.080346][T13644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.109630][T27896] netlink: 'syz.0.6180': attribute type 13 has an invalid length. [ 778.118299][T13644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.139574][T27899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6181'. [ 778.543367][T27896] net_ratelimit: 27 callbacks suppressed [ 778.543378][T27896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.798936][T27926] pimreg: left allmulticast mode [ 778.920433][ T9345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.942922][T27935] netlink: 'syz.0.6188': attribute type 4 has an invalid length. [ 778.947138][ T9345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.147416][T13644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.162796][T13644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.745710][T27963] lo speed is unknown, defaulting to 1000 [ 780.033644][T27975] dvmrp1: entered allmulticast mode [ 780.054068][T27963] hsr0 speed is unknown, defaulting to 1000 [ 780.552056][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 780.568136][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 780.577687][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 780.587120][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 780.605442][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.636610][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6203'. [ 780.734716][T27986] lo speed is unknown, defaulting to 1000 [ 780.935266][T27994] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 781.221584][T27986] hsr0 speed is unknown, defaulting to 1000 [ 781.234689][T28006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6209'. [ 781.444897][T28013] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 781.488035][T28013] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.506588][T28013] bond0: (slave team0): Enslaving as an active interface with an up link [ 781.597686][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6213'. [ 781.607122][T28015] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.6211'. [ 781.622202][T13639] dummy0: left allmulticast mode [ 781.642061][T13639] bridge0: port 1(dummy0) entered disabled state [ 781.714154][T28026] netlink: 'syz.0.6214': attribute type 4 has an invalid length. [ 781.734210][T28026] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6214'. [ 782.654557][T17682] Bluetooth: hci3: command tx timeout [ 782.840623][T13639] bond1 (unregistering): Released all slaves [ 782.859039][T13639] bond2 (unregistering): Released all slaves [ 782.878253][T13639] bond3 (unregistering): Released all slaves [ 782.896573][T13639] bond4 (unregistering): Released all slaves [ 782.915909][T13639] bond5 (unregistering): Released all slaves [ 782.933240][T13639] bond0 (unregistering): Released all slaves [ 783.049697][T28036] openvswitch: netlink: IPv4 tun info is not correct [ 783.145733][T13639] : left promiscuous mode [ 783.293041][T13639] tipc: Left network mode [ 783.620723][T28062] ipvlan0: entered promiscuous mode [ 783.633570][T28062] bridge0: port 4(ipvlan0) entered blocking state [ 783.641032][T28062] bridge0: port 4(ipvlan0) entered disabled state [ 783.649765][T28062] ipvlan0: entered allmulticast mode [ 783.665698][T28062] bridge0: entered allmulticast mode [ 783.668479][T28066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6224'. [ 783.683653][T28062] ipvlan0: left allmulticast mode [ 783.699047][T28062] bridge0: left allmulticast mode [ 783.761101][T28066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6224'. [ 783.778492][T27986] chnl_net:caif_netlink_parms(): no params data found [ 784.044092][T28067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6222'. [ 784.263281][ T1204] block nbd4: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 300 seconds [ 784.276010][ T1204] block nbd4: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 300 seconds [ 784.293994][ T1204] block nbd4: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 300 seconds [ 784.305366][ T1204] block nbd4: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 300 seconds [ 784.306071][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 784.337211][T27986] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.345208][T27986] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.352504][T27986] bridge_slave_0: entered allmulticast mode [ 784.365329][T27986] bridge_slave_0: entered promiscuous mode [ 784.439889][T27986] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.459691][T27986] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.480804][T27986] bridge_slave_1: entered allmulticast mode [ 784.547401][T27986] bridge_slave_1: entered promiscuous mode [ 784.659268][T23749] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 784.671186][T23749] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 784.679580][T23749] CPU: 0 UID: 0 PID: 23749 Comm: kworker/0:14 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 784.691792][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.701833][T23749] Workqueue: events l2cap_info_timeout [ 784.707289][T23749] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 784.713170][T23749] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 784.732759][T23749] RSP: 0018:ffffc9000ce577a8 EFLAGS: 00010206 [ 784.738809][T23749] RAX: dffffc0000000000 RBX: ffffffff8959dd48 RCX: e9a4e1187c510300 [ 784.746769][T23749] RDX: 0000000000000000 RSI: ffffffff8959dd48 RDI: 000000000000004b [ 784.754718][T23749] RBP: ffffffff8a82ff15 R08: 0000000000000001 R09: 0000000000000000 [ 784.762669][T23749] R10: dffffc0000000000 R11: ffffffff8a82fed0 R12: 0000000000000000 [ 784.770620][T23749] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 784.778573][T23749] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 784.787480][T23749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.794042][T23749] CR2: 00007fc793010440 CR3: 000000000df36000 CR4: 00000000003526f0 [ 784.801998][T23749] Call Trace: [ 784.805260][T23749] [ 784.808171][T23749] __kasan_check_byte+0x12/0x40 [ 784.813011][T23749] lock_acquire+0x8d/0x360 [ 784.817414][T23749] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.822597][T23749] ? __cancel_work+0x254/0x2e0 [ 784.827344][T23749] lock_sock_nested+0x48/0x100 [ 784.832092][T23749] ? l2cap_sock_ready_cb+0x45/0x140 [ 784.837278][T23749] l2cap_sock_ready_cb+0x45/0x140 [ 784.842293][T23749] l2cap_conn_start+0x76d/0xe50 [ 784.847148][T23749] ? __pfx_l2cap_conn_start+0x10/0x10 [ 784.852506][T23749] ? __lock_acquire+0xab9/0xd20 [ 784.857349][T23749] ? __pfx___mutex_lock+0x10/0x10 [ 784.862377][T23749] ? process_scheduled_works+0x9ef/0x17b0 [ 784.868090][T23749] l2cap_info_timeout+0x68/0xa0 [ 784.872925][T23749] ? process_scheduled_works+0x9ef/0x17b0 [ 784.878624][T23749] process_scheduled_works+0xade/0x17b0 [ 784.884157][T23749] ? __pfx_process_scheduled_works+0x10/0x10 [ 784.890119][T23749] worker_thread+0x8a0/0xda0 [ 784.894686][T23749] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 784.900999][T23749] ? __kthread_parkme+0x7b/0x200 [ 784.905919][T23749] kthread+0x70e/0x8a0 [ 784.909971][T23749] ? __pfx_worker_thread+0x10/0x10 [ 784.915060][T23749] ? __pfx_kthread+0x10/0x10 [ 784.919636][T23749] ? _raw_spin_unlock_irq+0x23/0x50 [ 784.924818][T23749] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.929997][T23749] ? __pfx_kthread+0x10/0x10 [ 784.934566][T23749] ret_from_fork+0x3f9/0x770 [ 784.939138][T23749] ? __pfx_ret_from_fork+0x10/0x10 [ 784.944231][T23749] ? __switch_to_asm+0x39/0x70 [ 784.948976][T23749] ? __switch_to_asm+0x33/0x70 [ 784.953720][T23749] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 784.958294][T23749] ret_from_fork_asm+0x1a/0x30 [ 784.963047][T23749] [ 784.966058][T23749] Modules linked in: [ 784.971395][T23749] ---[ end trace 0000000000000000 ]--- [ 785.003797][T17682] Bluetooth: hci3: command tx timeout [ 785.524014][T13639] hsr_slave_0: left promiscuous mode [ 785.529564][T23749] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 785.543848][T23749] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 785.594367][T23749] RSP: 0018:ffffc9000ce577a8 EFLAGS: 00010206 [ 785.594438][T13639] hsr_slave_1: left promiscuous mode [ 785.600451][T23749] RAX: dffffc0000000000 RBX: ffffffff8959dd48 RCX: e9a4e1187c510300 [ 785.652175][T23749] RDX: 0000000000000000 RSI: ffffffff8959dd48 RDI: 000000000000004b [ 785.706979][T23749] RBP: ffffffff8a82ff15 R08: 0000000000000001 R09: 0000000000000000 [ 785.741757][T23749] R10: dffffc0000000000 R11: ffffffff8a82fed0 R12: 0000000000000000 [ 785.776483][T23749] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 785.795132][T23749] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 785.817325][T23749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.830958][T23749] CR2: 00007f6a74116e9c CR3: 0000000072f56000 CR4: 00000000003526f0 [ 785.840590][T23749] Kernel panic - not syncing: Fatal exception [ 785.846891][T23749] Kernel Offset: disabled [ 785.851194][T23749] Rebooting in 86400 seconds..