last executing test programs: 1m27.815554045s ago: executing program 1 (id=2896): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x142}, {&(0x7f0000000180)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56319ff90032d5b900000000c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa00000000000000", 0x55}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000840)="000000000100000058473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e340d110b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63b46a53009cec75dd608e2e86ff9b9c7650112b91fdcca8616f6013241ceff93fd8cdab5a479b9614318eedd5a609b633b114f0030c80bc3b7fe6320e9f2e5a824c14aa3cccac383bacd0a126a9675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43cf8340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5ae1d44537fb96b50a65e0dd0ab100020000000000004c8f4e350b487c88a5fababc1cd73038625a27280000005c5610ba38f13d9f3b2605404c5137fc4a61d3fc2b061cd0820e0ce9489901d6854860a57b2f0cf41d58b8182bb215f5a5909782e2c0c18d78f7f0b8824f57a970d361d041f859641cb7e287c1c31307b48ff5f69f", 0x15c}, {&(0x7f0000000280)="1b1eb47967b8c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c10900000000000000169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf5230d77cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e08520a96eb0aa5db49afc24b7a78cf11373b0000", 0xca}], 0x5, 0x0, 0x0, 0x4}], 0x1, 0x4014) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) 1m27.427328429s ago: executing program 1 (id=2901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$netlink(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)={0x10, 0x1f, 0x400, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x40}, 0x22004881) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) unshare(0x600) 1m27.196902123s ago: executing program 1 (id=2904): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, 0x1c) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(0x3) 1m26.93320175s ago: executing program 1 (id=2909): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) setsockopt(r0, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140500ffffff1e01010007"], 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x40) 1m26.687139631s ago: executing program 1 (id=2913): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x1d4, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_mirred={0x184, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xff000000, 0x8, 0xffff0001, 0xff}, 0x2}}]}, {0xd8, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432cdecdb391557a9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4103, 0x1007}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x6001) 1m26.513986338s ago: executing program 1 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000c4312800e0001005f703665727370616e000000680002800400120008000a000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x1f, 0x5, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x0, {0x2, 0xff, 0x4}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000c4312800e0001005f703665727370616e000000680002800400120008000a000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket(0x1f, 0x5, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) (async) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x0, {0x2, 0xff, 0x4}}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 1m11.451325862s ago: executing program 32 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000c4312800e0001005f703665727370616e000000680002800400120008000a000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x1f, 0x5, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x0, {0x2, 0xff, 0x4}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000c4312800e0001005f703665727370616e000000680002800400120008000a000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket(0x1f, 0x5, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) (async) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x0, {0x2, 0xff, 0x4}}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 3.485981192s ago: executing program 2 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd2b}}]}, 0x3c}}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='xen_mmu_write_cr3\x00', r3, 0x0, 0x8e5e7c2}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = socket$nl_generic(0x11, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4b) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r10, r10, 0x1, 0x0, 0x0, 0x9, 0xfe, 0x458, 0x58, 0xc3b8, 0x3, 0x5, 'syz0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x338, r12, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x300, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2188}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x13}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')^:-)\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa2f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x453e5c}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40d0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-^-{(&\xc0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@z)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "23830abea6d78ebe6812ce92f5623ab49e60db"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x796}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) sendmmsg$sock(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x1, 0x24040860) 2.752040481s ago: executing program 5 (id=3840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f0a2d07663f92fe8c31c66162b0b634141b1851da96279476cb3", 0x1a}], 0x1, &(0x7f0000000780)=[@flowinfo={{0x14, 0x29, 0xb, 0x28}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts={{0x58, 0x29, 0x36, {0x32, 0x7, '\x00', [@pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0x81, [0x1ff, 0x200, 0x9, 0x8, 0x0]}}, @ra={0x5, 0x2, 0x5}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x3b, 0x10, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast2, @mcast1, @empty]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x89, 0x4, 0x2, 0xe, 0x0, [@mcast2, @loopback]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x198}, 0x20008045) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r4, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000002c0)="be5b365c0254", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000440)="ce90bfdb", 0x4}], 0x1}}], 0x2, 0x4008080) 2.187663144s ago: executing program 0 (id=3845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d000b0000000000000000002100000008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0x11, 0x3, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4042, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'macvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, 0x0}, 0x108) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4], 0x14}}, 0x8081) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x100000000000016a) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a00", @ANYRES32=0x0, @ANYBLOB="7c77da5175bfff51f0"], 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$netlink(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) (rerun: 64) 1.99603576s ago: executing program 2 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd75, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffc0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.787317114s ago: executing program 5 (id=3849): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, [@exit]}, &(0x7f0000000380)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x747, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x3}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) (async) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa70}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004041) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1.704234981s ago: executing program 0 (id=3851): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000305000000000100000000000000", @ANYRES64=r3, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r5, @ANYRES8=0x0], 0x4c}}, 0x4000040) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r7, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040804) 1.652289381s ago: executing program 5 (id=3852): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000540)=0xb5, 0x4) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r0, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) 1.558159966s ago: executing program 4 (id=3853): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000380), 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000001a0000000000000000a650a93210aee8f4d954c898dc362d38f5d35395bb6d9c15c951000000001e618dd59a74dfc5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0xb}}}}]}, 0x40}}, 0x4080) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000004000000000000000", @ANYRES32=r7, @ANYBLOB="0100"/20, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="010000020000000000000000000000100000000000000041d522ed98398e595768707afb02afac118cb3fd614ae6e6e6401deede5bfab061a22d25d5844ae92a042e6bb2d1a1a0e2d18c5c4e080540eb0ecf4c7c1e36c263807bf19403456059bee40952b3bb559d50464b3c8ab2fb2e4a19367b2320579e0650947b51b46eeb09dfd91e"], 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000000000000001e0000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000050000000001000000000000000000000000000092437d94d67510323959d4b507deb46edafe855cf2bec616aa6f6ec2cc66cc9a01932b0141833c2bd0aa8e25727d700f1c87793ca9"], 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f0000000080)="0ab390107f", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c7a, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.50034928s ago: executing program 3 (id=3854): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) 1.470390465s ago: executing program 2 (id=3855): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @empty, 0xd53}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18010401}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x38, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x6d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r8, &(0x7f0000009940)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x3b1}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r13}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r14, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 1.445792593s ago: executing program 5 (id=3856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x8) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x44004) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair(0x15, 0x2, 0xfffffffa, &(0x7f0000000080)) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000c00000002000000e6000000", @ANYRES32=r10, @ANYBLOB="0c00990009000000740000000800a0009e090000080026006c09000008009f0003000000"], 0x40}}, 0x20000000) 1.089341402s ago: executing program 0 (id=3857): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001080)={'ip6tnl0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x6e, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x8000, 0xc, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 1.088006327s ago: executing program 3 (id=3858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xd, 0x3, "a1784b8550b226b7ef"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "3f25378bca"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.087673686s ago: executing program 4 (id=3859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local, {[@rr={0x7, 0x3, 0x2b}]}}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0x2010104, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x40888) 1.087519614s ago: executing program 3 (id=3860): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000180)=""/68, 0x44, 0x0, &(0x7f0000000200)=""/136, 0x88}}, 0x10) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000180)=""/68, 0x44, 0x0, &(0x7f0000000200)=""/136, 0x88}}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) 919.996585ms ago: executing program 4 (id=3861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, &(0x7f0000000140)=0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(r0, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={r4, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0x925, 0xd5bf, 0x4aaa, 0x88, 0x9, 0x59}, 0x9c) splice(r3, &(0x7f0000000400)=0xff90, r2, &(0x7f0000000440), 0x1c43, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r6, 0x4a1e, 0x10, 0xfffffffffffffffd, 0x2}, &(0x7f00000004c0)=0x18) syz_genetlink_get_family_id$team(&(0x7f0000000500), r2) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0xec4e, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x3a, 0x0, r9}, {0x10, 0x8, 0x0, 0x3, 0x0, 0x5, 0x2, 0x5}, {0xcf, 0x4, 0x8}, 0x9, 0x6e6bb3, 0x0, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x2, 0x1, 0x1, 0xd621, 0x5, 0x3}}, 0xe8) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000780)={0xe3, {{0xa, 0x4e20, 0x8000000, @mcast2, 0x532c}}}, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000840)={@local, 0xc, r8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r10 = socket(0x3, 0x800, 0xfff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000008c0)={0x0, 'pim6reg\x00', {0x4}, 0x9}) ioctl$FIOCLEX(r7, 0x5451) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e22, 0xe0000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000009c0)={0x0, 0x4, 0x4}, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r2) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000001f80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000b80)={0x1398, 0x0, 0x208, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8cf388}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x75486c13}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff801}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x10e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "972e483d41e10930a88ee4907549aefd35ba1c748da3a0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "731cc80413af7c48e95ab037deddc210631c7808fcb7bbeb7d79e0f52f6ced39a86c473fda17cba816b78cfb9d363868131161c6a790c878152e5ac5bef21531a562780493d0528575711f35c43988ed08bd75098cabb0649f0df894aff749dbf691dac9bde712c17037b58d77b40bba9d5c5b75f922b51e3dfaaa0009651fb76adf9b39135be17d835519204241bde56f5171fc7ab0350b40e823b2e46c6902b4413b5c6d6a9701410da3645d518b4694af4a18fb673a01b0baa98686e42057572f5c31be90b0a4837e0bccfa4771a99545c7b17e15928d52d55490b079f740268b27d9b6dcd706d4c3a1091104ca58989a80296b4d118396ccc2c64eb24f6cea671aa76d792d27cc37d537c8cd3387c8a2dca37a5357a859ab9a9686df94bb951b023d0e11311999bbbbe3161c5daaa976505624be77346cba5ff668752560c57cdd4e6562ffc06926597a138bfa0f95231f869dc94b1b2ad483c26dd6d1cae1d2bd8b6ef4b4962e265d805e34afe34047c67ae175ec361ff4fa3cc7da6fc986baa368587b7abba159fa3fb3c9d2c860771040db7d8b4219e503f0791ed8c9fd353d5aba5fd346ba9ba773a17b3cf8b46a81a2c568f18f8f126f46ceddb1dfad1ab5055f3696c1ce09287d3f67e9226ad91e07dee5f249113769265e846f6d225beda1a1444c779b9117262512ee3a7aa6f8d5d0c70eecd6ec70411dfeca746ed12c76abf7e615a4c6890e2d4f4fe1cc291bd55cb3afcf77f832754e6b9f0fc785f051e7c78c645bf87e001e1eec7e17ebe3996c564e73fba2eb6472faadd2f458738611413305d80cac413bfbf9aa1adb54521431e3f1ad749a0ac71e066e2c5d27333519123475db0c619f30e635e65adbb94229df31100e1c8dec4b6d57508787a192ad1e03edacef9872ff4283dae7804bf820f490e9fb1eb832c9fa782bd87ca4102d0301b3381ac729010ce187723eca066bc37353b32f566bea5733898e343f89d82a61c645a0e7fada974e3c088fae281554d4bc780a32e25e1f530205123263bf63759f2a57ac671b69dfbf93586752d7508d60be44fb928e14a27cb603653f68c950f97a51ce92a8455e24b9ea27dde6f897d04e4d10f24ea7a710295ad9660c57334d82c52dbdbf1534548f376f667a55de39b0892e7a155f130a3ec49975445d22379cacfc683c53456d7481dfd422c4c9d19ad3fbf48b68e4123482c1cb4259b02982ac63d8faa5cf100901a2868cc16ce01071924033eb7c51e997e9ca744379edccf132aa4af617cda1deac6009e18abe4da2570d986008ffb836e6adf8e05eb6437631442dd98f9b4a5f1a6d5c492ed636fa889dfbcceeb345fdacbfbb02f199b1338e8a1ace977b500815b4750e4955c18167c16aa31e08df70e82aa3d0f62db6b8befbb5277fcb1345edafef027c5aa21bd1ca40e56615fdee13c7261d0a280732e577cf87c80dfe59c9ce30f7586269c11fab4388f278d9bf4a5e74a7c7a0f9cc8c78dc7111802f3139be5856696ab7a823b12d2d388f4130d9b3b3f1f07051d6ae416850dab9021495618430330fa8ddc9fb33b1c11799eb2cd6bb38698f5aa9004a436c350d2d0ade757b11d0a85cf8facf78096d54015ae96a13f11d645e1090b12db202673482034019e83e1cd830632d571dea704128efee930eb9976b8fde5207427ae4540a4b1791ea8ed2514e3d504a9b05edc37d95338090be09e29899b88430b3488efe40d69fed1200b53e20d9f8721f1f02f19ac3d279fcf64559f46704ed7e06882a69091f33baf24b6fea87f62d525848b7561bb2f0b6b4756a45d3d7216dd853c7f57e8a9971bd585d9ed0ce021056413de2a1f892bd9e0250bcf94392c4fa0888e75fb348643faa2bafea972f7316936194f822cef693c263103f1a0deccbe8a983b0034052afb44c693d550bcd90bd6854fd2ad42aae61766f724091d57b02c1c812cf5209b8dc6b9c4ff1ea7d5e680770ebccae5f536e89b5bae4ac5efd8c70c163bff12bcdee8d8ba61041bd412ccdf8479d3c1fdac8d4999f809c8a5ff121fc12b25ddf546a668369bbec55ae6716d68d704113107fb42737f619ac0eee660322f4ec71cf7b75d8cda401829ce078c9b51a18dadef2e8e86bd00f40c0fdaf51a3a45d374a989c678cc70ded363c6ed862ea7eeafd687db3176085c99cb86225b264e1c7edaefe08419fc5d5b2d60086b0807c3222f1e6e8b99e667d615f57f158b042e87f1f6a12269d629aa36bf1b38a2fa9751af76826651117fb875c811084fa9e2998af932e50258022e9bafb70a9ce0e6859e29ac338c41e19cbe9863684f48337946f8021b3fa320aaf3a4c203dba97f2028469e378c0026bac8fa1c6c842351816fb923ae2e71d3c9f2d65237455b0617ca49ccef3f6eafabf55c12e7d78d14cc7b891d0cc5142b3244a1ef8b74b1ced3afd6bb0c7d6f0fa83b8458b519f41ea700979849f41646ead69d8d116131251cfe00b260680a669b61fe4b8e39d5835b20e55154088ba7f82e8ed9de5b25df4a2d976ef6ecf41f141418786694c78513b4ba5cdfeb266728d1a4d95a64323eaa98548b78c71530e64b116d7259e937de86112c0e02bbe858052f91ac4d1ad382dd813d117141c6823ced5fbd3bdea9bc18ae2f01d93646f433eb29cc375b1529f03f4670572925976b1b07afb423fccc1b7806a913ad5745a08cc272f17b22139e42b7a6546bf2d133821abd3851ed79d2d34537ba73319ff0d249ae89738c9db7a0cd255f0d4e92449b11527b4a75f16c90dda24ffc47bb727a9be5851a27fad3d2804105d26bdb6e51331c70954d4caa699baa2b2534e628a293158fffe9459f9be33694b9f61fa1d2a3b90083fdf405d6bb137473de79583182c5520bd33fd87a7f595dc121971a3e5ff504292b15f085de0aa5b24f058581715f7aa6089d0f072dcc4185e7561f41e6f8a92b4f2651e5e165b8ef4efeedc7bcbf13e78716fd14a7d91f06b7e832fa49dbf2108f7d1c940a098240153a492a637e651a7e8033f3ef950a25c0127a5646500a43c9e009d0b3506ca48442f773760fa777562bea89f3909f8b836d3b2fa24d871ff3140a4f75118c7e1639904ebabdb7dfb39ce0654996592a2bb75801ea89586c0d1796ea85df7d512bda320b95ae4361c0041b08c459e42188f643d5e2eb3dc8936ef2e5fdbfe4368d6f8020650ec5efc56593389117aa51d00de0451f1738d181590eb34a11a86883e8f5f409e90406abb83dd2c5fa82142fd3d57b295a4276d84ec8f587346d8903663909b9c4a6c2fccafcab924b69b55a7a89ee369b43895d0924974121d28860bde39c535839ce484d27145649601f7aa0fd2955e694a732b80c4e68a054b70ee6771cc894f1c16aad148b9ae6fda1543942b180f845ea3e333a90d3dacb715ea1b753b0aa8248fe523495498a75ad8acf6454e5dfe8ef45ec4d0687f64c77e3888cdcdbff685aa2c0a54750f66342f04316e00bf69c618bdc4b1f6712cc902e6fa281de21d46d95fd46dd6adcf8a2e886e539ab49d2402deb7c11b1e8074b7739831658d4565fdc21b1aa9c522be717b0e19aed9d60a3599848d8605b9aebe1c0e029e3a89ac57f38f9dbd8991ee6fad884075685238a0808491b7505e6c9cfa25e6150be747a71ac2149368d16d96471c76c163a69f41f97248855bd60aeab832d1d03b69b3cdeeca517ddd5dbd8981290875563dc27c24e13d227cacd4e98d2e27feea7f267e70b328ba7c671865e1914c711ccbe1ce75b32e28640a94ca6e9bac4010bae4e873d3a685d1550b2c76de39e5c59d5d16f504815faf269b49c6897111409b77ff632f0e4ef96fd04601672d6a8ce1fe7c7bf64af40e336788d497d8a6e61111ae1cfc03ab461389ca298b5e8d1e875ae4dafddfa3dd7817ce5e00a6b4952c1287c08657fb241639aa8b2693553eff45973e66136cc18c03210a7ffac58a56d144049fd826ec975c69349d2caa34c0497dd06237fab55fa4ac12cd419a5a9e6f38e23111d7569377fc01388315c8e7707e964922f092ac39438e4a22c7adc2a2f59a2cfc5aff00f40ac8bc84c343c981c85edafff29763e6fb18e16aa60697a87eff010e9ccb9defd126e4e1bca212ecab6a000b9c0154f84ec9712de9bc89fbae7e3f6c53dfff5f3b730c7e15f54850b57abd48b8a3f9db170ab0a46e686282e2e86649e6f5b11e4658991ecf7b8b0fa37f2815995445dfbeae7333b6baa9f7a94ec3aff963e849aa1c00afe82a44b4f4e2c5094057fe2973e69fc66936421740082351774a3750c4c4a34e04b32321714b91efd65fec94713359f3524bc3a971a292dc22d2f6bc0752797fba2f506f8f09b6964a52b59942635cba0fc87a9aa9513e38e5ca3f8e2d1b6668f6387ea14df0a34c3057ca4beb95339d115b2ee53399b0f2e712501db452a8f8fc9db8f83c7a28b30114aebf1118ca5bbe4cf0207558fb97888486d293845856d2f93e37290390b95efb383ae9f60dfaeca4e9b9076e7f93746d6eeb3f6a3f33908f5bcaf421c7c5c829e9ea176e44dcba7ea8163e7fcc3a251660825d401325faac2bdea6c42689c593ca9aab748097094fa10a8057a8e391016caac150fbe450819c786c5d7cec1403f7b3b746c841c0a20e2d28c8894bdb95632a9f521f848c0694580c448a82019ee680174d35b58fa02b2385a059e0e946303296d860c37f344a402468ed86ea563a7e909e2b1f66cb40ff8c8b0c61dd5edb80c3cec2e9d896225f74a631e1155de10eec2dc21bfe234a0661d3479e71479075d7112888dc10a0c6239aad1db474157128344d6e83526ffdfcdb524e9f997017f3ae45758f7f966df1d890f54de82933e561c5f3b1716976195a15670ff272343c217a23c2d414674f50906f2520a7b279898d06e152315165211d21c4c91ef4b2d4f2082083007174187ebfd289fc5c9a3eaab92c9154aadea8d2c35563829bc18f553d3a1b3b4d75806244e4e6f9bb73337de4a0d97c4af6accacfcb14633326c4c5dd3608f3c3a8e51042efd4717a3450f68eecee887641738d7078b2bc2cd9b06b05301bafcea2aeb6f3342e26efe10a0c167e282bf48ee817e6ead39fe59b914e1349aa8034e151954cb9db874f6662952b1f1aad626797f7a82c4dada6d3907cc6ce2144bb51f3c21efe5edc02a830047bd49fba1268b576d0efab311dc4a1b4079dd3c2fe06b3729da15433b37b4f68543d0a193fbe2f1175bf8d77564e4cc9bc2b3012b667bda746bfd93e5ec970bf8c7ef1b9470100437881763e5c05228289a4994a6dcb8dd41f3672882f0c7c30b15510a475ca70b00743595c90e0f3957cb36ac87dad6f6231bf8d9e6b92cf8942e123d542bbf414d6b253d13925b3660d74fca4716cbd7192f9b5fe7aa26ba17f5cdf1f3143741f36594f57cebb4775f03a18cd2f3a68fd5304424d67a159487554d2252f254b9148f4a0d9e740dcee5d981ba098510ad42ceae287572b64d20eb658d8a8fc6b9d70e21c0527a185e62132b373baa7f11af94713cdc5f309460c66f944c95cabd3ab652f9073db09f484af1fdfdf7a553c6126292ac2bcefc01ad2ddd34e8a12144ffb7dd5f6823d3841eb60698ee6ef1127d2a19b63831167c7df7636748aaf5c198d504e156ff2f89b9d1fb8dce2af1df8ec97e76691529005dc139747491edc73b9a78a7bdd52f2bf30eb7e954e5a65fef06c8c42f1a6e646ed1ce1e2d8c3d7712332c2db8d0df24c16f58b24934b633af759064bc3b3"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "df365b18a9b04f9573c1025c50934ac233f2bf56acf10c6501a1818fc2abd80d2b52"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "90901f9bb0888f762eed5c4d1abdc18f36156697441cda"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7902}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fb8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37c1}]}]}]}, 0x1398}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000001fc0), &(0x7f0000002000)=0x4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r2) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x84, r12, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 852.391576ms ago: executing program 3 (id=3862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 793.886796ms ago: executing program 2 (id=3863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10020) 700.249706ms ago: executing program 4 (id=3864): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1400000010"], 0x94}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0xa010101}, 0x10, 0x0, 0xfe79, &(0x7f0000000000)=[@ip_tos_int={{0xfffffffffffffde0, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x4880) 667.017653ms ago: executing program 3 (id=3865): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0003bd7000fedbdf2d1300000005001a0000080000480003000095a49347d8ae2a9527498b6dd4f06f90489cfd42053bee60522585824e966052b42556", @ANYRES32=r2, @ANYBLOB="05001a00010000000c0006000300000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000140)=0x9, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x10) 632.045338ms ago: executing program 0 (id=3866): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0x2b, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_query, @generic={0x4, 0xc, 0x3, 0xcc, 0x7}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x6e7da291, 0xf9, &(0x7f00000005c0)=""/249, 0x41000, 0x40, '\x00', r3, @cgroup_sock=0x2, r2, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x4, 0x7f}, 0x10, 0x0, r1, 0x9, 0x0, &(0x7f0000000700)=[{0x2, 0x4, 0xa, 0xb}, {0x3, 0x2, 0x9, 0x8}, {0x4, 0x4, 0x5}, {0x4, 0x5, 0x5, 0x4}, {0x3, 0x1, 0xb}, {0x3, 0x2, 0x6, 0xc}, {0x0, 0x1, 0xd, 0x5}, {0x5, 0x2, 0xb, 0x9}, {0x2, 0x3, 0xd, 0xb}], 0x10, 0x9000000}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000c80)={"cd8b2b69824b2823a6d51b35ba9443b3", r5, r6, {0x6, 0x100}, {0x8, 0xfffffff7}, 0x1, [0x80c, 0xdc4, 0xabb, 0x200, 0x165, 0x4, 0x10001, 0x0, 0x9, 0x10, 0x4, 0x8000, 0x6, 0x5, 0x1]}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0900804b429dcd51fc2f302afe307775118b6e2c77e77a7d938a52d3cc1f4e8a9ad7aa2c7983cf64be2ba5ea074dfbd0b893bfb1619bccebc0befece726a58c9767920ce75aafaa78b68f187ef63688385ab0a611db01906c92053b526216b9da5e2a80400000000010000daca10bd68daf563f94d9715f78e47379d662e00000000000000", @ANYRES16=r8, @ANYBLOB="010000000000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000900830000000000"], 0x58}}, 0x110) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x40040040}, 0x48040) 472.295412ms ago: executing program 0 (id=3867): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 471.321268ms ago: executing program 3 (id=3868): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0728bd7000fedbdf251c00000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 444.830995ms ago: executing program 2 (id=3869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r1, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010004b0426bd7000fedbdf257a000000be40f33616e35240bd3f33eb1f44c42b24be0f128ddec2e91fe0d6f7627deb279a3d03c88708c9759195ab8282838573e21abc4afcf12bbccd8365e082b94d5e70ac00f9b2bf6c2b20bad24bf0998dd4c51f7c95b0262e8e5906bd5e703eafd4f068", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100ff7f000000000000"], 0x40}}, 0x0) 327.027296ms ago: executing program 5 (id=3870): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000340)='^'}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000001030000000000000000000200000008001a40000020652c000f8008000340000000060800034000034000000401080003400000000708000740000000100400108000"/84], 0x54}}, 0x4000000) 244.487355ms ago: executing program 0 (id=3871): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x5}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 143.260567ms ago: executing program 5 (id=3872): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaaaaaabbac1414baaaaaaaaaaa23ac"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaaaaaabbac1414baaaaaaaaaaa23ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2b, 0xf, 0x10000) (async) socket(0x2b, 0xf, 0x10000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r3, 0x10, 0x78, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8011) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000280)) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r5], 0x38}}, 0x0) 102.752156ms ago: executing program 2 (id=3873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3843c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x80) socketpair(0x0, 0xa, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8c}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa686}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0)='4', 0x1) tee(r7, r6, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x10000061}, 0xc) 48.296487ms ago: executing program 4 (id=3874): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 0s ago: executing program 4 (id=3875): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) kernel console output (not intermixed with test programs): 401] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 384.704072][T14417] netlink: 'syz.1.2318': attribute type 4 has an invalid length. [ 384.963741][T14437] tipc: Invalid UDP bearer configuration [ 384.963799][T14437] tipc: Enabling of bearer rejected, failed to enable media [ 385.029024][T14443] delete_channel: no stack [ 385.183440][T14448] team_slave_0: entered promiscuous mode [ 385.190574][T14448] team_slave_0: entered allmulticast mode [ 385.237447][T14451] tipc: Enabled bearer , priority 0 [ 385.250133][T14451] syzkaller0: entered promiscuous mode [ 385.256965][T14451] syzkaller0: entered allmulticast mode [ 385.357319][T14461] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 385.380695][T14461] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 385.419430][T14451] tipc: Resetting bearer [ 385.436851][T14450] tipc: Resetting bearer [ 385.482295][T14450] tipc: Disabling bearer [ 385.944761][T14491] tipc: Enabling of bearer rejected, failed to enable media [ 386.579813][T14540] netlink: 'syz.2.2358': attribute type 2 has an invalid length. [ 386.765673][T14550] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 386.811166][T14550] netlink: 'syz.2.2363': attribute type 7 has an invalid length. [ 387.057618][T14569] __nla_validate_parse: 44 callbacks suppressed [ 387.057640][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2369'. [ 387.089223][T14569] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2369'. [ 387.099577][T14569] nbd: must specify a device to reconfigure [ 387.629940][T14599] bridge0: entered promiscuous mode [ 387.680942][T14599] macvtap0: entered allmulticast mode [ 387.717877][T14599] bridge0: entered allmulticast mode [ 387.745307][T14599] bridge0: port 3(macvtap0) entered blocking state [ 387.777636][T14599] bridge0: port 3(macvtap0) entered disabled state [ 387.801741][T14599] bridge0: left allmulticast mode [ 387.809161][T14599] bridge0: left promiscuous mode [ 388.020664][T14603] validate_nla: 1 callbacks suppressed [ 388.020687][T14603] netlink: 'syz.4.2377': attribute type 29 has an invalid length. [ 388.068722][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 388.095987][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 388.152247][T14603] gre1: entered promiscuous mode [ 388.207650][T14603] gre1: entered allmulticast mode [ 388.245641][T14616] tipc: Enabling of bearer rejected, already enabled [ 388.264208][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'. [ 388.476162][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 388.726793][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 388.737319][T14657] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 388.750650][T14657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.910669][ T7593] wlan1: Trigger new scan to find an IBSS to join [ 389.143487][T14680] unsupported nla_type 52263 [ 389.551980][T14688] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2397'. [ 389.562859][T14685] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 389.609850][T14691] syzkaller1: entered promiscuous mode [ 389.640333][T14691] syzkaller1: entered allmulticast mode [ 389.710262][T14701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 389.738449][T14696] macvtap0: entered allmulticast mode [ 389.753385][T14696] vlan0: entered allmulticast mode [ 389.768943][T14696] veth0_vlan: entered allmulticast mode [ 389.782111][T14696] team0: Device macvtap0 failed to register rx_handler [ 389.796210][T14696] vlan0: left allmulticast mode [ 389.813323][T14696] veth0_vlan: left allmulticast mode [ 390.380456][T14736] sctp: [Deprecated]: syz.0.2410 (pid 14736) Use of int in max_burst socket option deprecated. [ 390.380456][T14736] Use struct sctp_assoc_value instead [ 390.590208][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 390.640124][T14742] netlink: 'syz.3.2413': attribute type 4 has an invalid length. [ 390.724159][T14742] wlan1: mtu less than device minimum [ 390.947954][T14758] sock: sock_set_timeout: `syz.0.2418' (pid 14758) tries to set negative timeout [ 391.203553][T14776] : renamed from vlan0 (while UP) [ 391.230221][T14776] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 391.246045][T14776] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 391.263341][T14776] tipc: Resetting bearer [ 391.662309][T14802] sctp: [Deprecated]: syz.2.2431 (pid 14802) Use of int in maxseg socket option. [ 391.662309][T14802] Use struct sctp_assoc_value instead [ 391.949986][T14817] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 391.994388][T14817] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 392.006253][T14817] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 392.027356][T14822] openvswitch: netlink: Duplicate or invalid key (type 0). [ 392.037722][T14822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.104797][T14816] netlink: 'syz.4.2436': attribute type 11 has an invalid length. [ 392.114257][T14816] __nla_validate_parse: 6 callbacks suppressed [ 392.114275][T14816] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2436'. [ 392.218031][T14831] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.224761][T14831] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.234978][ T7594] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.250091][ T7594] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.367026][T14844] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2441'. [ 392.449925][T14849] bond0: Error: Cannot enslave bond to itself. [ 392.615288][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 392.631122][T14859] netlink: 'syz.0.2448': attribute type 39 has an invalid length. [ 392.792184][T14865] tipc: Bearer : already 2 bearers with priority 10 [ 392.807420][T14865] tipc: Bearer : trying with adjusted priority [ 392.816462][T14865] tipc: Enabled bearer , priority 9 [ 392.823988][ T7593] wlan1: Trigger new scan to find an IBSS to join [ 392.882467][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 392.914316][ T13] wlan1: Creating new IBSS network, BSSID 66:21:68:b2:02:5f [ 392.951908][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2453'. [ 392.974087][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2453'. [ 393.057311][T14883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2456'. [ 393.146986][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 393.276963][T14891] pim6reg1: entered promiscuous mode [ 393.284027][T14891] pim6reg1: entered allmulticast mode [ 393.466318][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'. [ 393.759411][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 393.861730][T14932] bond5: left promiscuous mode [ 393.877111][T14932] bridge0: port 1(bond5) entered disabled state [ 394.257392][T14949] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 394.897925][T14971] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 395.742488][T15011] tipc: Enabled bearer , priority 0 [ 395.769298][T15011] syzkaller0: entered promiscuous mode [ 395.780094][T15011] syzkaller0: entered allmulticast mode [ 395.801568][T15011] tipc: Resetting bearer [ 395.834015][T15008] tipc: Resetting bearer [ 395.858317][T15008] tipc: Disabling bearer [ 395.989615][T15020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.218672][ T30] audit: type=1800 audit(1757237784.390:4): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2502" name="memory.events" dev="tmpfs" ino=2346 res=0 errno=0 [ 440.026377][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.676160][T15078] team0: Device gtp0 is of different type [ 465.816641][T15075] wg1 speed is unknown, defaulting to 1000 [ 465.846078][T15075] hsr0 speed is unknown, defaulting to 1000 [ 465.939130][T15093] tap0: tun_chr_ioctl cmd 2148553947 [ 465.956090][T15093] __nla_validate_parse: 39 callbacks suppressed [ 465.956109][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2517'. [ 466.388383][T15119] xt_l2tp: unknown flags: 10 [ 466.401141][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 466.526854][T15131] netlink: 'syz.2.2527': attribute type 21 has an invalid length. [ 466.537023][T15131] netlink: 'syz.2.2527': attribute type 6 has an invalid length. [ 466.546631][T15131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2527'. [ 466.600104][T15135] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2529'. [ 466.628725][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.633518][T15138] netlink: 'syz.2.2530': attribute type 178 has an invalid length. [ 466.648236][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 466.658377][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.704442][T15142] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2531'. [ 466.770923][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'. [ 466.856833][T15147] netlink: 'syz.1.2532': attribute type 9 has an invalid length. [ 466.896728][T15147] netlink: 'syz.1.2532': attribute type 9 has an invalid length. [ 467.021567][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 467.045406][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 467.221288][T15167] netlink: 'syz.3.2538': attribute type 16 has an invalid length. [ 467.257902][T15167] netlink: 'syz.3.2538': attribute type 17 has an invalid length. [ 467.284306][T15167] tunl0: left promiscuous mode [ 467.501962][T15167] vlan2: left promiscuous mode [ 467.511316][T15167] bond1: left promiscuous mode [ 467.529300][T15167] gretap1: left promiscuous mode [ 467.545193][T15167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.566095][T15167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.576980][T15167] veth5: left promiscuous mode [ 467.615227][T15167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.630706][T15167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.657569][T15167] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 467.664750][ T1165] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 467.689809][T15168] lo speed is unknown, defaulting to 1000 [ 467.698327][T15177] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 467.739050][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.746377][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.769351][T15190] tipc: Enabled bearer , priority 0 [ 467.797406][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2542'. [ 467.816225][ T7595] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 467.829609][ T7595] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 467.851364][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 467.866851][T15175] tipc: Resetting bearer [ 467.888794][T15168] lo speed is unknown, defaulting to 1000 [ 467.896928][ T1165] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 467.927844][ T1165] bond3: active interface up! [ 467.957599][T15172] tipc: Disabling bearer [ 467.961320][T15202] netlink: 'syz.2.2548': attribute type 1 has an invalid length. [ 467.978070][T15202] netlink: 'syz.2.2548': attribute type 1 has an invalid length. [ 467.988777][T15168] lo speed is unknown, defaulting to 1000 [ 468.127531][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.213842][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.252394][T15215] netlink: 'syz.1.2553': attribute type 28 has an invalid length. [ 468.527179][T15230] nbd: couldn't find device at index 0 [ 468.666256][T15228] openvswitch: netlink: IPv4 tun info is not correct [ 468.681490][T15168] infiniband syz0: set active [ 468.702789][T15168] infiniband syz0: added lo [ 468.705289][T15240] bridge0: entered promiscuous mode [ 468.714251][T15168] syz0: rxe_create_cq: returned err = -12 [ 468.739204][T15168] infiniband syz0: Couldn't create ib_mad CQ [ 468.739952][T15240] bridge0: entered allmulticast mode [ 468.763898][T15168] infiniband syz0: Couldn't open port 1 [ 468.785635][ T6339] lo speed is unknown, defaulting to 1000 [ 468.866229][T15168] RDS/IB: syz0: added [ 468.881082][T15168] smc: adding ib device syz0 with port count 1 [ 468.914986][T15168] smc: ib device syz0 port 1 has pnetid [ 468.923764][ T6339] lo speed is unknown, defaulting to 1000 [ 468.943520][T15168] lo speed is unknown, defaulting to 1000 [ 469.741517][T15168] lo speed is unknown, defaulting to 1000 [ 470.557191][T15168] lo speed is unknown, defaulting to 1000 [ 470.748331][T15344] bond8: entered promiscuous mode [ 470.765882][T15344] bond8: entered allmulticast mode [ 470.782467][T15344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.806690][T15345] tipc: Enabling of bearer rejected, failed to enable media [ 470.862135][T15354] wg1 speed is unknown, defaulting to 1000 [ 470.871341][T15354] hsr0 speed is unknown, defaulting to 1000 [ 471.056723][T15354] lo speed is unknown, defaulting to 1000 [ 471.102952][T15363] tipc: Resetting bearer [ 471.131073][T15363] tipc: Enabling of bearer rejected, already enabled [ 471.358069][T15168] lo speed is unknown, defaulting to 1000 [ 471.764386][T15384] __nla_validate_parse: 8 callbacks suppressed [ 471.764541][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 471.796793][T15384] veth0: entered promiscuous mode [ 471.805198][T15383] veth0: left promiscuous mode [ 471.822455][T15168] lo speed is unknown, defaulting to 1000 [ 471.862830][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 471.985944][T15391] tipc: Enabled bearer , priority 0 [ 472.008425][T15391] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 472.026199][T15391] tipc: Resetting bearer [ 472.065825][T15390] tipc: Disabling bearer [ 472.244955][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 472.381048][T15411] validate_nla: 1 callbacks suppressed [ 472.381065][T15411] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 472.717582][T15428] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.740295][T15428] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.401596][T15461] wg1 speed is unknown, defaulting to 1000 [ 473.409835][T15461] hsr0 speed is unknown, defaulting to 1000 [ 473.430025][T15461] lo speed is unknown, defaulting to 1000 [ 473.757881][T15481] macvtap2: entered allmulticast mode [ 473.768361][T15481] vlan0: entered allmulticast mode [ 473.784125][T15481] veth0_vlan: entered allmulticast mode [ 473.797730][T15481] team0: Device macvtap2 failed to register rx_handler [ 473.821547][T15481] vlan0: left allmulticast mode [ 473.830750][T15481] veth0_vlan: left allmulticast mode [ 473.881306][T15482] tipc: Enabled bearer , priority 0 [ 473.897763][T15484] netlink: 'syz.2.2625': attribute type 1 has an invalid length. [ 473.911106][T15485] syzkaller0: entered promiscuous mode [ 473.932643][T15485] syzkaller0: entered allmulticast mode [ 473.957696][T15479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.060058][T15479] tipc: Resetting bearer [ 474.103238][T15478] tipc: Resetting bearer [ 474.161440][T15478] tipc: Disabling bearer [ 474.192074][T15494] netlink: 'syz.4.2618': attribute type 4 has an invalid length. [ 474.236727][T15498] netlink: 'syz.0.2629': attribute type 2 has an invalid length. [ 474.289438][T15496] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 474.333407][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 474.333734][T15496] syzkaller0: entered promiscuous mode [ 474.366199][T15496] syzkaller0: entered allmulticast mode [ 474.404473][T15508] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2632'. [ 474.879470][T15537] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 474.899645][T15535] netlink: 'syz.1.2638': attribute type 2 has an invalid length. [ 474.929781][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 474.930110][T15535] netlink: 'syz.1.2638': attribute type 8 has an invalid length. [ 474.963154][T15541] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 474.986434][T15541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.008517][T15535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2638'. [ 475.077043][T15541] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 475.450744][T15565] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2648'. [ 475.455410][T15564] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 475.501413][T15564] syzkaller1: entered promiscuous mode [ 475.515574][T15564] syzkaller1: entered allmulticast mode [ 475.615032][T15572] delete_channel: no stack [ 475.790730][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 475.794995][T15582] smc: net device bond0 applied user defined pnetid SYZ2 [ 476.090471][T15599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2663'. [ 476.170792][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 476.299675][ T5868] block nbd2: Receive control failed (result -32) [ 476.455396][T15624] netlink: 'syz.2.2670': attribute type 3 has an invalid length. [ 476.503585][T15625] netlink: 'syz.2.2670': attribute type 3 has an invalid length. [ 476.533884][T15630] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 476.604693][T15624] dvmrp0: entered allmulticast mode [ 476.627273][T15624] dvmrp0: left allmulticast mode [ 476.886846][T15639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.925565][T15641] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 477.055683][T15641] bond8: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.075417][T15641] bond8: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 477.087836][T15641] bond8: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode [ 477.136708][T15657] bond8: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.158124][T15657] bond8: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 477.179636][T15655] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2683'. [ 477.325844][T15666] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.338253][T15666] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.403464][T15666] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.416556][T15666] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.474047][T15666] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.489463][T15666] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.558924][T15666] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.569278][T15666] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.663691][ T7589] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.671933][ T7589] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.692418][ T7591] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.701855][ T7591] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.725981][ T7589] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.734898][ T7589] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.757823][ T7591] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.766376][ T7591] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.838293][T15676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2689'. [ 478.090853][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 478.154089][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 478.174744][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 478.199175][T15698] team0: Mode changed to "activebackup" [ 478.211261][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2696'. [ 478.234110][T15700] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 478.869333][T15743] netlink: 'syz.1.2709': attribute type 11 has an invalid length. [ 479.036560][T15754] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 479.060138][T15757] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 479.107736][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 479.138978][T15757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 479.141104][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 479.192024][T15762] bond9: (slave ip6erspan0): making interface the new active one [ 479.204242][T15762] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 479.288115][T15773] syz.1.2716: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 479.302262][T15775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2717'. [ 479.317081][T15775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2717'. [ 479.334916][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.1.2716 Not tainted syzkaller #0 PREEMPT(full) [ 479.334963][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.334991][T15773] Call Trace: [ 479.334999][T15773] [ 479.335007][T15773] dump_stack_lvl+0x189/0x250 [ 479.335039][T15773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.335063][T15773] ? __pfx__printk+0x10/0x10 [ 479.335089][T15773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 479.335112][T15773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 479.335136][T15773] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 479.335170][T15773] warn_alloc+0x214/0x310 [ 479.335202][T15773] ? stack_depot_save_flags+0x40/0x860 [ 479.335230][T15773] ? __pfx_warn_alloc+0x10/0x10 [ 479.335262][T15773] ? kasan_save_track+0x4f/0x80 [ 479.335286][T15773] ? xskq_create+0x56/0x170 [ 479.335312][T15773] ? xsk_init_queue+0xb0/0x110 [ 479.335336][T15773] ? xsk_setsockopt+0x4dc/0x8d0 [ 479.335359][T15773] ? do_sock_setsockopt+0x17c/0x1b0 [ 479.335378][T15773] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 479.335395][T15773] ? do_syscall_64+0xfa/0x3b0 [ 479.335412][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.335440][T15773] __vmalloc_node_range_noprof+0x125/0x12f0 [ 479.335501][T15773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.335537][T15773] ? __kasan_kmalloc+0x93/0xb0 [ 479.335565][T15773] vmalloc_user_noprof+0xad/0xf0 [ 479.335594][T15773] ? xskq_create+0xbf/0x170 [ 479.335622][T15773] xskq_create+0xbf/0x170 [ 479.335652][T15773] xsk_init_queue+0xb0/0x110 [ 479.335681][T15773] xsk_setsockopt+0x4dc/0x8d0 [ 479.335710][T15773] ? __pfx_xsk_setsockopt+0x10/0x10 [ 479.335735][T15773] ? __pfx_aa_sk_perm+0x10/0x10 [ 479.335768][T15773] ? aa_sock_opt_perm+0xff/0x1b0 [ 479.335789][T15773] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 479.335810][T15773] ? __pfx_xsk_setsockopt+0x10/0x10 [ 479.335837][T15773] do_sock_setsockopt+0x17c/0x1b0 [ 479.335863][T15773] __x64_sys_setsockopt+0x13f/0x1b0 [ 479.335907][T15773] do_syscall_64+0xfa/0x3b0 [ 479.335924][T15773] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.335952][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.335972][T15773] ? clear_bhb_loop+0x60/0xb0 [ 479.335997][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.336023][T15773] RIP: 0033:0x7f3213d8ebe9 [ 479.336042][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.336059][T15773] RSP: 002b:00007f3214b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.336080][T15773] RAX: ffffffffffffffda RBX: 00007f3213fc5fa0 RCX: 00007f3213d8ebe9 [ 479.336095][T15773] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 479.336106][T15773] RBP: 00007f3213e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 479.336118][T15773] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.336130][T15773] R13: 00007f3213fc6038 R14: 00007f3213fc5fa0 R15: 00007ffdfdd11e78 [ 479.336162][T15773] [ 479.336185][T15773] Mem-Info: [ 479.490152][T15775] IPVS: persistence engine module ip_vs_pe_ not found [ 479.519942][T15773] active_anon:6708 inactive_anon:0 isolated_anon:0 [ 479.519942][T15773] active_file:2505 inactive_file:39930 isolated_file:0 [ 479.519942][T15773] unevictable:768 dirty:69 writeback:0 [ 479.519942][T15773] slab_reclaimable:12751 slab_unreclaimable:114752 [ 479.519942][T15773] mapped:28934 shmem:1373 pagetables:1171 [ 479.519942][T15773] sec_pagetables:0 bounce:0 [ 479.519942][T15773] kernel_misc_reclaimable:0 [ 479.519942][T15773] free:1306610 free_pcp:13690 free_cma:0 [ 479.630117][T15780] netlink: 'syz.3.2719': attribute type 1 has an invalid length. [ 479.677067][T15773] Node 0 active_anon:26832kB inactive_anon:0kB active_file:10020kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115736kB dirty:276kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.765662][T15773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.821848][T15773] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.873566][T15773] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 479.906876][T15773] Node 0 DMA32 free:1326344kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26780kB inactive_anon:0kB active_file:10020kB inactive_file:157952kB unevictable:1536kB writepending:276kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:34744kB local_pcp:16444kB free_cma:0kB [ 479.975116][T15773] lowmem_reserve[]: 0 0 1 1 1 [ 479.980077][T15773] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 480.010993][T15773] lowmem_reserve[]: 0 0 0 0 0 [ 480.049294][T15773] Node 1 Normal free:3884684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20128kB local_pcp:10752kB free_cma:0kB [ 480.111806][T15773] lowmem_reserve[]: 0 0 0 0 0 [ 480.128047][T15773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.151257][T15799] tipc: Enabled bearer , priority 0 [ 480.159929][T15773] Node 0 DMA32: 612*4kB (UM) 1121*8kB (UME) 491*16kB (UME) 105*32kB (UM) 177*64kB (UME) 187*128kB (UME) 161*256kB (UM) 108*512kB (U) 50*1024kB (U) 18*2048kB (U) 262*4096kB (UM) = 1315624kB [ 480.183036][T15796] tipc: Resetting bearer [ 480.189687][T15773] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 480.208877][T15773] Node 1 Normal: 201*4kB (U) 49*8kB (UME) 48*16kB (UME) 99*32kB (UME) 34*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3884684kB [ 480.212217][T15806] netlink: 'syz.2.2726': attribute type 24 has an invalid length. [ 480.234093][T15773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.249747][T15773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.267323][T15773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.281129][T15773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.297363][T15773] 43809 total pagecache pages [ 480.302258][T15773] 5 pages in swap cache [ 480.308838][T15773] Free swap = 124976kB [ 480.315162][T15773] Total swap = 124996kB [ 480.319602][T15773] 2097051 pages RAM [ 480.324680][T15773] 0 pages HighMem/MovableOnly [ 480.329412][T15773] 425667 pages reserved [ 480.335040][T15773] 0 pages cma reserved [ 480.342753][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.767759][T15796] tipc: Disabling bearer [ 481.982101][T15819] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 481.990408][T15816] syzkaller0: entered allmulticast mode [ 481.997455][T15819] openvswitch: netlink: Duplicate key (type 0). [ 482.109810][T15828] sit0: entered promiscuous mode [ 482.131644][T15828] netlink: 'syz.4.2733': attribute type 1 has an invalid length. [ 482.431644][T15848] tipc: Enabling of bearer rejected, already enabled [ 482.526782][T15850] __nla_validate_parse: 10 callbacks suppressed [ 482.526803][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 482.547294][T15857] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 482.557267][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 482.566756][T15858] syzkaller0: mtu less than device minimum [ 482.574753][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 482.578253][T15848] netlink: 212320 bytes leftover after parsing attributes in process `syz.1.2739'. [ 482.607848][T15850] macsec2: entered promiscuous mode [ 482.614941][T15850] macsec2: entered allmulticast mode [ 482.622157][T15850] bridge0: port 1(macsec2) entered blocking state [ 482.630479][T15850] bridge0: port 1(macsec2) entered disabled state [ 482.740136][T15855] macsec2: entered promiscuous mode [ 482.746148][T15855] macsec2: entered allmulticast mode [ 482.753217][T15855] bridge0: port 1(macsec2) entered blocking state [ 482.759834][T15855] bridge0: port 1(macsec2) entered disabled state [ 482.911897][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2746'. [ 482.924384][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2746'. [ 482.988894][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2747'. [ 483.165522][T15881] netlink: 'syz.1.2748': attribute type 16 has an invalid length. [ 483.177064][T15881] netlink: 'syz.1.2748': attribute type 17 has an invalid length. [ 483.233830][T15881] erspan0: entered promiscuous mode [ 483.260953][T15881] sit0: left promiscuous mode [ 483.305995][T15875] rdma_rxe: rxe_newlink: failed to add lo [ 483.389108][T15881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.404574][T15881] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.408580][T15891] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 483.419463][T15891] netlink: 'syz.0.2753': attribute type 22 has an invalid length. [ 483.427589][T15891] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2753'. [ 483.439119][T15881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.507931][T15889] veth11: entered promiscuous mode [ 483.525270][T15889] veth11: entered allmulticast mode [ 483.936164][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'. [ 484.189832][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.199769][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.208518][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.219220][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.228849][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.232373][T15918] syzkaller0: entered promiscuous mode [ 484.256790][T15918] syzkaller0: entered allmulticast mode [ 484.428163][T15919] wg1 speed is unknown, defaulting to 1000 [ 484.436835][T15919] hsr0 speed is unknown, defaulting to 1000 [ 484.451563][T15919] lo speed is unknown, defaulting to 1000 [ 485.017132][T15951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2775'. [ 485.273830][T15961] validate_nla: 2 callbacks suppressed [ 485.273858][T15961] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 485.560285][T15975] netlink: 'syz.3.2781': attribute type 30 has an invalid length. [ 485.612224][T15975] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 485.656718][T15975] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 485.733614][T15980] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 485.765048][T15979] delete_channel: no stack [ 485.901089][T15919] chnl_net:caif_netlink_parms(): no params data found [ 486.262983][ T5868] Bluetooth: hci5: command tx timeout [ 486.356266][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.370039][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.387414][T16016] nbd: couldn't find a device at index -373156329 [ 486.412471][T15919] bridge_slave_0: entered allmulticast mode [ 486.427076][T16016] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 486.447104][T15919] bridge_slave_0: entered promiscuous mode [ 486.461909][T16016] nbd: couldn't find a device at index -373156329 [ 486.484584][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.509248][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.530377][T15919] bridge_slave_1: entered allmulticast mode [ 486.548374][T15919] bridge_slave_1: entered promiscuous mode [ 486.560596][T16006] syzkaller1: entered promiscuous mode [ 486.577088][T16006] syzkaller1: entered allmulticast mode [ 486.746705][T15919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.782122][T15919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.106226][T15919] team0: Port device team_slave_0 added [ 487.129296][T15919] team0: Port device team_slave_1 added [ 487.225870][T15919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.233128][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.266884][T15919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.287786][T15919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.297294][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.329622][T15919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.450849][T15919] hsr_slave_0: entered promiscuous mode [ 487.462169][T15919] hsr_slave_1: entered promiscuous mode [ 487.472144][T15919] debugfs: 'hsr0' already exists in 'hsr' [ 487.479035][T15919] Cannot create hsr debugfs directory [ 487.572041][T16044] syzkaller0: entered allmulticast mode [ 487.630882][T16044] syzkaller0: mtu less than device minimum [ 488.211776][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880311fb400: rx timeout, send abort [ 488.221995][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880311fb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 488.353064][ T5868] Bluetooth: hci5: command tx timeout [ 489.730571][T16071] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 489.766497][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2809'. [ 489.938925][T15919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.958219][T15919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.966302][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 490.058576][T15919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.070110][T15919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.178386][T15919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.188988][T15919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.230323][T16101] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2816'. [ 490.278577][T15919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.293242][T15919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.419784][T16109] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 490.428779][ T5868] Bluetooth: hci5: command tx timeout [ 490.447234][T16109] netlink: 'syz.2.2820': attribute type 10 has an invalid length. [ 490.457547][T16109] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2820'. [ 490.470609][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2819'. [ 490.651328][T15919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.675455][T15919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 490.691167][T15919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.724596][T15919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.081709][T16155] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2827'. [ 491.138999][T15919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.191374][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.227479][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.234741][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.286607][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.293943][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.556977][T16179] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 491.579152][T16179] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2834'. [ 491.583326][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 491.619593][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 491.928875][T16198] sctp: [Deprecated]: syz.3.2840 (pid 16198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.928875][T16198] Use struct sctp_sack_info instead [ 491.930506][T15919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.128800][T15919] veth0_vlan: entered promiscuous mode [ 492.160631][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2845'. [ 492.201320][T15919] veth1_vlan: entered promiscuous mode [ 492.278187][T16212] netlink: 'syz.3.2845': attribute type 12 has an invalid length. [ 492.360848][T15919] veth0_macvtap: entered promiscuous mode [ 492.475385][T15919] veth1_macvtap: entered promiscuous mode [ 492.502994][ T5868] Bluetooth: hci5: command tx timeout [ 492.551700][T15919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.585556][T15919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.698318][ T7597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.724582][ T7597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.744832][ T7597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.771095][ T7597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.890715][T16250] netlink: 'syz.3.2855': attribute type 1 has an invalid length. [ 492.968949][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.009408][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.131536][ T7588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.142183][ T7588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.493968][T16276] gre0: entered allmulticast mode [ 493.770789][T16299] netlink: 'syz.4.2867': attribute type 13 has an invalid length. [ 493.798132][T16303] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 493.849250][T16297] bridge0: entered promiscuous mode [ 493.866649][T16297] macsec1: entered promiscuous mode [ 493.897631][T16297] macsec1: entered allmulticast mode [ 493.908747][T16297] bridge0: entered allmulticast mode [ 493.928442][T16310] delete_channel: no stack [ 493.938401][T16297] bridge0: port 3(macsec1) entered blocking state [ 493.970250][T16297] bridge0: port 3(macsec1) entered disabled state [ 494.129636][T16297] bridge0: left allmulticast mode [ 494.162988][T16297] bridge0: left promiscuous mode [ 494.387414][T16299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.475936][T16313] tipc: Started in network mode [ 494.491049][T16313] tipc: Node identity fffeffff, cluster identity 4711 [ 494.506988][T16313] tipc: Node number set to 4294901759 [ 494.528701][T16317] lo: entered promiscuous mode [ 494.536930][T16317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.696006][T16336] netlink: 'syz.2.2877': attribute type 4 has an invalid length. [ 494.773303][T16341] __nla_validate_parse: 5 callbacks suppressed [ 494.773325][T16341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2877'. [ 495.081679][T16357] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 495.101692][T16359] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 495.221699][T16369] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 495.256453][T16369] netlink: 'syz.1.2886': attribute type 28 has an invalid length. [ 495.314431][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 495.444690][T16378] validate_nla: 4 callbacks suppressed [ 495.444710][T16378] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 495.459178][T16378] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2890'. [ 495.468681][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2890'. [ 495.474168][T16373] 8021q: adding VLAN 0 to HW filter on device bond8 [ 495.555572][T16376] sch_tbf: burst 0 is lower than device bridge7 mtu (1514) ! [ 495.643394][T16380] veth9: entered promiscuous mode [ 495.729446][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2891'. [ 495.929629][T16394] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 496.047188][T16397] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2896'. [ 496.057404][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.066907][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.075991][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.085481][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.094149][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.225810][T16399] wg1 speed is unknown, defaulting to 1000 [ 496.259922][T16399] hsr0 speed is unknown, defaulting to 1000 [ 496.294454][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 496.310707][T16399] lo speed is unknown, defaulting to 1000 [ 496.730421][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 496.914577][T16432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 496.955697][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 496.982950][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 497.180414][T16449] netlink: 'syz.2.2912': attribute type 5 has an invalid length. [ 497.199403][T16449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.288932][T16399] chnl_net:caif_netlink_parms(): no params data found [ 497.347863][T16459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2916'. [ 497.661564][T16481] netlink: 'syz.3.2920': attribute type 5 has an invalid length. [ 497.729145][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.739880][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.758225][T16399] bridge_slave_0: entered allmulticast mode [ 497.777902][T16399] bridge_slave_0: entered promiscuous mode [ 497.800519][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.808748][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.816968][T16399] bridge_slave_1: entered allmulticast mode [ 497.828711][T16399] bridge_slave_1: entered promiscuous mode [ 497.956174][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.026985][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.130534][T16399] team0: Port device team_slave_0 added [ 498.140131][T16503] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 498.152072][T16399] team0: Port device team_slave_1 added [ 498.183379][ T5868] Bluetooth: hci0: command tx timeout [ 498.264363][T16504] bond7: (slave bridge8): making interface the new active one [ 498.273257][T16504] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 498.298918][T16503] tipc: Enabled bearer , priority 0 [ 498.321813][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.340944][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.398365][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.410619][T16504] syzkaller0: entered promiscuous mode [ 498.421650][T16504] syzkaller0: entered allmulticast mode [ 498.441028][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.450877][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.477733][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.500854][T16503] tipc: Resetting bearer [ 498.523343][T16502] tipc: Resetting bearer [ 498.551918][T16502] tipc: Disabling bearer [ 498.649558][T16399] hsr_slave_0: entered promiscuous mode [ 498.675751][T16399] hsr_slave_1: entered promiscuous mode [ 498.710348][T16399] debugfs: 'hsr0' already exists in 'hsr' [ 498.731492][T16399] Cannot create hsr debugfs directory [ 498.814593][T16535] netem: change failed [ 498.871519][T16535] netem: change failed [ 499.207919][T16399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.239774][T16551] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 499.277864][T16557] syzkaller0: entered promiscuous mode [ 499.300417][T16557] syzkaller0: entered allmulticast mode [ 499.312440][T16559] netlink: 'syz.3.2941': attribute type 22 has an invalid length. [ 499.330767][T16399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.357012][T16551] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 499.441506][T16399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.637026][T16572] gre5: entered promiscuous mode [ 499.643667][T16572] gre5: entered allmulticast mode [ 499.680072][T16399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.876484][T16591] __nla_validate_parse: 9 callbacks suppressed [ 499.876507][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 499.991060][T16593] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 500.032290][T16399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.040989][T16593] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 500.061236][T16593] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 500.076303][T16593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.108934][T16399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.142146][T16596] bond6: (slave veth7): Releasing backup interface [ 500.170691][T16596] bond9: (slave ip6erspan0): Releasing active interface [ 500.205914][T16399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.231926][T16399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.272840][ T5868] Bluetooth: hci0: command tx timeout [ 500.402168][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.458370][T16399] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.506300][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.513631][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.541151][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.548474][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.556596][T16616] sctp: [Deprecated]: syz.4.2953 (pid 16616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.556596][T16616] Use struct sctp_sack_info instead [ 501.034749][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.148611][T16399] veth0_vlan: entered promiscuous mode [ 501.174604][T16640] netlink: 'syz.4.2958': attribute type 4 has an invalid length. [ 501.198432][T16638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.239098][T16133] lo speed is unknown, defaulting to 1000 [ 501.298940][T16649] netlink: 'syz.4.2958': attribute type 4 has an invalid length. [ 501.370446][T16399] veth1_vlan: entered promiscuous mode [ 501.459212][T16399] veth0_macvtap: entered promiscuous mode [ 501.472258][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.488463][T16399] veth1_macvtap: entered promiscuous mode [ 501.490063][T16656] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2961'. [ 501.506231][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 501.537940][T16656] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2961'. [ 501.551401][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.556444][T16656] netlink: 'syz.4.2961': attribute type 3 has an invalid length. [ 501.582116][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.583728][T16656] netlink: 'syz.4.2961': attribute type 2 has an invalid length. [ 501.611680][ T7588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.632732][T16656] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2961'. [ 501.649077][ T7588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.690515][ T7597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.711472][ T7597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.842454][ T7596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.865560][ T7596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.933053][T16672] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2965'. [ 501.957529][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.981322][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.142345][T16678] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2966'. [ 502.158683][T16682] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 502.239733][T16678] netlink: 'syz.2.2966': attribute type 58 has an invalid length. [ 502.249315][T16679] netlink: 'syz.2.2966': attribute type 58 has an invalid length. [ 502.269328][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'. [ 502.286433][T16678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'. [ 502.346254][ T5881] Bluetooth: hci0: command tx timeout [ 502.759931][T16713] Bluetooth: MGMT ver 1.23 [ 502.812139][T16710] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 502.961134][T16721] netlink: 'syz.2.2980': attribute type 142 has an invalid length. [ 502.988180][T16722] sctp: [Deprecated]: syz.4.2977 (pid 16722) Use of int in max_burst socket option. [ 502.988180][T16722] Use struct sctp_assoc_value instead [ 503.188823][T16720] delete_channel: no stack [ 503.771318][T16773] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2988'. [ 504.422744][ T5881] Bluetooth: hci0: command 0x0419 tx timeout [ 504.638056][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.658600][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.694728][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.714834][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.723072][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.775127][T16787] bond0 (unregistering): Released all slaves [ 504.809589][T16792] netlink: 'syz.0.2997': attribute type 3 has an invalid length. [ 504.875432][T16795] wg1 speed is unknown, defaulting to 1000 [ 504.883735][T16795] hsr0 speed is unknown, defaulting to 1000 [ 504.891623][T16795] lo speed is unknown, defaulting to 1000 [ 505.133231][T16808] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 505.189536][T16808] syzkaller0: entered promiscuous mode [ 505.196578][T16808] syzkaller0: entered allmulticast mode [ 505.300247][T16814] openvswitch: netlink: Message has 4 unknown bytes. [ 505.310450][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.505907][ T5868] Bluetooth: hci0: command 0x0419 tx timeout [ 506.825278][ T5868] Bluetooth: hci2: command tx timeout [ 507.244535][T16840] sctp: [Deprecated]: syz.2.3011 (pid 16840) Use of int in maxseg socket option. [ 507.244535][T16840] Use struct sctp_assoc_value instead [ 507.647555][T16795] chnl_net:caif_netlink_parms(): no params data found [ 507.769833][T16873] netlink: 'syz.3.3020': attribute type 7 has an invalid length. [ 507.816717][T16873] : entered promiscuous mode [ 507.958708][T16889] __nla_validate_parse: 3 callbacks suppressed [ 507.958731][T16889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3024'. [ 507.978522][T16795] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.988691][T16795] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.997941][T16795] bridge_slave_0: entered allmulticast mode [ 508.009033][T16795] bridge_slave_0: entered promiscuous mode [ 508.056763][T16795] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.069674][T16795] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.079861][T16795] bridge_slave_1: entered allmulticast mode [ 508.098608][T16795] bridge_slave_1: entered promiscuous mode [ 508.217926][T16795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.242011][T16795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.269111][T16894] tipc: Enabling not permitted [ 508.275292][T16894] tipc: Enabling of bearer rejected, failed to enable media [ 508.358694][T16795] team0: Port device team_slave_0 added [ 508.391750][T16795] team0: Port device team_slave_1 added [ 508.496475][T16795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.511039][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.549770][T16795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.574208][T16795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.581237][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.608034][T16903] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 508.608339][T16795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.623389][T16903] nbd: error processing sock list [ 508.633041][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3031'. [ 508.638312][T16903] block nbd4: shutting down sockets [ 508.781489][T16795] hsr_slave_0: entered promiscuous mode [ 508.809388][T16795] hsr_slave_1: entered promiscuous mode [ 508.822240][T16795] debugfs: 'hsr0' already exists in 'hsr' [ 508.829410][T16795] Cannot create hsr debugfs directory [ 508.853880][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.854615][T16913] netlink: 'syz.0.3033': attribute type 5 has an invalid length. [ 508.884295][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.909194][ T5868] Bluetooth: hci2: command tx timeout [ 508.934117][T16917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.156696][T16929] syzkaller1: entered promiscuous mode [ 509.163228][T16929] syzkaller1: entered allmulticast mode [ 509.179164][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3037'. [ 509.179164][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3037'. [ 509.257948][T16795] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.268875][T16795] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.350221][T16795] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.390350][T16795] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.455099][T16942] netlink: 'syz.0.3042': attribute type 4 has an invalid length. [ 509.488686][T16795] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.499117][T16795] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.571368][T16795] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.612321][T16795] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.822428][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 509.931291][T16959] tipc: Enabling of bearer rejected, failed to enable media [ 509.976231][T16795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.020714][T16795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.057416][T16795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.089397][T16795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.100947][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 510.149847][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 510.190421][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 510.440935][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3059'. [ 510.530384][T16795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.606517][T16795] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.684538][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.691730][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.722439][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.729678][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.777396][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'. [ 510.983704][ T5868] Bluetooth: hci2: command tx timeout [ 511.394068][T16795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.428852][T17054] syzkaller0: entered promiscuous mode [ 511.440412][T17054] syzkaller0: entered allmulticast mode [ 512.109017][T16795] veth0_vlan: entered promiscuous mode [ 512.158235][T16795] veth1_vlan: entered promiscuous mode [ 512.330938][T16795] veth0_macvtap: entered promiscuous mode [ 512.475330][T16795] veth1_macvtap: entered promiscuous mode [ 512.554489][T17108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.608062][T16795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.634987][T16795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.694750][ T7595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.720697][ T7595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.750642][T17110] tipc: Enabling of bearer rejected, failed to enable media [ 512.770377][ T7595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.800021][ T7595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.062737][ T5868] Bluetooth: hci2: command tx timeout [ 513.184649][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.194996][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.204109][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.224167][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.231921][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.919683][T17127] wg1 speed is unknown, defaulting to 1000 [ 513.985835][T17127] hsr0 speed is unknown, defaulting to 1000 [ 513.999068][T17137] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 514.015471][ T7595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.024437][T17127] lo speed is unknown, defaulting to 1000 [ 514.051078][ T7595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.330088][ T7596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.341258][ T7596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.558336][T17160] __nla_validate_parse: 5 callbacks suppressed [ 514.558359][T17160] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3096'. [ 514.608156][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'. [ 514.649472][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'. [ 514.672741][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3096'. [ 514.726627][T17170] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 514.737423][T17172] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 515.205452][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 515.277476][T17127] chnl_net:caif_netlink_parms(): no params data found [ 515.303764][ T5868] Bluetooth: hci4: command tx timeout [ 515.496734][T17127] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.507053][T17127] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.515441][T17127] bridge_slave_0: entered allmulticast mode [ 515.525191][T17127] bridge_slave_0: entered promiscuous mode [ 515.526239][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 515.541547][T17127] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.570804][T17127] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.590301][T17127] bridge_slave_1: entered allmulticast mode [ 515.611406][T17127] bridge_slave_1: entered promiscuous mode [ 515.668979][T17219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.851482][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3115'. [ 515.911242][T17127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.928124][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 515.948122][T17239] macsec2: entered promiscuous mode [ 515.954064][T17239] macsec2: entered allmulticast mode [ 515.960170][T17239] bridge0: port 1(macsec2) entered blocking state [ 515.968398][T17239] bridge0: port 1(macsec2) entered disabled state [ 516.004995][T17242] netlink: 'syz.0.3117': attribute type 11 has an invalid length. [ 516.013820][T17242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3117'. [ 516.029680][T17127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.102817][T17242] IPv6: sit1: Disabled Multicast RS [ 516.135988][T17250] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3119'. [ 516.187651][T17248] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 516.223211][T17248] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 516.264288][T17127] team0: Port device team_slave_0 added [ 516.289676][T17127] team0: Port device team_slave_1 added [ 516.384819][T17127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.401179][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.442911][T17127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.456766][T17127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.465210][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.491959][T17127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.757960][T17127] hsr_slave_0: entered promiscuous mode [ 516.783665][T17127] hsr_slave_1: entered promiscuous mode [ 516.803914][T17127] debugfs: 'hsr0' already exists in 'hsr' [ 516.853165][T17127] Cannot create hsr debugfs directory [ 517.383248][ T5868] Bluetooth: hci4: command tx timeout [ 518.171254][T17127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 518.207747][T17127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 518.242232][T17127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 518.280243][T17341] netlink: 'syz.4.3147': attribute type 21 has an invalid length. [ 518.287660][T17127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 518.297958][T17341] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.312281][T17341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.319796][T17341] IPv6: NLM_F_CREATE should be set when creating new route [ 518.327731][T17341] IPv6: NLM_F_CREATE should be set when creating new route [ 518.335164][T17341] IPv6: NLM_F_CREATE should be set when creating new route [ 518.745010][T17127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.821677][T17127] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.885304][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.892572][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.933111][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.940376][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.991113][T17377] tap0: tun_chr_ioctl cmd 2148553947 [ 519.019265][T17376] tap0: tun_chr_ioctl cmd 1074025673 [ 519.035576][T17376] tap0: tun_chr_ioctl cmd 1074025673 [ 519.043800][T17377] tap0: tun_chr_ioctl cmd 2148553947 [ 519.068896][T17375] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.094685][T17375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.273073][T17375] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.286956][T17375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.395661][T17375] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.428933][T17375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.464349][ T5868] Bluetooth: hci4: command tx timeout [ 519.514762][T17375] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.527577][T17375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.641881][T17407] __nla_validate_parse: 4 callbacks suppressed [ 519.641900][T17407] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3163'. [ 519.736771][ T7591] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.754250][ T7591] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.801172][ T7597] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.814094][ T7597] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.850717][ T7592] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.860054][ T7592] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.891481][ T7592] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.910402][ T7592] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.004432][T17127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.292115][T17427] syzkaller0: entered allmulticast mode [ 520.300961][T17429] veth0: entered promiscuous mode [ 520.460314][T17432] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 520.473816][T17435] veth0: left promiscuous mode [ 521.546821][ T5868] Bluetooth: hci4: command tx timeout [ 522.233354][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3174'. [ 522.366569][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3175'. [ 522.519854][T17127] veth0_vlan: entered promiscuous mode [ 522.546572][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 522.615469][T17127] veth1_vlan: entered promiscuous mode [ 522.815201][T17127] veth0_macvtap: entered promiscuous mode [ 522.878999][T17127] veth1_macvtap: entered promiscuous mode [ 522.951095][T17485] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3182'. [ 522.976091][T17127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.988137][T17481] syzkaller0: entered promiscuous mode [ 523.018992][T17481] syzkaller0: entered allmulticast mode [ 523.056542][T17127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.085068][T17480] tipc: Enabled bearer , priority 0 [ 523.129450][T17491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 523.181580][ T7592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.206183][ T7592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.238651][T17495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'. [ 523.291740][T17480] tipc: Resetting bearer [ 523.351955][T17480] tipc: Disabling bearer [ 523.370634][ T7592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.381641][ T7592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.414356][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.428422][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.466899][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.478469][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.498868][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.509971][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.526082][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.556809][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.598650][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.620160][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.668362][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.695115][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.732441][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.742339][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.760421][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.769021][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.804720][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.815292][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.837557][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.852137][T17517] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 523.852137][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.852162][T17517] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3193'. [ 523.862200][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.889566][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.914916][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.934833][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.941368][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.950770][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 523.958059][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.015633][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.028148][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.040561][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.072408][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.081806][T17524] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3195'. [ 524.097732][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.111253][T17524] nbd: illegal input index -8454144 [ 524.120926][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.131726][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.140871][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.148291][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.157653][T17502] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 524.901189][T17568] netlink: 'syz.0.3208': attribute type 4 has an invalid length. [ 524.934059][T17569] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3205'. [ 524.955924][T17559] wg1 speed is unknown, defaulting to 1000 [ 524.967820][T17559] hsr0 speed is unknown, defaulting to 1000 [ 524.990619][T17559] lo speed is unknown, defaulting to 1000 [ 525.172003][T17571] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3211'. [ 525.195964][T17574] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 525.448042][T17582] netlink: 'syz.0.3213': attribute type 4 has an invalid length. [ 525.600225][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3215'. [ 525.697701][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 525.709206][T17591] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 525.753609][T17591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.799253][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.816040][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.826487][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.838458][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.849674][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.248772][T17594] wg1 speed is unknown, defaulting to 1000 [ 526.270712][T17610] wg1 speed is unknown, defaulting to 1000 [ 526.274114][T17594] hsr0 speed is unknown, defaulting to 1000 [ 526.295370][T17594] lo speed is unknown, defaulting to 1000 [ 526.300280][T17610] hsr0 speed is unknown, defaulting to 1000 [ 526.558979][T17624] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3225'. [ 526.615659][T17626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3226'. [ 526.742282][T17610] lo speed is unknown, defaulting to 1000 [ 526.959998][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3228'. [ 527.287551][T17594] chnl_net:caif_netlink_parms(): no params data found [ 527.410981][T17643] openvswitch: netlink: IP tunnel TTL not specified. [ 527.489962][T17644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3231'. [ 527.836908][T17656] sctp: [Deprecated]: syz.4.3234 (pid 17656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.836908][T17656] Use struct sctp_sack_info instead [ 527.854088][T17655] sctp: [Deprecated]: syz.4.3234 (pid 17655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.854088][T17655] Use struct sctp_sack_info instead [ 527.887576][T17656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'. [ 527.914399][T17655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'. [ 527.956400][ T5881] Bluetooth: hci1: command tx timeout [ 528.092110][T17594] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.110239][T17594] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.131237][T17594] bridge_slave_0: entered allmulticast mode [ 528.149214][T17594] bridge_slave_0: entered promiscuous mode [ 528.158383][T17660] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 528.173841][T17594] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.177085][T17665] netlink: 'syz.3.3238': attribute type 13 has an invalid length. [ 528.182097][T17594] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.200870][T17594] bridge_slave_1: entered allmulticast mode [ 528.209605][T17594] bridge_slave_1: entered promiscuous mode [ 528.420459][T17594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.431662][T17676] netlink: 'syz.3.3241': attribute type 2 has an invalid length. [ 528.464278][T17594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.620872][T17594] team0: Port device team_slave_0 added [ 528.650530][T17594] team0: Port device team_slave_1 added [ 528.767954][T17594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.783571][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.828517][T17594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.911125][T17594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.943987][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.030926][T17594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.043880][T17694] veth0: entered promiscuous mode [ 529.222343][T17694] veth0: left promiscuous mode [ 529.229493][T17712] net veth1_virt_wifi .: renamed from virt_wifi0 [ 529.252093][T17718] netlink: 'syz.5.3254': attribute type 11 has an invalid length. [ 529.282235][T17594] hsr_slave_0: entered promiscuous mode [ 529.294917][T17594] hsr_slave_1: entered promiscuous mode [ 529.310147][T17594] debugfs: 'hsr0' already exists in 'hsr' [ 529.336209][T17594] Cannot create hsr debugfs directory [ 529.749218][T17736] sctp: [Deprecated]: syz.0.3261 (pid 17736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.749218][T17736] Use struct sctp_sack_info instead [ 530.020282][T17751] __nla_validate_parse: 5 callbacks suppressed [ 530.020305][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 530.037292][ T5881] Bluetooth: hci1: command tx timeout [ 530.088704][T17594] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.106578][T17594] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.129077][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 530.158167][T17757] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3269'. [ 530.160587][T17759] tipc: Enabling of bearer rejected, failed to enable media [ 530.277915][T17594] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.306862][T17594] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.426700][T17763] syzkaller0: entered promiscuous mode [ 530.432306][T17763] syzkaller0: entered allmulticast mode [ 530.528058][T17771] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3272'. [ 530.565087][T17594] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.575019][T17594] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.691373][T17594] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.718564][T17594] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.870585][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 530.928054][T17781] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3275'. [ 531.163012][T17594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.247997][T17594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.311799][T17594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.376766][T17594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.785261][T17594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.849903][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 531.860595][T17594] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.919146][ T7591] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.926443][ T7591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.972273][T17832] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3285'. [ 532.030074][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.037310][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.113147][ T5881] Bluetooth: hci1: command tx timeout [ 532.386151][T17858] tc_dump_action: action bad kind [ 532.555776][T17866] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3294'. [ 532.632391][T17594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.819714][T17594] veth0_vlan: entered promiscuous mode [ 532.890793][T17594] veth1_vlan: entered promiscuous mode [ 533.026664][T17594] veth0_macvtap: entered promiscuous mode [ 533.075351][T17884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3299'. [ 533.104561][T17594] veth1_macvtap: entered promiscuous mode [ 533.298125][T17594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.355185][T17594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.408349][ T7597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.431439][ T7597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.452367][T17891] tipc: Started in network mode [ 533.459149][T17891] tipc: Node identity 4e11ba136be3, cluster identity 4711 [ 533.473316][T17891] tipc: Enabled bearer , priority 0 [ 533.481257][T17891] syzkaller0: entered promiscuous mode [ 533.487984][T17891] syzkaller0: entered allmulticast mode [ 533.519577][ T7597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.530360][ T7597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.571877][T17891] tipc: Resetting bearer [ 533.645324][T17890] tipc: Resetting bearer [ 533.680092][T17890] tipc: Disabling bearer [ 533.756222][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.811387][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.921170][ T7596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.950525][ C1] vcan0: j1939_session_tx_dat: 0xffff88806ba87800: queue data error: -100 [ 533.956234][ T7596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.154598][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.175123][T17920] vlan2: entered allmulticast mode [ 534.183957][ T5881] Bluetooth: hci1: command tx timeout [ 534.196594][T17920] bond0: entered allmulticast mode [ 534.207607][T17920] bond_slave_0: entered allmulticast mode [ 534.220249][T17920] bond_slave_1: entered allmulticast mode [ 534.409226][T17930] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.417024][T17930] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.559478][T17930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.580299][T17930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.780747][ T7595] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.801390][ T7595] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.935603][ T7595] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.966656][ T7595] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.005762][T17943] IPv6: sit2: Disabled Multicast RS [ 535.016127][T17943] sit2: entered allmulticast mode [ 535.503356][T17960] __nla_validate_parse: 3 callbacks suppressed [ 535.503376][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 535.549425][T17960] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3325'. [ 535.983892][ T5875] syz_tun (unregistering): left promiscuous mode [ 536.031900][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.048751][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.059547][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.068793][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.081628][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.151084][T17975] wg1 speed is unknown, defaulting to 1000 [ 536.160016][T17975] hsr0 speed is unknown, defaulting to 1000 [ 536.168753][T17975] lo speed is unknown, defaulting to 1000 [ 536.217487][T17981] batadv_slave_0: entered promiscuous mode [ 536.304676][T17979] batadv_slave_0: left promiscuous mode [ 536.617253][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 536.629400][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3336'. [ 536.650571][T17994] delete_channel: no stack [ 536.793833][T18000] netlink: 'syz.5.3339': attribute type 16 has an invalid length. [ 536.805283][T18000] netlink: 'syz.5.3339': attribute type 17 has an invalid length. [ 536.843280][T18000] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 536.958237][T18006] tipc: Started in network mode [ 536.971363][T18006] tipc: Node identity be7fdf428d1b, cluster identity 4711 [ 537.005353][T18006] tipc: Enabled bearer , priority 0 [ 537.032169][T18012] syzkaller0: entered promiscuous mode [ 537.040931][T18012] syzkaller0: entered allmulticast mode [ 537.050666][T17975] chnl_net:caif_netlink_parms(): no params data found [ 537.212240][T18012] tipc: Resetting bearer [ 537.244493][T18005] tipc: Resetting bearer [ 537.271244][T18005] tipc: Disabling bearer [ 537.370740][T18023] unknown channel width for channel at 909000KHz? [ 537.412390][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.421824][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.431926][T17975] bridge_slave_0: entered allmulticast mode [ 537.440687][T17975] bridge_slave_0: entered promiscuous mode [ 537.450408][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.458449][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.468039][T17975] bridge_slave_1: entered allmulticast mode [ 537.484483][T17975] bridge_slave_1: entered promiscuous mode [ 537.494510][T18023] openvswitch: netlink: Missing key (keys=40, expected=80) [ 537.595819][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3349'. [ 537.820663][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.855264][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.901701][T18045] openvswitch: netlink: IPv4 tun info is not correct [ 537.941263][T18045] openvswitch: netlink: IPv4 tun info is not correct [ 537.977460][T17975] team0: Port device team_slave_0 added [ 538.081463][T17975] team0: Port device team_slave_1 added [ 538.183636][ T5868] Bluetooth: hci3: command tx timeout [ 538.191769][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 538.235179][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 538.321647][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.362974][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.407710][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.421628][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.430812][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.458788][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.525707][T18076] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 538.678406][T18084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3360'. [ 538.970314][T18076] team0 (unregistering): Port device team_slave_0 removed [ 538.971890][T18098] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3365'. [ 538.989480][T18098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.009504][T18076] team0 (unregistering): Port device team_slave_1 removed [ 539.085532][T17975] hsr_slave_0: entered promiscuous mode [ 539.103374][T17975] hsr_slave_1: entered promiscuous mode [ 539.109813][T17975] debugfs: 'hsr0' already exists in 'hsr' [ 539.135958][T17975] Cannot create hsr debugfs directory [ 539.559033][T18125] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3372'. [ 539.830901][T17975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.842420][T17975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.877670][T18133] netlink: 'syz.5.3376': attribute type 2 has an invalid length. [ 539.967889][T17975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.987251][T17975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.048974][T18143] tipc: Enabled bearer , priority 0 [ 540.058972][T18143] syzkaller0: entered promiscuous mode [ 540.070836][T18143] syzkaller0: entered allmulticast mode [ 540.111133][T17975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.122540][T17975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.178323][T18143] tipc: Resetting bearer [ 540.256560][T17975] bond0: (slave netdevsim0): Releasing backup interface [ 540.265087][ T5868] Bluetooth: hci3: command tx timeout [ 540.298056][T18142] tipc: Resetting bearer [ 540.342422][T18142] tipc: Disabling bearer [ 540.449752][T18153] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.537458][T18153] bridge_slave_1 (unregistering): left allmulticast mode [ 540.546006][T18153] bridge_slave_1 (unregistering): left promiscuous mode [ 540.557986][T18153] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.615908][T18158] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 540.746798][T17975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 540.767536][ T24] IPVS: starting estimator thread 0... [ 540.771539][T17975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 540.801000][T17975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 540.847361][T17975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.872890][T18163] IPVS: using max 27 ests per chain, 64800 per kthread [ 540.913050][T18170] __nla_validate_parse: 2 callbacks suppressed [ 540.913069][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 541.097208][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3390'. [ 541.208486][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.278396][T17975] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.306764][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.314002][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.362393][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.369649][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.464045][T18195] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 541.555158][T18202] bond2: (slave gretap1): making interface the new active one [ 541.566626][T18202] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 541.578964][T18195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 541.585152][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3393'. [ 541.601074][T18195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.664767][T18201] netlink: 'syz.5.3394': attribute type 1 has an invalid length. [ 542.206482][T17975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.206816][T18217] netlink: 'syz.2.3397': attribute type 1 has an invalid length. [ 542.279729][T18217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.288669][T18222] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3398'. [ 542.292240][T18226] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 542.317258][T18226] netlink: 'syz.0.3399': attribute type 2 has an invalid length. [ 542.343062][ T5868] Bluetooth: hci3: command tx timeout [ 542.407393][T18220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.434335][T18220] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 542.479384][T18220] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 542.581899][T18225] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 542.612451][T18225] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 542.660037][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 542.743198][T18223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.006500][T17975] veth0_vlan: entered promiscuous mode [ 543.020428][ T7597] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 543.030967][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 543.049918][T17975] veth1_vlan: entered promiscuous mode [ 543.168726][T17975] veth0_macvtap: entered promiscuous mode [ 543.191571][T17975] veth1_macvtap: entered promiscuous mode [ 543.236441][T17975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.289702][T17975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.337554][ T7596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.363748][ T7596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.379819][T18257] syzkaller1: entered promiscuous mode [ 543.388865][T18257] syzkaller1: entered allmulticast mode [ 543.399117][ T7596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.410303][ T7596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.855142][ T7592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.892349][ T7592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.933927][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 543.976159][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3411'. [ 544.020187][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.044787][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.218748][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 544.423221][ T5868] Bluetooth: hci3: command tx timeout [ 545.834341][T18343] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.842169][T18343] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.058944][T18343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.069823][T18375] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 546.129814][T18343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.246554][T18383] __nla_validate_parse: 4 callbacks suppressed [ 546.246575][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'. [ 546.678545][T18372] tipc: Enabling of bearer rejected, failed to enable media [ 546.763415][T18375] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 546.792343][T18379] bond3 (unregistering): Released all slaves [ 546.852592][ T7592] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.892028][ T7592] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.968649][T18401] netlink: 'syz.5.3441': attribute type 21 has an invalid length. [ 547.059108][ T7592] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.113450][T18401] netlink: 'syz.5.3441': attribute type 6 has an invalid length. [ 547.150996][T18401] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3441'. [ 547.180321][ T7592] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.291106][T18412] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 547.293652][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3445'. [ 547.407019][T18415] mac80211_hwsim hwsim46 : renamed from wlan1 (while UP) [ 547.582142][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3451'. [ 547.621899][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3451'. [ 547.838044][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 547.883989][T18445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3456'. [ 548.069884][T18449] nbd: must specify at least one socket [ 548.108924][T18457] bond0: option mode: unable to set because the bond device has slaves [ 548.138620][T18461] netlink: 'syz.3.3462': attribute type 33 has an invalid length. [ 548.150357][T18458] tipc: Started in network mode [ 548.157751][T18458] tipc: Node identity 0e3b0c05b3a1, cluster identity 4711 [ 548.165407][T18461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3462'. [ 548.191449][T18458] tipc: Enabled bearer , priority 0 [ 548.205679][T18460] 8021q: VLANs not supported on wg0 [ 548.228027][T18465] veth0_to_team: entered promiscuous mode [ 548.234583][T18465] veth0_to_team: entered allmulticast mode [ 548.265752][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 548.451099][T18464] syzkaller0: entered promiscuous mode [ 548.460802][T18464] syzkaller0: entered allmulticast mode [ 548.480331][T18464] tipc: Resetting bearer [ 548.490237][T18474] Can't find ip_set type [ 548.501086][T18482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.573955][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3460'. [ 548.655892][T18456] tipc: Resetting bearer [ 548.676566][T18489] netlink: 'syz.5.3467': attribute type 5 has an invalid length. [ 549.224461][T17458] tipc: Node number set to 3180989445 [ 550.419921][T18456] tipc: Disabling bearer [ 550.441742][T18489] geneve2: entered promiscuous mode [ 550.452342][T18489] geneve2: entered allmulticast mode [ 550.523625][ T7595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 550.557569][ T7595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 550.575065][ T7595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 550.592137][ T7595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 550.850813][T18514] netlink: 'syz.0.3477': attribute type 12 has an invalid length. [ 551.738551][T18566] tipc: Started in network mode [ 551.752987][T18566] tipc: Node identity fffeffff, cluster identity 4711 [ 551.767601][T18566] tipc: Node number set to 4294901759 [ 551.943636][T18575] __nla_validate_parse: 4 callbacks suppressed [ 551.943657][T18575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3497'. [ 551.969203][T18564] hsr_slave_1 (unregistering): left promiscuous mode [ 552.033264][T18582] vlan2: entered promiscuous mode [ 552.200326][T18592] can: request_module (can-proto-0) failed. [ 552.348044][T18600] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3504'. [ 552.383412][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3504'. [ 552.981057][T18638] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3515'. [ 553.547017][T18664] syzkaller0: entered promiscuous mode [ 553.563966][T18664] syzkaller0: entered allmulticast mode [ 553.605135][T18673] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3527'. [ 553.650128][T18673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3527'. [ 553.701073][T18672] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 553.728186][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3524'. [ 553.738793][T18674] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3527'. [ 553.769710][T18672] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 553.781939][T18674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3527'. [ 553.791369][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 554.099132][T16133] IPVS: starting estimator thread 0... [ 554.206227][T18697] IPVS: using max 30 ests per chain, 72000 per kthread [ 554.290627][T18708] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 556.278707][T18734] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 556.292438][T18734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.329264][T18730] netlink: 'syz.5.3539': attribute type 1 has an invalid length. [ 556.443134][T18738] syzkaller1: entered promiscuous mode [ 556.465671][T18738] syzkaller1: entered allmulticast mode [ 556.616180][T18745] netlink: 'syz.5.3543': attribute type 3 has an invalid length. [ 556.616278][T18747] netlink: 'syz.4.3546': attribute type 10 has an invalid length. [ 556.637815][T18745] netlink: 'syz.5.3543': attribute type 3 has an invalid length. [ 556.678467][T18747] team0: Port device dummy0 added [ 556.844999][T18758] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 556.896632][T18758] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 556.939146][T18758] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 557.104711][T18778] __nla_validate_parse: 4 callbacks suppressed [ 557.104731][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3555'. [ 557.130320][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3555'. [ 557.314404][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3559'. [ 557.394389][T18793] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3559'. [ 557.824247][T18806] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3564'. [ 557.847972][T18808] vcan0: entered allmulticast mode [ 557.980528][T18812] pim6reg: entered allmulticast mode [ 558.007270][T18814] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3567'. [ 558.019961][T18812] pim6reg: left allmulticast mode [ 558.182228][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'. [ 558.231889][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'. [ 558.491794][T18837] syzkaller1: entered promiscuous mode [ 558.498401][T18837] syzkaller1: entered allmulticast mode [ 558.512256][T18837] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3575'. [ 558.543574][T18837] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3575'. [ 558.784376][T18856] netlink: 'syz.0.3581': attribute type 10 has an invalid length. [ 558.972129][T18862] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 559.004434][T18862] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 559.574572][T18880] syzkaller0: entered promiscuous mode [ 559.580105][T18880] syzkaller0: entered allmulticast mode [ 559.608175][T18893] tipc: New replicast peer: 255.255.255.255 [ 559.640313][T18893] tipc: Enabled bearer , priority 10 [ 559.849281][T18912] netlink: 'syz.5.3592': attribute type 1 has an invalid length. [ 560.753203][T17458] tipc: Node number set to 636664339 [ 561.594243][T18915] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 562.875240][T18928] team0 (unregistering): Port device team_slave_0 removed [ 562.896837][T18928] team0 (unregistering): Port device team_slave_1 removed [ 563.559438][T19007] __nla_validate_parse: 9 callbacks suppressed [ 563.559468][T19007] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3615'. [ 563.642089][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 563.835658][T19028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3618'. [ 563.867516][T19028] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3618'. [ 563.892413][T19031] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3619'. [ 563.921437][T19032] sctp: [Deprecated]: syz.0.3618 (pid 19032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.921437][T19032] Use struct sctp_sack_info instead [ 563.946662][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 564.334069][T19055] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3627'. [ 564.359227][T19063] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3628'. [ 564.608015][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3631'. [ 564.720447][T19082] tipc: Started in network mode [ 564.731191][T19082] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 564.755228][T19082] tipc: Enabling of bearer rejected, failed to enable media [ 564.795384][T19084] netlink: 'syz.5.3635': attribute type 12 has an invalid length. [ 564.829969][T19084] netlink: 'syz.5.3635': attribute type 29 has an invalid length. [ 564.848065][T19084] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3635'. [ 564.901170][T19084] netlink: 'syz.5.3635': attribute type 2 has an invalid length. [ 564.936091][T19084] netlink: 'syz.5.3635': attribute type 3 has an invalid length. [ 564.961467][T19084] netlink: 'syz.5.3635': attribute type 1 has an invalid length. [ 565.196617][T19103] !: renamed from bond_slave_0 [ 565.386095][T19118] tipc: Enabled bearer , priority 0 [ 565.394422][T19119] syzkaller0: entered promiscuous mode [ 565.400566][T19119] syzkaller0: entered allmulticast mode [ 565.439135][T19120] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 565.487955][T19118] tipc: Resetting bearer [ 565.498450][T19119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 565.555219][T19117] tipc: Resetting bearer [ 565.622916][T19117] tipc: Disabling bearer [ 566.066225][T19145] netlink: 'syz.0.3654': attribute type 33 has an invalid length. [ 566.566416][T19170] IPVS: ip_vs_edit_dest(): server weight less than zero [ 566.574068][ T6356] IPVS: starting estimator thread 0... [ 566.664304][T19171] IPVS: using max 28 ests per chain, 67200 per kthread [ 566.767842][T19178] netlink: 'syz.2.3662': attribute type 1 has an invalid length. [ 566.919816][T19178] bond3 (unregistering): Released all slaves [ 567.060039][T19189] syzkaller1: entered promiscuous mode [ 567.072790][T19189] syzkaller1: entered allmulticast mode [ 567.221663][T19205] wg1: entered promiscuous mode [ 567.465965][T19214] tipc: Enabling of bearer rejected, failed to enable media [ 567.657609][T19230] netlink: 'syz.2.3675': attribute type 10 has an invalid length. [ 567.794088][T19230] bond0: (slave ): Enslaving as an active interface with an up link [ 567.953189][T19237] macvtap1: entered allmulticast mode [ 568.165567][T19245] openvswitch: netlink: IPv4 tunnel dst address is zero [ 568.203165][T19247] netlink: 'syz.2.3681': attribute type 29 has an invalid length. [ 568.334500][T19251] tipc: Enabled bearer , priority 0 [ 568.342219][T19251] syzkaller0: entered promiscuous mode [ 568.351411][T19251] syzkaller0: entered allmulticast mode [ 568.393330][T19251] tipc: Resetting bearer [ 568.417453][T19250] tipc: Resetting bearer [ 568.491787][T19250] tipc: Disabling bearer [ 568.595204][T19263] __nla_validate_parse: 13 callbacks suppressed [ 568.595225][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'. [ 569.114394][T19284] dvmrp0: entered allmulticast mode [ 569.306462][T19296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3698'. [ 569.316383][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3698'. [ 569.364333][T19296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3698'. [ 569.394704][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3698'. [ 570.203308][T19343] netlink: 'syz.0.3712': attribute type 11 has an invalid length. [ 570.211379][T19343] netlink: 'syz.0.3712': attribute type 11 has an invalid length. [ 570.239352][T19343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3712'. [ 570.268337][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'. [ 570.557772][T19353] sctp: [Deprecated]: syz.0.3715 (pid 19353) Use of int in maxseg socket option. [ 570.557772][T19353] Use struct sctp_assoc_value instead [ 570.718499][T19367] Unsupported ieee802154 address type: 0 [ 570.737242][T19366] netlink: 'syz.0.3720': attribute type 1 has an invalid length. [ 570.763815][T19366] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3720'. [ 570.774012][T19366] netlink: 'syz.0.3720': attribute type 1 has an invalid length. [ 570.953056][T19381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'. [ 570.977040][T19381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'. [ 571.329248][T19396] syzkaller0: entered promiscuous mode [ 571.349516][T19396] syzkaller0: entered allmulticast mode [ 572.466704][T19445] netlink: 'syz.2.3740': attribute type 1 has an invalid length. [ 572.565669][T19446] macvtap1: entered promiscuous mode [ 572.601897][T19446] vlan0: entered promiscuous mode [ 572.636153][T19446] macvtap1: entered allmulticast mode [ 572.660894][T19446] vlan0: entered allmulticast mode [ 572.684837][T19446] veth0_vlan: entered allmulticast mode [ 572.708898][T19450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.755035][T19451] macvtap2: entered promiscuous mode [ 572.774611][T19451] macvtap2: entered allmulticast mode [ 572.792730][T19454] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 572.893177][T19458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.964544][T19460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.121802][T19464] team0: No ports can be present during mode change [ 573.191473][ T7596] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.211193][ T7596] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.249682][ T7596] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.293130][ T7595] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.312912][T19470] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 573.327757][T19470] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.599831][T19481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.696706][T19485] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 573.713410][ T7595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.722271][ T7595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.744635][T19481] __nla_validate_parse: 7 callbacks suppressed [ 573.744654][T19481] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3750'. [ 573.760672][ T7595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.760715][ T7595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.792254][T19481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3750'. [ 573.869964][T19495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3754'. [ 573.907409][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 574.245448][T19509] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 574.508069][T19518] openvswitch: netlink: IPv6 tunnel dst address is zero [ 574.710640][T19526] : entered promiscuous mode [ 574.738620][T19530] ip6gre1: entered allmulticast mode [ 574.787349][T19530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3765'. [ 575.271689][T19560] syzkaller0: entered promiscuous mode [ 575.291324][T19560] syzkaller0: entered allmulticast mode [ 575.307711][T19560] tipc: Enabled bearer , priority 0 [ 575.348208][T19560] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 575.442977][T19560] tipc: Resetting bearer [ 575.455439][T19559] tipc: Resetting bearer [ 575.497327][T19574] netlink: 'syz.3.3780': attribute type 1 has an invalid length. [ 575.523281][T19559] tipc: Disabling bearer [ 575.643681][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3780'. [ 575.734958][T19568] netlink: 'syz.4.3778': attribute type 83 has an invalid length. [ 575.767432][T19577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.780423][T19577] bond1: (slave bond2): making interface the new active one [ 575.796153][T19577] bond1: (slave bond2): Enslaving as an active interface with an up link [ 575.816812][T19580] bond1: entered promiscuous mode [ 575.826252][T19580] bond2: entered promiscuous mode [ 575.831710][T19580] bond1: entered allmulticast mode [ 575.837852][T19580] bond2: entered allmulticast mode [ 575.845519][T19580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.854015][T19583] ipvlan0: entered promiscuous mode [ 575.859343][T19583] ipvlan0: entered allmulticast mode [ 575.867666][T19583] veth0_vlan: entered allmulticast mode [ 575.964969][T19591] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3783'. [ 575.977975][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 575.987511][T19591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3783'. [ 575.997892][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 576.533557][T19617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.678161][T19624] netlink: 'syz.0.3793': attribute type 4 has an invalid length. [ 576.939379][T19633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.967449][T19633] bond0: (slave rose0): Enslaving as an active interface with an up link [ 577.243193][T19655] veth0: entered promiscuous mode [ 577.271036][T19651] veth0: left promiscuous mode [ 577.498953][T19658] wg1 speed is unknown, defaulting to 1000 [ 577.568514][T19658] hsr0 speed is unknown, defaulting to 1000 [ 577.581564][T19666] tipc: Enabling of bearer rejected, failed to enable media [ 577.665246][T19658] lo speed is unknown, defaulting to 1000 [ 577.750506][T19673] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.759230][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.854527][T19679] block nbd4: server does not support multiple connections per device. [ 577.864885][ T5868] Bluetooth: hci3: command tx timeout [ 577.902969][T19679] block nbd4: shutting down sockets [ 578.089728][T19680] syz_tun: entered allmulticast mode [ 578.137962][T19680] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 578.466027][T19710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.471766][T19744] __nla_validate_parse: 6 callbacks suppressed [ 579.471788][T19744] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3821'. [ 579.488764][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3822'. [ 579.718871][ T7592] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.757344][T16127] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.782799][ T7592] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.833218][T19755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3823'. [ 579.875164][T16133] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.896257][T19770] rdma_op ffff88807cbbd9f0 conn xmit_rdma 0000000000000000 [ 579.939941][T19756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3823'. [ 580.188450][T19786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3830'. [ 580.413834][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 580.490809][T19804] netlink: 'syz.3.3835': attribute type 83 has an invalid length. [ 580.528132][T19797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 580.537962][T19805] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3833'. [ 580.806758][T19816] tipc: Enabled bearer , priority 0 [ 580.832775][T16127] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.850454][T19817] tipc: Enabled bearer , priority 0 [ 580.873110][T19816] syzkaller0: entered promiscuous mode [ 580.878650][T19816] syzkaller0: entered allmulticast mode [ 580.916337][T19817] syzkaller0: entered promiscuous mode [ 580.943193][T19817] syzkaller0: entered allmulticast mode [ 581.034637][T19824] tipc: Resetting bearer [ 581.036630][T19816] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3837'. [ 581.071026][T19816] tipc: Resetting bearer [ 581.098516][T19814] tipc: Resetting bearer [ 581.167199][T19814] tipc: Disabling bearer [ 581.208170][ T30] audit: type=1107 audit(1757237969.370:5): pid=19833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G$R9ϫ1 ۙR1OazJH:׋M -NRb^¨9}sly/Ui—UsDS+Y Q<;d"' [ 581.230442][T19815] tipc: Resetting bearer [ 581.284668][T19815] tipc: Disabling bearer [ 581.564874][T19850] netlink: 'syz.3.3844': attribute type 33 has an invalid length. [ 581.603232][T19850] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3844'. [ 581.846919][T19862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3847'. [ 581.968331][T19869] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 581.996818][T19869] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 582.062148][T19873] openvswitch: netlink: IPv6 tunnel dst address is zero [ 582.132284][T19859] "syz.2.3846" (19859) uses obsolete ecb(arc4) skcipher [ 582.293208][T19887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 582.353664][T19890] openvswitch: netlink: Duplicate or invalid key (type 0). [ 582.361813][T19890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.477267][T19894] bridge_slave_0: left allmulticast mode [ 582.484354][T19894] bridge_slave_0: left promiscuous mode [ 582.490414][T19894] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.586656][T19894] bridge_slave_1: left allmulticast mode [ 582.636219][T19894] bridge_slave_1: left promiscuous mode [ 582.642076][T19894] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.781206][T19894] bond0: (slave 1!): Releasing backup interface [ 582.826619][T19894] bond0: (slave bond_slave_1): Releasing backup interface [ 582.876717][T19894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.895001][T19894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.048755][T19932] netlink: 'syz.2.3863': attribute type 7 has an invalid length. [ 583.079344][T19932] netlink: 'syz.2.3863': attribute type 8 has an invalid length. [ 583.123892][T19932] gretap0: entered promiscuous mode [ 583.136216][T19932] batadv_slave_1: entered promiscuous mode [ 583.143660][T19932] erspan0: entered promiscuous mode [ 583.150470][T19932] debugfs: 'hsr1' already exists in 'hsr' [ 583.192635][T19932] Cannot create hsr debugfs directory [ 583.204650][T19935] netlink: 'syz.2.3863': attribute type 26 has an invalid length. [ 583.253372][T19943] xfrm1: entered promiscuous mode [ 583.258465][T19943] xfrm1: entered allmulticast mode [ 583.817700][T19970] xt_policy: too many policy elements [ 583.862872][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 584.342728][ T5868] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 584.349619][ T5868] Bluetooth: hci0: command 0x0419 tx timeout [ 585.407939][ T7594] BUG: MAX_LOCKDEP_KEYS too low! [ 585.412927][ T7594] turning off the locking correctness validator. [ 585.419352][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 585.419370][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.419379][ T7594] Workqueue: netns cleanup_net [ 585.419396][ T7594] Call Trace: [ 585.419402][ T7594] [ 585.419409][ T7594] dump_stack_lvl+0x189/0x250 [ 585.419429][ T7594] ? rcu_is_watching+0x15/0xb0 [ 585.419444][ T7594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.419460][ T7594] ? __pfx__printk+0x10/0x10 [ 585.419480][ T7594] ? is_dynamic_key+0xd6/0x1c0 [ 585.419500][ T7594] ? is_dynamic_key+0xd6/0x1c0 [ 585.419521][ T7594] register_lock_class+0x2e8/0x320 [ 585.419543][ T7594] __lock_acquire+0x99/0xd20 [ 585.419565][ T7594] ? dev_reset_queue+0xfa/0x1b0 [ 585.419577][ T7594] lock_acquire+0x120/0x360 [ 585.419595][ T7594] ? dev_reset_queue+0xfa/0x1b0 [ 585.419612][ T7594] ? dev_reset_queue+0xfa/0x1b0 [ 585.419623][ T7594] _raw_spin_lock_bh+0x36/0x50 [ 585.419641][ T7594] ? dev_reset_queue+0xfa/0x1b0 [ 585.419653][ T7594] dev_reset_queue+0xfa/0x1b0 [ 585.419665][ T7594] dev_deactivate_many+0x720/0xd40 [ 585.419679][ T7594] ? dev_deactivate_many+0x258/0xd40 [ 585.419693][ T7594] __dev_close_many+0x162/0x6f0 [ 585.419716][ T7594] ? __pfx___dev_close_many+0x10/0x10 [ 585.419738][ T7594] ? __remove_nexthop+0x1da5/0x1ef0 [ 585.419754][ T7594] netif_close_many+0x225/0x410 [ 585.419776][ T7594] ? __pfx_netif_close_many+0x10/0x10 [ 585.419801][ T7594] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 585.419825][ T7594] ? unregister_netdevice_queue+0x1b3/0x380 [ 585.419842][ T7594] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 585.419861][ T7594] ? __pfx_call_rcu+0x10/0x10 [ 585.419874][ T7594] ? net_generic+0x1e/0x240 [ 585.419889][ T7594] ? remove_nexthop+0x114/0x180 [ 585.419906][ T7594] ops_undo_list+0x3dc/0x990 [ 585.419921][ T7594] ? __pfx_ops_undo_list+0x10/0x10 [ 585.419935][ T7594] ? do_raw_spin_unlock+0x122/0x240 [ 585.419953][ T7594] cleanup_net+0x4c5/0x800 [ 585.419966][ T7594] ? __pfx_cleanup_net+0x10/0x10 [ 585.419979][ T7594] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.419997][ T7594] ? process_scheduled_works+0x9ef/0x17b0 [ 585.420010][ T7594] ? process_scheduled_works+0x9ef/0x17b0 [ 585.420023][ T7594] process_scheduled_works+0xae1/0x17b0 [ 585.420047][ T7594] ? __pfx_process_scheduled_works+0x10/0x10 [ 585.420067][ T7594] worker_thread+0x8a0/0xda0 [ 585.420101][ T7594] kthread+0x70e/0x8a0 [ 585.420117][ T7594] ? __pfx_worker_thread+0x10/0x10 [ 585.420129][ T7594] ? __pfx_kthread+0x10/0x10 [ 585.420145][ T7594] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.420168][ T7594] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.420186][ T7594] ? __pfx_kthread+0x10/0x10 [ 585.420202][ T7594] ret_from_fork+0x3fc/0x770 [ 585.420216][ T7594] ? __pfx_ret_from_fork+0x10/0x10 [ 585.420231][ T7594] ? __switch_to_asm+0x39/0x70 [ 585.420247][ T7594] ? __switch_to_asm+0x33/0x70 [ 585.420263][ T7594] ? __pfx_kthread+0x10/0x10 [ 585.420279][ T7594] ret_from_fork_asm+0x1a/0x30 [ 585.420301][ T7594] [ 586.005196][ T7594] dvmrp0 (unregistering): left allmulticast mode [ 588.512632][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 592.344927][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.0.18 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.0.18" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255 Connection timed out during banner exchange Connection to 10.128.0.18 port 22 timed out