last executing test programs: 5m19.097069784s ago: executing program 3 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 5m18.857124765s ago: executing program 3 (id=938): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f00000003c0)) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0xfffffffe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000000c0)={0x3, @default, 0xee01}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000030703000000000000000000030000060c00064000000000000000020900010073797a300000000009745d2412797a3000000000340007800800024000000006080001400000040108000140000000050800014000000010080002400000076108000140000000030c000640000000000000ffff0900010073877a31000000000c0003400000ae00000000011400078008000240000000010800024000000006"], 0xa4}, 0x1, 0x0, 0x0, 0x24004005}, 0x4000000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) 5m18.47240183s ago: executing program 3 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) 5m18.393483048s ago: executing program 3 (id=948): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@netrom, @rose, @default, @default, @null, @default, @netrom, @bcast]}, &(0x7f0000000180)=0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 5m18.165392251s ago: executing program 3 (id=951): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x2c, 0x52, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffffff8}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_RP_FILTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) 5m16.527176862s ago: executing program 3 (id=967): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x0, 0xbd, 0x2, 0x1, 0x1, 0x3, 0x4c, 0x8, 0x10, 0x3, 0x1, 0x2, 0x6}, 0xe) r4 = socket(0x25, 0x800, 0xca) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x81, 0x1, 0xffff, 0x3}, 0x8) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0x3}, &(0x7f0000000280)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x5f, 0x71}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x47}}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44015}, 0x4008005) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000440)={r1, 0x8}, &(0x7f0000000480)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x8, 0x10, 0x53, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, 0x20, 0x700, 0x401, 0x10001}}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000580)={0x0, 0x0, 0x7, r8, 0xfffffffa}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40400042}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0xf8, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008004}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r2) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) getpeername$ax25(r10, &(0x7f0000000800)={{0x3, @rose}, [@rose, @bcast, @remote, @null, @default, @rose, @null, @rose]}, &(0x7f0000000880)=0x48) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000008c0)={'filter\x00', 0x53, "6ba27df6b5ebfda1689a17284fbf971fdfdb1c460a83b3d22904707eaae00da33db3cc7885692a0af6e0645a7d09fdd899b29b490260201556908b9d31cc7d52c8b578358fb9e84dae84e92307930a3a9e9c2a"}, &(0x7f0000000940)=0x77) sendmsg$AUDIT_SET(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x3e9, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x2, r7, 0x97e0, 0x46, 0x5, 0x5, 0x0, 0x80000001, 0x80}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x58085}, 0x4000000) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x8, 0x4, 0x401]}, &(0x7f0000000b00)=0x44) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000b40)={'nat\x00', 0x0, [0x7, 0x7, 0xc, 0x10001, 0x94d]}, &(0x7f0000000bc0)=0x54) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000c00)={0x0, 0x2}, &(0x7f0000000c40)=0x8) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200a0800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x3f9, 0x5, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x85) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r3) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xa0, r11, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000000f40)={'vlan1\x00', {0x2, 0x0, @multicast2}}) sendmsg$nl_route(r4, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv6_deladdrlabel={0x24, 0x49, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x557a7d1a49f96324, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) 5m16.136507907s ago: executing program 32 (id=967): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x0, 0xbd, 0x2, 0x1, 0x1, 0x3, 0x4c, 0x8, 0x10, 0x3, 0x1, 0x2, 0x6}, 0xe) r4 = socket(0x25, 0x800, 0xca) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x81, 0x1, 0xffff, 0x3}, 0x8) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0x3}, &(0x7f0000000280)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x5f, 0x71}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x47}}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44015}, 0x4008005) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000440)={r1, 0x8}, &(0x7f0000000480)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x8, 0x10, 0x53, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, 0x20, 0x700, 0x401, 0x10001}}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000580)={0x0, 0x0, 0x7, r8, 0xfffffffa}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40400042}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0xf8, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008004}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r2) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) getpeername$ax25(r10, &(0x7f0000000800)={{0x3, @rose}, [@rose, @bcast, @remote, @null, @default, @rose, @null, @rose]}, &(0x7f0000000880)=0x48) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000008c0)={'filter\x00', 0x53, "6ba27df6b5ebfda1689a17284fbf971fdfdb1c460a83b3d22904707eaae00da33db3cc7885692a0af6e0645a7d09fdd899b29b490260201556908b9d31cc7d52c8b578358fb9e84dae84e92307930a3a9e9c2a"}, &(0x7f0000000940)=0x77) sendmsg$AUDIT_SET(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x3e9, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x2, r7, 0x97e0, 0x46, 0x5, 0x5, 0x0, 0x80000001, 0x80}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x58085}, 0x4000000) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x8, 0x4, 0x401]}, &(0x7f0000000b00)=0x44) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000b40)={'nat\x00', 0x0, [0x7, 0x7, 0xc, 0x10001, 0x94d]}, &(0x7f0000000bc0)=0x54) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000c00)={0x0, 0x2}, &(0x7f0000000c40)=0x8) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200a0800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x3f9, 0x5, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x85) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r3) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xa0, r11, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000000f40)={'vlan1\x00', {0x2, 0x0, @multicast2}}) sendmsg$nl_route(r4, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv6_deladdrlabel={0x24, 0x49, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x557a7d1a49f96324, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) 5.594828383s ago: executing program 4 (id=4124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.207020012s ago: executing program 4 (id=4130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000000c0)="3299d78c3a76bcba7a666083d9a22f85ddd36a0911515ed1336ffa6415fa9932e5cd266a438cbe074e887e0460c2b4aa953b06da3dcb5b7b211e1ada119cc1e514f7c7161d3693f491d7080a6fa4fa8eb0", &(0x7f0000000200)=""/226, &(0x7f0000000300)="12569a60bff91d7dce349554d1abfcb1616b4ee211506e0c19b4b078fa91eb4016d093bc89fccb39aff22d29752c8bcb08a7b4505567683d969d2410c3fcb4f8749540e4843afa5fe896bf08afe259d0408ebd00c8d8c437548cdc021246abda9caa7cc44161d262048228350921a6cca42104659004e186dca8f29a1cbd8f9c05dad9fa9999f62c870732d997bf81f6e2fecfee17f87d079c", &(0x7f00000003c0)="503ddf2a2b019c01802f76ab7762e0986a353c3c60918e31ff61337948e0f18c5e86d708f21fda0b4a3f2ffcf1af9b4bafd67572813b454fc5ae6bd6958624d37300d7ad73832b52e860323f8564fe72484f4795319854063757b8930dfdfb5b030e233147b2dbd73155c4117948dfef291fbd92b90663812d7ee2ba2402691c670fa6dfc430a39423f91c677372ec3e37e036c9391a8a7b7281f0065e554fc286893c7b83f0e68052fb3fd9301cbae7aa1237cda575f60ec92ff974d7a15a046dd72fbc7b8dfe7eeb3d65a9cdc13533741fd7c85ed895d64e440c928d40dd2cae745fb18c3667696686b2b8c75723", 0x7, r1, 0x4}, 0x38) socket$alg(0x26, 0x5, 0x0) 4.244813977s ago: executing program 4 (id=4142): pipe(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x8, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x2, 0x4) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) close(r7) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) 2.891674815s ago: executing program 0 (id=4167): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x28, 0x44, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00', 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac", 0x3}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000006c0)="f5fbfd4f159531", 0x7}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2e6", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8a2", 0x2}, {&(0x7f00000002c0)="7940e900e037", 0x6}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x8) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)="7a83220b5e0548544c395eb91e64a9631dbad5d282e17f58a777f706425fb8b7fa6acfb1f4916d117b5ab7cef73455b4f3ab529393864327620b5c3c9a8ed08a231959498d313945c86427316e490872921a8b590916eab3dfd201c522ca8e93354e74cf6b0d24072b5be7e7d195831acdae8751b0b19096dfb9d3a5b91515bedda5c1d3db2cf39222edf99d663bbd9b978325384e71a4eb35d33e35fabbcaeb213086f6f74bff10108097d1dcaf497a52272c2f59d46a7bcef2a95607e7b7", 0xbf}, {&(0x7f0000000700)="3ade062a20e088821da57908824982ed74d6ea4b8ecf900202ae4ca63d0eb46a608332718d73760336b7d490866f6ba24784060ddb526d0114702f032ac0ca2db44778a514dc2fa1ce5919a4058acbada7c4180bd108b69664817d1aad28e93f6f1b76c4baee694d8f48bbb65406e90e849916c27cd939e108960f54c69acac45a27ca91d3f7d3153722d8789c8bc534ae8e2db5832a2de0d64bd781eb5c909aca86f496b1df22b6e559367e4edf679ca83388d79677", 0xb6}, {&(0x7f0000000940)="36accc60ea53d7f305c4156964c4b12f30875a035519ef0faf6131fe682664c729eb5ed7d99b727a3df73b466f83fc73380fc28c4bfc79799329839cfb24042f74e1217c54c6418021e77023a3f41557ff2bc00a2ae8a5b1755e1fc018f117854ef03c3a603ae7a9931e3a3019ec541ebc4f5038602d0e7dbc54ef7487fe458a5f347e3c1855c96be5215e6df3883d054578a54ef14c87b64782b3919a1984a80d039923b7dd6cab4a8f85b1cfe995f2b860ffa8ffd4f4c8698b6d03c62c0b3c58ce2ca6546917aefb839c72365b0854466733c17d", 0xd5}, {&(0x7f0000000a80)="0706063c25d696f815b92037160ee83f0d94750ad0638b99f4af81e40917656d4d6774ee595719bc28b8ee354849374e9dc4f5e811d23fcdcc6a01815495a56a868b083dcb7020edc9bf57e5266f73389ce19b77c6cd4d963673f4d16af427cb8354e2ee264284c196039d56c29a7048e4a04d8bc7560beb010a643c4a024e9331d37706025cc8bb1115417fe7cfaa798ca251b2e305ea", 0x97}, {&(0x7f0000000b40)="add8d1e45f1ff804c22566ec2b891978193b5a91b3057507530085089517670f7df88f4082f8c5ba8cda3be531930d2d308070a78665bd72a393191c3729221586e3a6a4514295961d5442d1ec443e5e9d0e5d693578fadb18e17aca62c311e8559b12f6b19cb4085feee0387078834a91f38cabf96d10ad1be36cc6a4f012babfaa02c3b6ac581865", 0x89}, {&(0x7f0000000100)="c70d170e5ca9ce488680e411226357a6e76278df0df51f56ced0646041cf21f2dad5dc20319c4b19f0cc35185fff10e1a743c6425be3ab5b1d01655165c5a4a6a3986eb75f506104bfadc01a05c211dc28def714517cbd5f43a4d1bb36c512c62c4297ce6b4e", 0x66}], 0x6, 0x5) 2.722949358s ago: executing program 0 (id=4171): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$caif_stream(0x25, 0x1, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r6 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000), 0x4) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendto$inet(r5, &(0x7f0000000440)="7843c65ad4080b4a8f70cac1278675758a39befa9c200c5e80d63bb0b7d4614c22184a2331022d7f710bc53bcd1653026d10a53f8d716adb0cd8b3efb2db4e5d22d1a408b1dee60ae03bf060f540097ecfb5f0148d4eeaff457a78723407f91d7e750613dfb90ae5bb55fa05d74901c965cc21eb226a0543f2d046720410365e4b83d5e6da19f88f67555c0234bcd8e4954b8a79d93459dba8de1dbd56ae6c9ddadb83abb0f658594658afce3f16820fbe39306c15c802aceada9102d6d3ae190784be396adb01a701303210e81616cb6cfe8a2e88243fb6efd48103582ebbddbb9038710539919ec4c1bd", 0xeb, 0x40805, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYRESDEC=r3, @ANYBLOB="3c5f8ea44d1610fc1165ec1f4eeaaba27cff7661375ee43619ef06f13aff62fbed6a5173bdda9937c3ffae471d3ea49326da17cacf7f65da1def2e5063c6bff53ac0c4dc8cb818f809489db3c6ef830a1b5624ee4e662fae785384", @ANYRES32, @ANYRES16=r4, @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRES64=r9, @ANYRES16=0x0], 0x54}}, 0x4800) 2.58901948s ago: executing program 1 (id=4173): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r1}, 0x20) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000580)=[{}, {@none}, {@fixed}, {@fixed}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.580251452s ago: executing program 0 (id=4174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) (async, rerun: 32) sendto$inet6(r3, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) r5 = socket(0x22, 0x2, 0x2) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}}]}, 0x88}}, 0x0) 2.546338479s ago: executing program 2 (id=4175): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x891d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001a08000640ffffff000800034000"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001a08000640ffffff000800034000"], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000100001800c00010069623a6772653000bce91311f670af265d96c4d2c74c46ab1b960e43fa6feea64e499f864695a9c532c820a89bcabda70733cb7d7f4950d81e2a5645a2957c020c198c411653629d13ed519586119132f8cb91a90cc9f40184cbf0f489a5aa1a00e98c209f0b38"], 0x24}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) 2.425362944s ago: executing program 2 (id=4177): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0xd}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x0, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x90}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000040), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.233554231s ago: executing program 2 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) (async) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0xa005}, 0x44800) 2.220244402s ago: executing program 0 (id=4181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x21, @empty}}, 0xfffffc7a, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, &(0x7f00000002c0)=0x9b) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000680), &(0x7f0000000540)=0x68) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x3ec0) ppoll(&(0x7f0000000600)=[{r3, 0x101}], 0x1, 0x0, 0x0, 0x0) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x8d, 0x65, &(0x7f00000002c0)="d8ba2d84aeed0959009edecf523943c43ffbaf3424251723981de4ac98249475d31905eaf228a201082a175350989553dd06e83cf01682108f78dfca0a7aa70d0a7be2f757697a76e9c8e39f3e8a1657d84462d6ed5f42b68287d72d7e0cd5f8ae89a29afd25a43a9bebb87a780e1b6475fd9baabc6b5dfb4e48a0a6e189189790c9ff5298bb82ff12982e09a5", &(0x7f0000000380)=""/101, 0xfffffff1, 0x0, 0xd4, 0x29, &(0x7f0000000400)="952c78e5b4fec324e0a04074ede4cce5d022b3e07cb18da3369bc621c2bdf1f139309ab495b1b0997feefb1af94e4849fb23570e393eba124663daa721a490bfe48e57b7f07a878884fc7aeb84505441f56bb728ea4ddb7b2387f6148083c1dc89ed791c9ae4e1f9c43fdfd2def9525bfa7e4a8ea931791509253f6a2a977e2bbce582301b274cf86a45f35864000a4dadd135605b3d0f28b4e4b059a475255cde37d07039cfb4da7293e8445f515574ae8c0a17344ff1b10edd9c994306cfc1fb44d44aad5e0d3a5850c9d05c5ab750089620b0", &(0x7f0000000500)="6a3032bf021f377d3d7807676ee8df5b610d7bc74ed0a32b5a0bcd1b61f0a292e3c308c4f7763770b6", 0x2, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56545, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0x5}, {0x2, 0xffff}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x200}, {0x81, 0x5, 0x58, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xee) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCAX25NOUID(r12, 0x89e3, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x5, 0x8, 0x29e3, 0x4010d, 0x1, 0xffffffff, '\x00', 0x0, r9, 0x2, 0x5, 0x3}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r12) 2.192575578s ago: executing program 2 (id=4182): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x16b8, 0x200}, &(0x7f0000000780)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_STAB={0x6, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x77, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0xc48, {{0xa, 0x4e24, 0x4, @mcast2, 0xb9eb}}}, 0x88) connect$inet6(r5, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="0c000280060001009b"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32=r6], 0x36) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000006dc0)=@l2tp6={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, 0x80, &(0x7f0000007100)=[{0x0}, {0x0}], 0x2}}], 0x3, 0x28000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="000100001a00000225bd7000fedbdf250a1420080304000500100000060015000700000014000500fc0200000000000000000000000000000500140001000000b5000880738efa6e5807cd1512c77e72094f190a91a37f0f935ca373565306e9f5603710e0c7a0b243fb11aa0f821fd422e7ddc3ae9a4ae0be41a4a0b58909e450024abfd4d38cad3b2f8acf573e8154ebc513b07dd39be72a87d88b95ac37c6997b3b088edecce2827fbc11332d61cdcc882b332b061d79dc6dc18a4070ea67ea454d6ec2ef5a7ea6d263e7b6954ef6a972ded52d44ea54e964735eb014b23d3148d7c7c02da7400dbe4690da13b6d8b3928df64c00000008000400", @ANYRES32=0x0, @ANYBLOB="d018fe51212ad8edcfd817f382e5e451db163d23a108a36eba42d3af7754b068491c3a42b36b10d0079a95"], 0x100}}, 0x0) 2.077561141s ago: executing program 1 (id=4183): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x1c, 0x6a, 0x10, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800800180008ac0ff542240000000083bfffd071cf5bc198e61831ccebc04acca3f41f6162d90eee50931690f8bb3a97197d5cc359ad27a1b88343732df2f91ca7a30c88386ec97def769b439abd70ad91771fb581dd5ca7225ce572a04f08b9ff6646bff9c1227256e1"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ldst={0x3, 0x1, 0x1, 0xa, 0x3, 0x100, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xd, 0x5, 0x6, 0x40, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x41}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000340)=""/206, 0x41100, 0x5b, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x5, 0xa, 0x8}, {0x3, 0x1, 0x5}, {0x5, 0x157f38c3, 0x8, 0x410bdf39afce3882}, {0x4, 0x4, 0xd, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r2}, 0x18) 2.075401494s ago: executing program 5 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) listen(r0, 0x101) 1.998906709s ago: executing program 5 (id=4185): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/10, 0x203000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x49, 0x3, 0x5, 0x50, @loopback, @remote, 0x80, 0x700, 0x7fff, 0x4}}) sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0x8a, 0x3}, 0xfd}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="f7f826f91628ba40750b5b72c8ec7bc9455d7887b19577e8fa7be21e96eb6d14264347dc33bad2b721651c5d77d4f601b460159e33663a2e6fd32f92dab915aeb44524d7dca815c3e4d73795a6b8f94254b2efcf1310979272d60c5a928e82e6c33e5816d7f805d65892a7b1fb9bb79d89f4f7124599f79ea42dc2906d", 0x7d}, 0x1, 0x0, 0x0, 0x91}, 0x4000) 1.95885898s ago: executing program 1 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000240)=""/110, &(0x7f00000000c0)=0x6e) 1.808648107s ago: executing program 5 (id=4187): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) socketpair(0x2c, 0xa, 0x757d, &(0x7f0000000a80)={0xffffffffffffffff}) r2 = accept$netrom(r1, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @default, @bcast, @bcast, @remote, @bcast, @remote, @rose]}, &(0x7f0000000300)=0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$sock(r2, &(0x7f0000000a40)={&(0x7f0000000340)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)="8b", 0x1}, {&(0x7f0000000540)="d4f08ca63ab53d982df2bbf895f149ea04a8b24b65abd0b6b9b275ab0849145ea712ca5c2e9d8987a85a550eb0996aaa88ab34805687f7ba5ea00118d4185c805d12276cbce62b09f292a2c395d43d3e0891e5ef08d94b8b3606791aeee29ce25ce7c511fc4417bf6f5f7aa3b062fd40aae20918e775d2f7b753c8fbfc9e8ca5092c3621e41544e6a02d2bdd968c4fbf503b51023740f21b71924e4ce209692684479dd5189da2d5ce3bcdbac01b9d73f8f407ed1e3873caad9780883142eb4c55bf5c731c6b5419309314f51bdf81cbaa7236e484dde486952edf082597", 0xde}, {&(0x7f0000000640)="2c2d042d592e7a929eb2931a53f19f9ce0ae9caaf777bdcd3e5b2c56553acc71c26516620cad4e67787a2f0023368c735d4e5dd20abc4723d4b94eb020984c18d4f82b2b93484173195579e9a80d7035f55cb6a72581e592d2c5c72627c3c356e51be8e3046ae26ac2f227c5bef2bf907a2926af12f6a0e203ec660f326d4dff46e4758e2df3f3f49d98006da8553cba2360c8c1209d4e1fcdb756d904848bed0ad8460ed87fade2724963bfa36f50e0260c066c12e145a3dce9186dbfd9a494fce52cccdc7ba36737c12b6ec6b593ed73547e079214f3c3da6e455c7f5a9d3167d98e5d895b12fc164833c58eee7c3dc7", 0xf1}, {&(0x7f0000000740)="2d37fba7b60457f700e9b9c3260ee74afbb887d538de9ca45986b5341f35ece484d09f665c9abf9e8d5652483706e7e4d3b4f833645ba6fe69bf9d132b7df2f69d3705dfc4", 0x45}, {&(0x7f00000007c0)="d1d73b78524d4628a54a201fa2283ae1710af363801ee7bbed40a61b20965bfa9da7d455202ab54ea14a4b17d5533d278f9864d36d8c7f93c5b8cb183cc47d91b69dc6af1d2064dcedaa23929dfc8157581d72f6b2914a215ee3ada56949a14a8207fc4e847f8f654ba746a874db67f043ae0d36218a2fcd0693de4ee48b1d7b1c23cc630893", 0x86}, {&(0x7f0000000880)="1bd3d8469f7eecaafde13679ecee051767b2a9e151b00e0aa8117bb28551c31e5284533d7d1ea85ac0047f3b7fc10430801365c51244d25234f8a874e87e9a8a14d829d2949be446bf39f5142845283c172a192484c1a50d7f0afcd2f44e8a865a9fda33175ada3c004e475025251f579d618fb3ec8ce8eab5155d6f9f995d4bb76899f3b9762c089d82aeaf36d2230c2cdf4fffab4ed176", 0x98}], 0x6, &(0x7f00000009c0)=[@mark={{0x14, 0x1, 0x24, 0x9c}}, @timestamping={{0x14, 0x1, 0x25, 0xede5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x48}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a"], 0x50}}, 0x0) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x8205, 0x83, 0x0, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000100)={r7, @in={{0x2, 0x4e20, @loopback}}, [0x1, 0xcf, 0x100000001, 0x3, 0x1, 0x5, 0x5, 0x5, 0x5, 0x1, 0x200, 0x0, 0x1, 0x9, 0x8]}, &(0x7f0000000240)=0x100) 1.199698716s ago: executing program 4 (id=4188): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000500000000000020000000050000e74cd7c3ac010600009500000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x100, 0x2d60}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0xc) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(des3_ede-generic)\x00'}, 0x58) 1.020859681s ago: executing program 4 (id=4189): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}, [@FRA_SRC={0x14, 0x2, @private0}]}, 0x30}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x8}, {0xffff, 0xffff}, {0x10, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0xc, 0x3], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd26}, 0x14}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) 393.538411ms ago: executing program 0 (id=4190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7, 0x6, [0x280, 0x4, 0x3ff, 0xd1a4, 0x2bea, 0xe3]}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r1, 0x2}, &(0x7f00000002c0)=0x8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) sendmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x10}, 0x20008000) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xea37}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8) 393.106074ms ago: executing program 1 (id=4191): r0 = socket(0x2d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xd9e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r4, 0x11, 0xc, 0x0, &(0x7f0000000740)) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x54}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) 392.692207ms ago: executing program 5 (id=4192): r0 = socket(0x40000000015, 0x5, 0x0) write(r0, &(0x7f0000000080)="db7fa385785a11d73f70662a501b951539150e7766afb388cfbc7f0d0691ac26d2aeab5ac074835d739c9ebffc0a57217705ea75d91dd733e4bda36a5de74ce5a7e3d2e7a244d45031f711ee2531fed01fc41d756682e7d44ee0d7f4fad5f32c9db28162ccf20585816aa06f6e7e42633699f6c47c6f352b4bf84f9e7708c7859f21a3880d2518afd8b6aaea49389c4c4d7593970f3be75b84cf59a1d16e49d528a6b325f6ba8cbed58b2b42c20cec99270511c2f6a3ccf21627bcb5c73dae79c15e7305bb6d90b815b124a4bb4faa87861844e435122bf1953c", 0xda) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)={0x1}) 309.327433ms ago: executing program 2 (id=4193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x2070bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x2}, {0xfff1, 0x1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500020000000020fc02907800000000e00003000306907800fa00094570fff600650005010400030a010102ac1414aa6d8b900000000000"], 0x0) 301.580397ms ago: executing program 1 (id=4194): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FAMILY={0x5, 0xd, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 286.37086ms ago: executing program 4 (id=4195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffb}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x26, 0x1, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@deltaction={0x4c, 0x31, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040050}, 0x14802) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x105040, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004000) 221.530243ms ago: executing program 5 (id=4196): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) 221.203522ms ago: executing program 0 (id=4197): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 147.42534ms ago: executing program 1 (id=4198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000010000ecffff0600260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) 92.384541ms ago: executing program 2 (id=4199): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000080)={0xcd, 0x6, 0x1, 0xfff, 0x2, [0xffd8, 0xcc, 0xb, 0x5]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="df33b2035707e6a2872679984caf046497ca2195307a2b467f57afcadb0ec9529ac8e5efda624ccc70eff812db34b771123a8c19e283f0f30120ee2e5cf100ed0c83f195a07e705479096943cec3ff650029d03b4e41d634e0d305b46015308972d02e68f015b722d568218aa760b29e64afb6c427b6c87ea18b12fef1ef8a4dcf13ed4d58cedd3c48138f", @ANYRES16=r0, @ANYBLOB="04002bbd7000fbdbdf251b000000450001007063690011000200303030303a30303a31302e300000000008000b0000180000"], 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x20000000) 0s ago: executing program 5 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001000230010000000040000000200000000000011ffffffff0000000000002e00"], 0x0, 0x2c}, 0x20) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0xc7, 0x6, 0xffffffff, 0x278]}, &(0x7f0000000000)=0x54) kernel console output (not intermixed with test programs): syzkaller1: entered promiscuous mode [ 411.980158][T13835] __nla_validate_parse: 12 callbacks suppressed [ 411.980174][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 411.992433][T13834] syzkaller1: entered allmulticast mode [ 412.010558][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 412.262303][T13849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2242'. [ 413.527525][T13864] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2247'. [ 413.696349][T13870] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2252'. [ 413.718858][T13873] netlink: 'syz.5.2251': attribute type 1 has an invalid length. [ 413.794687][T13873] bond7: entered promiscuous mode [ 413.802481][T13873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.855442][T13880] bond7: (slave bridge2): making interface the new active one [ 413.865189][T12322] hid-generic 0005:0C45:1010.0001: hidraw0: BLUETOOTH HID v10.c3 Device [syz1] on aa:aa:aa:aa:aa:aa [ 413.877101][T13880] bridge2: entered promiscuous mode [ 413.899543][T13880] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 413.934989][T13875] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 413.947071][T13875] tipc: Resetting bearer [ 413.955600][T13892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.123331][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 414.291025][T13917] netlink: 'syz.0.2268': attribute type 6 has an invalid length. [ 414.559363][T13936] tipc: Enabled bearer , priority 0 [ 414.567003][T13936] syzkaller0: entered promiscuous mode [ 414.573365][T13936] syzkaller0: entered allmulticast mode [ 414.635856][T13940] x_tables: duplicate underflow at hook 2 [ 414.638309][T13936] tipc: Resetting bearer [ 414.656921][T13934] tipc: Resetting bearer [ 414.680515][T13934] tipc: Disabling bearer [ 414.700600][T13938] openvswitch: netlink: Message has 8 unknown bytes. [ 414.707337][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.872313][T13956] syzkaller1: entered promiscuous mode [ 414.881959][T13956] syzkaller1: entered allmulticast mode [ 414.891764][T13956] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2282'. [ 414.912018][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 414.942611][T13961] syzkaller0: entered promiscuous mode [ 414.958063][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2282'. [ 414.967517][T13961] syzkaller0: entered allmulticast mode [ 414.999828][T13965] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2287'. [ 415.149738][T13971] netlink: 'syz.0.2289': attribute type 24 has an invalid length. [ 415.340979][T13986] netlink: zone id is out of range [ 415.346385][T13986] netlink: zone id is out of range [ 415.351979][T13986] netlink: zone id is out of range [ 415.357614][T13986] netlink: zone id is out of range [ 415.400559][T13990] netlink: 'syz.0.2293': attribute type 16 has an invalid length. [ 416.213378][T14049] batman_adv: batadv0: Removing interface: geneve2 [ 416.515450][T14066] bond0: (slave macvlan5): Error -22 calling dev_set_mtu [ 416.562395][T14070] vlan2: entered allmulticast mode [ 416.567675][T14070] hsr0: entered allmulticast mode [ 416.584374][T14070] hsr_slave_0: entered allmulticast mode [ 416.594523][T14070] hsr_slave_1: entered allmulticast mode [ 416.677628][T14072] tipc: Enabled bearer , priority 0 [ 416.799433][T14072] syzkaller0: entered promiscuous mode [ 416.804998][T14072] syzkaller0: entered allmulticast mode [ 416.811995][T14072] tipc: Resetting bearer [ 416.845044][T14077] bond6 (unregistering): Released all slaves [ 416.872282][T14071] tipc: Resetting bearer [ 417.236363][T14102] netlink: 'syz.5.2326': attribute type 1 has an invalid length. [ 418.265952][T14071] tipc: Disabling bearer [ 418.285838][T14102] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 418.471052][T14118] __nla_validate_parse: 7 callbacks suppressed [ 418.471070][T14118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2331'. [ 418.574049][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2331'. [ 418.599122][T14133] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2335'. [ 419.278665][T14118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2331'. [ 419.288738][T14118] ksmbd: Unknown IPC event: 3, ignore. [ 419.884081][T14196] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2351'. [ 419.978925][T14203] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 420.026103][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2358'. [ 420.043210][T14210] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2356'. [ 420.090514][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 420.096784][T14211] bond10: (slave bridge7): making interface the new active one [ 420.109695][T14211] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 420.127649][T14214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.148201][T14213] tipc: Enabling of bearer rejected, failed to enable media [ 420.483771][T14247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2367'. [ 420.512400][T14247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2367'. [ 420.534916][T14247] ksmbd: Unknown IPC event: 3, ignore. [ 420.680676][T14259] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 420.802346][T14265] wg1 speed is unknown, defaulting to 1000 [ 420.974905][T14274] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 421.441553][T14317] netlink: 'syz.0.2382': attribute type 21 has an invalid length. [ 421.642360][T14328] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 422.020375][T14350] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 422.033525][T14351] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 422.268302][T14364] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 422.300571][T14364] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 422.336775][T14364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.372025][T14370] tipc: Enabled bearer , priority 10 [ 422.396114][T14364] nbd: must specify at least one socket [ 422.422697][T14373] tipc: Enabling of bearer rejected, already enabled [ 422.452581][T14364] block nbd1: not configured, cannot reconfigure [ 423.232552][T14418] syzkaller1: entered promiscuous mode [ 423.238927][T14418] syzkaller1: entered allmulticast mode [ 423.464834][T14433] geneve2: left promiscuous mode [ 423.472893][T14433] geneve2: left allmulticast mode [ 423.497512][T14443] xt_bpf: check failed: parse error [ 423.520915][T14433] bond7: left promiscuous mode [ 423.526040][T14444] __nla_validate_parse: 10 callbacks suppressed [ 423.526057][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'. [ 423.530591][T14433] bridge2: left promiscuous mode [ 423.566820][T14435] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2417'. [ 423.589822][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 423.613182][T14449] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 423.624994][T14447] tipc: Enabled bearer , priority 0 [ 423.641370][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 423.651785][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 423.794478][T14440] syzkaller0: entered promiscuous mode [ 423.809130][T14440] syzkaller0: entered allmulticast mode [ 423.815481][T14440] tipc: Resetting bearer [ 423.822114][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 423.847356][T14452] bond25: (slave geneve2): making interface the new active one [ 423.857118][T14452] bond25: (slave geneve2): Enslaving as an active interface with an up link [ 423.877447][T14445] bridge13: entered promiscuous mode [ 423.883227][T14445] bridge13: entered allmulticast mode [ 423.898871][T14438] tipc: Resetting bearer [ 423.964513][T14473] netlink: 'syz.5.2426': attribute type 10 has an invalid length. [ 425.209456][T14438] tipc: Disabling bearer [ 425.218849][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.227669][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.243950][T14474] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 425.252630][T14474] tipc: Resetting bearer [ 425.259660][T14473] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 425.269864][T14473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.357215][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.386659][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.479103][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 425.489939][T14499] netlink: 'syz.5.2433': attribute type 1 has an invalid length. [ 425.593994][T14502] netlink: 'syz.1.2435': attribute type 2 has an invalid length. [ 425.612254][T14511] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2437'. [ 426.051487][T14544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.082631][T14544] batadv_slave_0: entered promiscuous mode [ 426.104081][T14544] batadv_slave_0: entered allmulticast mode [ 426.110969][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 426.129013][T14534] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2443'. [ 426.218729][T14538] block nbd0: server does not support multiple connections per device. [ 426.232826][T14538] block nbd0: shutting down sockets [ 426.290350][T14557] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 426.664542][T14577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2456'. [ 426.684752][T14579] tipc: Enabled bearer , priority 0 [ 426.694624][T14579] syzkaller0: entered promiscuous mode [ 426.703948][T14579] syzkaller0: entered allmulticast mode [ 426.733579][T14579] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 426.796805][T14577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2456'. [ 426.835771][T14586] tipc: Resetting bearer [ 426.853041][T14587] xfrm1: entered allmulticast mode [ 426.892249][T14589] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 426.962495][T14578] tipc: Resetting bearer [ 426.977478][T14578] tipc: Disabling bearer [ 426.994443][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 427.029384][T14592] tipc: Enabled bearer , priority 0 [ 427.188930][T14591] tipc: Disabling bearer [ 427.610488][T14598] team0 (unregistering): Port device team_slave_0 removed [ 427.623189][T14598] team0 (unregistering): Port device team_slave_1 removed [ 427.683178][T14633] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2473'. [ 427.812450][T14642] ipt_rpfilter: unknown options [ 428.055775][T14660] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 428.161083][T14667] bond3: (slave bridge14): making interface the new active one [ 428.171932][T14667] bond3: (slave bridge14): Enslaving as an active interface with an up link [ 428.183001][T14660] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 428.361490][T14660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.450389][T14687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.471941][T14678] bond0: (slave bridge0): Releasing backup interface [ 428.481527][T14678] bridge0: left promiscuous mode [ 428.514854][T14678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.554715][T14689] ip6gretap0: mtu less than device minimum [ 428.655878][T14695] __nla_validate_parse: 4 callbacks suppressed [ 428.655895][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2494'. [ 428.704344][T14678] netlink: 'syz.1.2484': attribute type 3 has an invalid length. [ 428.834237][T14702] netlink: 'syz.5.2495': attribute type 30 has an invalid length. [ 428.933939][T14702] bond8: option arp_missed_max: invalid value (0) [ 428.952327][T14702] bond8: option arp_missed_max: allowed values 1 - 255 [ 428.977399][T14702] bond8 (unregistering): Released all slaves [ 429.180212][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 429.189320][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2500'. [ 429.202073][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 429.229808][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.229976][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 429.253526][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.278359][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.309628][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 429.320168][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.368812][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 429.432480][T14727] x_tables: duplicate underflow at hook 2 [ 429.776221][T14754] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 429.814238][T14754] bond6 (unregistering): Released all slaves [ 429.864311][T14756] ip6tnl5: entered promiscuous mode [ 429.870230][T14756] ip6tnl5: entered allmulticast mode [ 429.871620][T14758] ipt_REJECT: TCP_RESET invalid for non-tcp [ 430.122505][T14766] tipc: Enabling of bearer rejected, already enabled [ 430.192578][T14776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.339205][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 430.409854][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 430.505283][T14798] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 430.550376][T14796] netlink: 'syz.5.2519': attribute type 5 has an invalid length. [ 430.873946][T14833] x_tables: unsorted underflow at hook 2 [ 430.881637][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 430.983434][T14843] openvswitch: netlink: Message has 4 unknown bytes. [ 430.995091][T14843] openvswitch: netlink: Message has 4 unknown bytes. [ 431.207037][T14861] veth1_to_hsr: entered allmulticast mode [ 431.752943][T14899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.860461][T14920] x_tables: duplicate entry at hook 1 [ 432.099870][T14936] delete_channel: no stack [ 432.193648][T14942] syzkaller0: entered promiscuous mode [ 432.203797][T14942] syzkaller0: entered allmulticast mode [ 432.625752][T14968] tipc: Enabled bearer , priority 0 [ 432.656557][T14968] tipc: Disabling bearer [ 433.009590][T14976] netlink: 'syz.4.2566': attribute type 3 has an invalid length. [ 433.055652][T14980] netlink: 'syz.5.2568': attribute type 18 has an invalid length. [ 433.289930][T14996] syzkaller0: entered promiscuous mode [ 433.302450][T14996] syzkaller0: entered allmulticast mode [ 433.534912][T15013] team0: Device wireguard1 is of different type [ 433.785914][T15029] __nla_validate_parse: 76 callbacks suppressed [ 433.785932][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 433.834351][T15035] sctp: [Deprecated]: syz.4.2585 (pid 15035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.834351][T15035] Use struct sctp_sack_info instead [ 433.882020][T15036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 433.909560][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 434.214942][T15071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2593'. [ 434.548100][T15090] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 434.560333][T15090] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 434.574677][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.584145][T15090] gretap1: entered promiscuous mode [ 434.584167][T15090] gretap1: entered allmulticast mode [ 434.599478][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.608820][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.631808][ T62] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.640882][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.650514][ T62] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.673443][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.689152][ T3534] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.702493][ T3534] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.873614][T15103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.952808][T15121] Cannot find set identified by id 65534 to match [ 435.049449][T15127] bond23: option mode: unable to set because the bond device has slaves [ 435.068815][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 435.073551][T15129] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 435.142793][T15127] bond23: (slave macvlan5): Error -98 calling set_mac_address [ 435.165157][T15136] netlink: 'syz.1.2610': attribute type 10 has an invalid length. [ 435.212497][T15129] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 435.245228][T15142] SET target dimension over the limit! [ 435.276030][T15136] bridge0: entered promiscuous mode [ 435.283170][T15136] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 435.518691][T15160] netlink: 'syz.4.2616': attribute type 2 has an invalid length. [ 435.576449][T15162] 0: reclassify loop, rule prio 0, protocol 800 [ 436.198518][T15203] IPVS: length: 235 != 24 [ 436.302855][T15213] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 436.705407][T15235] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 436.762390][T15246] gre2: entered promiscuous mode [ 436.778922][T15246] gre2: entered allmulticast mode [ 436.855366][T15252] syzkaller1: entered promiscuous mode [ 436.862663][T15252] syzkaller1: entered allmulticast mode [ 436.886078][T15253] pim6reg1: entered promiscuous mode [ 436.892169][T15253] pim6reg1: entered allmulticast mode [ 437.142074][T15265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.259954][T15280] IPVS: Unknown mcast interface: netpci0 [ 437.625544][T15305] xt_l2tp: invalid flags combination: 8 [ 437.631528][T15302] pim6reg1: entered promiscuous mode [ 437.631550][T15302] pim6reg1: entered allmulticast mode [ 437.662455][T15306] xt_l2tp: invalid flags combination: 8 [ 437.743988][T15305] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 437.771482][T15305] bond5 (unregistering): Released all slaves [ 437.913105][T15311] wg1 speed is unknown, defaulting to 1000 [ 437.925660][T15320] tunl0: entered promiscuous mode [ 437.939785][T15320] netlink: 'syz.5.2669': attribute type 3 has an invalid length. [ 437.959803][T15321] netlink: 'syz.5.2669': attribute type 10 has an invalid length. [ 437.974891][T15320] netlink: 'syz.5.2669': attribute type 10 has an invalid length. [ 438.109611][T15320] veth0_virt_wifi: entered allmulticast mode [ 438.195567][T15330] xt_nat: multiple ranges no longer supported [ 438.299370][T15335] netlink: 'syz.1.2671': attribute type 21 has an invalid length. [ 438.529092][T15311] netlink: 'syz.2.2667': attribute type 16 has an invalid length. [ 438.536943][T15311] netlink: 'syz.2.2667': attribute type 17 has an invalid length. [ 438.557455][T15311] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 438.800314][T15370] __nla_validate_parse: 13 callbacks suppressed [ 438.800333][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2684'. [ 438.898360][T15375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2684'. [ 438.976496][T15385] netlink: 294 bytes leftover after parsing attributes in process `syz.0.2686'. [ 439.006798][T15385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.240963][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'. [ 439.250617][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'. [ 439.341593][T15406] : entered promiscuous mode [ 439.404722][T15418] tipc: Enabled bearer , priority 0 [ 439.431989][T15418] syzkaller0: entered promiscuous mode [ 439.437486][T15418] syzkaller0: entered allmulticast mode [ 439.465518][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 439.569558][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 439.579469][T15418] tipc: Resetting bearer [ 439.668458][T15417] tipc: Resetting bearer [ 439.759160][T15417] tipc: Disabling bearer [ 440.003919][T15461] tipc: Enabled bearer , priority 0 [ 440.015817][T15464] syzkaller0: entered promiscuous mode [ 440.021830][T15464] syzkaller0: entered allmulticast mode [ 440.076009][T15464] tipc: Resetting bearer [ 440.140822][T15464] tipc: Disabling bearer [ 440.169425][T15478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2714'. [ 440.319247][T15484] Cannot find del_set index 3 as target [ 440.490664][T15493] bond29: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 440.515029][T15493] bond29 (unregistering): Released all slaves [ 440.631166][T15509] : entered promiscuous mode [ 440.967172][T15531] tipc: Enabled bearer , priority 0 [ 440.981970][T15531] syzkaller0: entered promiscuous mode [ 440.987474][T15531] syzkaller0: entered allmulticast mode [ 441.030253][T15531] tipc: Resetting bearer [ 441.053906][T15530] tipc: Resetting bearer [ 441.064172][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2733'. [ 441.091041][T15530] tipc: Disabling bearer [ 441.221600][T15547] delete_channel: no stack [ 441.250254][ T30] audit: type=1804 audit(1761561699.605:8): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2737" name="/newroot/576/cgroup.controllers" dev="tmpfs" ino=2950 res=1 errno=0 [ 441.306900][T15552] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2740'. [ 441.318200][ T30] audit: type=1800 audit(1761561699.645:9): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2737" name="cgroup.controllers" dev="tmpfs" ino=2950 res=0 errno=0 [ 441.688454][T15583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.949918][T15593] can: request_module (can-proto-0) failed. [ 441.957249][T15587] bond5: option all_slaves_active: invalid value (222) [ 441.974368][T15587] bond5 (unregistering): Released all slaves [ 442.225190][T15622] macsec0: entered promiscuous mode [ 442.237311][T15622] macsec0: entered allmulticast mode [ 442.282210][T15622] veth1_macvtap: entered allmulticast mode [ 442.296099][T15622] macsec0: left promiscuous mode [ 442.308643][T15622] macsec0: left allmulticast mode [ 442.333133][T15622] veth1_macvtap: left allmulticast mode [ 442.561754][T15644] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 442.569205][T15644] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 442.630285][T15647] pim6reg1: entered promiscuous mode [ 442.635593][T15647] pim6reg1: entered allmulticast mode [ 442.924967][T15654] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 443.776067][T15699] xt_HMARK: proto mask must be zero with L3 mode [ 443.887918][T15707] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 443.906506][T15713] __nla_validate_parse: 8 callbacks suppressed [ 443.906524][T15713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2786'. [ 444.346025][T15747] netlink: 'syz.2.2795': attribute type 26 has an invalid length. [ 444.450414][T15751] syzkaller1: entered promiscuous mode [ 444.472181][T15751] syzkaller1: entered allmulticast mode [ 444.517265][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 444.595199][T15753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.704684][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'. [ 444.715212][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 444.981679][T15791] netlink: 'syz.2.2807': attribute type 4 has an invalid length. [ 445.269719][T15813] tipc: Enabled bearer , priority 0 [ 445.287036][T15814] syzkaller0: entered promiscuous mode [ 445.318743][T15814] syzkaller0: entered allmulticast mode [ 445.390584][T15814] tipc: Resetting bearer [ 445.451158][T15814] tipc: Disabling bearer [ 445.577347][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'. [ 445.600681][T15847] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 445.608380][T15847] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 445.616336][T15847] tipc: Resetting bearer [ 445.633238][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2828'. [ 445.656904][T15852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.681000][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2828'. [ 445.855488][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 445.898801][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 446.188816][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 446.208149][T15883] netlink: 'syz.2.2837': attribute type 9 has an invalid length. [ 446.225334][T15883] netlink: 'syz.2.2837': attribute type 9 has an invalid length. [ 446.440076][T15891] tipc: Enabling of bearer rejected, failed to enable media [ 446.809302][T15903] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 447.057270][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.085938][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.095152][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.118125][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.131562][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.217238][T15910] wg1 speed is unknown, defaulting to 1000 [ 447.335347][T15917] wg1 speed is unknown, defaulting to 1000 [ 447.399854][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.412157][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.423592][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 447.434862][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 447.691037][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.712753][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.733303][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 447.745623][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 447.873614][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.885675][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.901980][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 447.912936][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 448.005953][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.021093][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.033902][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.048137][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 448.261018][T15982] wg1 speed is unknown, defaulting to 1000 [ 448.385606][T15917] chnl_net:caif_netlink_parms(): no params data found [ 449.071255][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.099198][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.118005][T15917] bridge_slave_0: entered allmulticast mode [ 449.149694][T15917] bridge_slave_0: entered promiscuous mode [ 449.159449][ T5148] Bluetooth: hci4: command tx timeout [ 449.234200][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.247962][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.266629][T15917] bridge_slave_1: entered allmulticast mode [ 449.275846][T15917] bridge_slave_1: entered promiscuous mode [ 449.329429][T16023] __nla_validate_parse: 9 callbacks suppressed [ 449.329446][T16023] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2872'. [ 449.514060][T16034] netlink: 'syz.0.2875': attribute type 75 has an invalid length. [ 449.866315][T16055] netlink: 'syz.1.2878': attribute type 10 has an invalid length. [ 449.913920][ T12] bond5 (unregistering): (slave gretap0): Releasing active interface [ 449.931940][ T12] bond6 (unregistering): (slave gretap1): Releasing active interface [ 449.980562][ T12] bond4 (unregistering): (slave geneve4): Releasing backup interface [ 450.377597][ T12] bond10 (unregistering): (slave bridge7): Releasing active interface [ 450.563530][ T12] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.573813][ T12] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.583423][ T12] ` (unregistering): Released all slaves [ 450.595550][ T12] bond1 (unregistering): Released all slaves [ 450.682831][ T12] bond2 (unregistering): Released all slaves [ 450.696359][ T12] bond3 (unregistering): Released all slaves [ 450.708776][ T12] bond4 (unregistering): Released all slaves [ 450.721473][ T12] bond5 (unregistering): Released all slaves [ 450.742773][ T12] bond0 (unregistering): Released all slaves [ 450.757352][ T12] bond6 (unregistering): Released all slaves [ 450.771959][ T12] bond7 (unregistering): Released all slaves [ 450.786049][ T12] bond8 (unregistering): Released all slaves [ 450.799920][ T12] bond9 (unregistering): Released all slaves [ 450.812320][ T12] bond10 (unregistering): Released all slaves [ 450.831058][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.848929][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.886724][T16055] team0: Device veth1_macvtap failed to register rx_handler [ 451.020000][ T12] 9: left promiscuous mode [ 451.121394][T15917] team0: Port device team_slave_0 added [ 451.160313][T15917] team0: Port device team_slave_1 added [ 451.168374][ T12] tipc: Disabling bearer [ 451.195363][ T12] tipc: Left network mode [ 451.238190][ T5148] Bluetooth: hci4: command tx timeout [ 451.388682][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.400068][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.446378][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.481765][T16080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.498524][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.509194][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.538825][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.559346][T16082] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 451.567165][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 451.728431][T16093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.746049][T16085] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 451.765264][T16085] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.775899][T16085] gretap2: entered promiscuous mode [ 451.782269][T16085] gretap2: entered allmulticast mode [ 451.922075][T16092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2889'. [ 451.932219][T16092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2889'. [ 452.040806][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 452.044174][T15917] hsr_slave_0: entered promiscuous mode [ 452.064257][T15917] hsr_slave_1: entered promiscuous mode [ 452.069326][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 452.079106][T15917] debugfs: 'hsr0' already exists in 'hsr' [ 452.117279][T15917] Cannot create hsr debugfs directory [ 452.155802][T16096] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 452.186319][T16096] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 452.194405][T16096] gretap1: entered promiscuous mode [ 452.218155][T16096] gretap1: entered allmulticast mode [ 452.231910][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2896'. [ 452.251930][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2896'. [ 452.270746][ T12] hsr_slave_1: left promiscuous mode [ 452.277398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.286273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.421969][ T12] veth1_to_hsr (unregistering): left allmulticast mode [ 452.813911][T16133] tipc: Enabled bearer , priority 0 [ 452.831060][T16134] syzkaller0: entered promiscuous mode [ 452.849203][T16134] syzkaller0: entered allmulticast mode [ 452.921114][T16118] tipc: Resetting bearer [ 452.962958][T16118] tipc: Disabling bearer [ 452.980967][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 453.224855][T16158] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2903'. [ 453.263933][T16157] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 453.318143][ T5148] Bluetooth: hci4: command tx timeout [ 453.408243][T16158] block nbd0: Unsupported socket: should be TCP or UNIX. [ 453.929478][T16193] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 454.050950][T15917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.082898][T15917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.108946][T15917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.246472][T15917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.403289][T16224] __nla_validate_parse: 4 callbacks suppressed [ 454.403306][T16224] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2922'. [ 454.460714][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.518832][T16235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2919'. [ 454.547897][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.571585][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.578879][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.606148][T16242] netlink: 'syz.5.2923': attribute type 1 has an invalid length. [ 454.614986][T16238] team0: No ports can be present during mode change [ 454.623840][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 454.640265][T16242] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 454.644017][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.659440][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.738697][T16249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.790894][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 455.367096][T16267] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.398491][ T5148] Bluetooth: hci4: command tx timeout [ 456.180657][ T62] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.200561][T16281] netdevsim netdevsim5: Direct firmware load for /.€ failed with error -2 [ 456.209616][ T62] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.230554][ T62] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.240153][T16281] netdevsim netdevsim5: Falling back to sysfs fallback for: /.€ [ 456.256180][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.347906][ T62] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.378366][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.387324][ T62] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.420290][ T62] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.648803][T16319] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2943'. [ 456.654947][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.765023][T16324] sctp: [Deprecated]: syz.5.2945 (pid 16324) Use of int in maxseg socket option. [ 456.765023][T16324] Use struct sctp_assoc_value instead [ 456.813495][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'. [ 456.859904][T16333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 456.989010][T16341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2949'. [ 457.064282][T16346] xt_hashlimit: invalid rate [ 457.075716][T16345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2950'. [ 457.525995][T15917] veth0_vlan: entered promiscuous mode [ 457.547436][T15917] veth1_vlan: entered promiscuous mode [ 457.743067][T15917] veth0_macvtap: entered promiscuous mode [ 457.754687][T15917] veth1_macvtap: entered promiscuous mode [ 457.780517][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.827679][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.861808][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'. [ 457.862908][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.883802][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.922237][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.931907][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.043086][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.051332][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.121385][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.129442][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.192076][T16403] nbd: device at index 64 is going down [ 458.670222][T16424] macvtap1: entered promiscuous mode [ 458.679534][T16424] vlan0: entered promiscuous mode [ 458.684592][T16424] bridge0: entered promiscuous mode [ 458.710581][T16427] netlink: 'syz.1.2973': attribute type 1 has an invalid length. [ 458.728461][T16424] macvtap1: entered allmulticast mode [ 458.744050][T16424] vlan0: entered allmulticast mode [ 458.761309][T16424] bridge0: entered allmulticast mode [ 459.060311][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.080708][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.090419][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.104052][T16428] bond29: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.128640][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.138475][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.153792][T16428] bond29: (slave vxcan3): Error -95 calling set_mac_address [ 459.294465][T16445] wg1 speed is unknown, defaulting to 1000 [ 459.533112][T16478] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 459.594875][T16481] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 459.621408][T16481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.655998][T16488] __nla_validate_parse: 5 callbacks suppressed [ 459.656016][T16488] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2984'. [ 459.677831][T16488] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2984'. [ 459.680372][T16445] chnl_net:caif_netlink_parms(): no params data found [ 459.694466][T16488] netlink: 'syz.4.2984': attribute type 6 has an invalid length. [ 459.714504][T16488] netlink: 'syz.4.2984': attribute type 5 has an invalid length. [ 459.737542][T16490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2984'. [ 459.746904][T16488] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2984'. [ 459.853879][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'. [ 459.951997][T16445] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.971994][T16445] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.980230][T16445] bridge_slave_0: entered allmulticast mode [ 459.989618][T16445] bridge_slave_0: entered promiscuous mode [ 459.999611][T16445] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.008366][T16445] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.015600][T16445] bridge_slave_1: entered allmulticast mode [ 460.027346][T16445] bridge_slave_1: entered promiscuous mode [ 460.074975][T16509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.097415][T16445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.114687][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 460.125863][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 460.135611][T16509] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 460.150612][T16445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.264074][T16445] team0: Port device team_slave_0 added [ 460.326396][T16445] team0: Port device team_slave_1 added [ 460.360214][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 460.501136][T16528] macsec2: entered promiscuous mode [ 460.506653][T16528] bridge0: entered promiscuous mode [ 460.528298][T16528] macsec2: entered allmulticast mode [ 460.561057][T16543] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 460.569463][T16538] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 460.576620][T16538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.586153][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.630588][T16528] bridge0: entered allmulticast mode [ 460.650068][T16528] bridge0: port 1(macsec2) entered blocking state [ 460.662218][T16528] bridge0: port 1(macsec2) entered disabled state [ 460.679771][T16528] bridge0: left allmulticast mode [ 460.691918][T16528] bridge0: left promiscuous mode [ 460.773745][T16548] netlink: 'syz.1.3003': attribute type 1 has an invalid length. [ 461.056267][T16445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.063720][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.091224][T16445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.107382][T16445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.115140][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.142794][T16445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.171112][ T5827] Bluetooth: hci3: command tx timeout [ 461.172354][T16544] ip6gre0: Master is either lo or non-ether device [ 461.433004][T16445] hsr_slave_0: entered promiscuous mode [ 461.464751][T16445] hsr_slave_1: entered promiscuous mode [ 461.472842][T16445] debugfs: 'hsr0' already exists in 'hsr' [ 461.480105][T16445] Cannot create hsr debugfs directory [ 461.507631][T16572] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 461.532377][T16572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 461.621795][T16585] tipc: Enabled bearer , priority 0 [ 461.648074][T16583] tipc: Enabling of bearer rejected, already enabled [ 461.667117][T16585] syzkaller0: entered promiscuous mode [ 461.679676][T16585] syzkaller0: entered allmulticast mode [ 461.714152][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3014'. [ 461.769920][T16594] netlink: 'syz.5.3014': attribute type 11 has an invalid length. [ 461.787420][T16585] tipc: Resetting bearer [ 461.823023][T16577] tipc: Resetting bearer [ 461.873434][T16577] tipc: Disabling bearer [ 461.961589][T16600] x_tables: duplicate underflow at hook 3 [ 461.990074][T16600] lo: entered promiscuous mode [ 462.008995][T16600] netlink: 'syz.1.3017': attribute type 2 has an invalid length. [ 462.017632][T16600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.249305][T16615] tipc: Enabled bearer , priority 0 [ 462.258824][T16615] syzkaller0: entered promiscuous mode [ 462.264322][T16615] syzkaller0: entered allmulticast mode [ 462.316907][T16615] tipc: Resetting bearer [ 462.361772][T12322] IPVS: starting estimator thread 0... [ 462.369843][T16625] team0: Caught tx_queue_len zero misconfig [ 462.386557][T16626] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 462.394819][T16614] tipc: Resetting bearer [ 462.435417][T16614] tipc: Disabling bearer [ 462.458096][T16629] IPVS: using max 32 ests per chain, 76800 per kthread [ 462.465466][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 462.470106][T16445] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 462.488226][T16445] bond0: (slave netdevsim0): Releasing backup interface [ 462.716930][T16445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.752339][T16445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.779292][T16445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.791621][T16652] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 462.791785][T16445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.896054][T16652] veth5: entered promiscuous mode [ 463.053410][T16445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.122522][T16445] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.147111][T16673] tipc: Started in network mode [ 463.152204][T16673] tipc: Node identity bab09ef399ad, cluster identity 4711 [ 463.175674][T16673] tipc: Enabled bearer , priority 0 [ 463.190426][T16673] syzkaller0: entered promiscuous mode [ 463.214294][T16673] syzkaller0: entered allmulticast mode [ 463.240292][ T5827] Bluetooth: hci3: command tx timeout [ 463.250080][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.257242][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.283967][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.291276][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.310278][T16684] tipc: Resetting bearer [ 463.350509][T16671] tipc: Resetting bearer [ 463.384238][T16671] tipc: Disabling bearer [ 463.431581][T16690] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 463.453647][T16690] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 463.770993][T16712] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 463.778263][T16713] netlink: 'syz.5.3053': attribute type 1 has an invalid length. [ 464.122705][T16445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.277583][T16445] veth0_vlan: entered promiscuous mode [ 464.394457][T16749] tipc: Enabled bearer , priority 0 [ 464.422513][T16742] syzkaller0: entered promiscuous mode [ 464.438118][T16742] syzkaller0: entered allmulticast mode [ 464.465123][T16445] veth1_vlan: entered promiscuous mode [ 464.794763][T16753] tipc: Resetting bearer [ 464.849539][T16741] tipc: Resetting bearer [ 464.985335][T16741] tipc: Disabling bearer [ 465.036895][T16763] __nla_validate_parse: 4 callbacks suppressed [ 465.036913][T16763] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3068'. [ 465.070607][T16445] veth0_macvtap: entered promiscuous mode [ 465.076822][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 465.106707][T16445] veth1_macvtap: entered promiscuous mode [ 465.138757][T16768] delete_channel: no stack [ 465.165150][T16445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.182486][T16768] delete_channel: no stack [ 465.236022][T16445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.269320][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.304172][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.325732][ T5827] Bluetooth: hci3: command tx timeout [ 465.331704][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.360100][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.445902][T16783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3072'. [ 465.456333][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.474816][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.539267][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.557384][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.778051][T16803] netlink: 'syz.0.2968': attribute type 10 has an invalid length. [ 465.785904][T16803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2968'. [ 465.829983][T16803] dummy0: entered promiscuous mode [ 465.852330][T16803] bridge0: port 3(dummy0) entered blocking state [ 465.870876][T16803] bridge0: port 3(dummy0) entered disabled state [ 465.901279][T16803] dummy0: entered allmulticast mode [ 465.928020][T16803] bridge0: port 3(dummy0) entered blocking state [ 465.934537][T16803] bridge0: port 3(dummy0) entered forwarding state [ 466.694066][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.694712][T16848] tipc: Enabling of bearer rejected, failed to enable media [ 466.718086][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.727215][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.729182][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'. [ 466.760683][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.778694][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.832613][T16844] wg1 speed is unknown, defaulting to 1000 [ 467.262009][T16880] syzkaller1: entered allmulticast mode [ 467.398917][ T5827] Bluetooth: hci3: command tx timeout [ 467.442370][T16844] chnl_net:caif_netlink_parms(): no params data found [ 467.545036][T16896] netlink: 'syz.4.3106': attribute type 2 has an invalid length. [ 467.554327][T16896] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3106'. [ 467.656984][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3107'. [ 467.682078][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3107'. [ 467.830343][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.842456][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.850715][T16844] bridge_slave_0: entered allmulticast mode [ 467.865947][T16844] bridge_slave_0: entered promiscuous mode [ 467.897282][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.917925][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.925195][T16844] bridge_slave_1: entered allmulticast mode [ 467.940789][T16844] bridge_slave_1: entered promiscuous mode [ 468.003283][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.016302][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.022090][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 468.071674][T16844] team0: Port device team_slave_0 added [ 468.082642][T16844] team0: Port device team_slave_1 added [ 468.143391][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.151276][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.178526][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.193221][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.206327][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.233064][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.275720][T16844] hsr_slave_0: entered promiscuous mode [ 468.282426][T16844] hsr_slave_1: entered promiscuous mode [ 468.288808][T16844] debugfs: 'hsr0' already exists in 'hsr' [ 468.294543][T16844] Cannot create hsr debugfs directory [ 468.392724][T16844] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.447359][T16844] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.525531][T16844] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.584715][T16844] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.667395][T16844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.680631][T16844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.691268][T16844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.700758][T16844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.766355][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.787632][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.801821][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.808935][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.821887][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.829059][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.839286][ T5827] Bluetooth: hci1: command tx timeout [ 468.997243][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.036966][T16844] veth0_vlan: entered promiscuous mode [ 469.050002][T16844] veth1_vlan: entered promiscuous mode [ 469.084796][T16844] veth0_macvtap: entered promiscuous mode [ 469.094827][T16844] veth1_macvtap: entered promiscuous mode [ 469.112884][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.128915][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.142768][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.152405][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.164412][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.174117][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.235838][T16815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.245493][T16815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.273988][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.282713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.329599][T16938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'. [ 469.356720][T16938] tipc: Started in network mode [ 469.362081][T16938] tipc: Node identity b2cebf8daed6, cluster identity 4711 [ 469.370292][T16938] tipc: Enabled bearer , priority 0 [ 469.378865][T16937] tipc: Resetting bearer [ 469.393592][T16937] tipc: Disabling bearer [ 470.918170][ T5827] Bluetooth: hci1: command tx timeout [ 472.997941][ T5827] Bluetooth: hci1: command tx timeout [ 475.078577][ T5827] Bluetooth: hci1: command tx timeout [ 495.460994][T16945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3117'. [ 495.582494][T16945] bond1 (unregistering): Released all slaves [ 495.775539][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.786400][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.796116][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.807291][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.816879][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.872017][T16961] wg1 speed is unknown, defaulting to 1000 [ 495.914856][T16955] syzkaller0: entered promiscuous mode [ 495.930781][T16955] syzkaller0: entered allmulticast mode [ 496.174368][T16961] chnl_net:caif_netlink_parms(): no params data found [ 496.191473][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 496.201650][T16979] rdma_rxe: rxe_newlink: failed to add syz_tun [ 496.219843][T16979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3120'. [ 496.301168][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.308985][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.316166][T16961] bridge_slave_0: entered allmulticast mode [ 496.323576][T16961] bridge_slave_0: entered promiscuous mode [ 496.331357][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.338818][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.346131][T16961] bridge_slave_1: entered allmulticast mode [ 496.355947][T16961] bridge_slave_1: entered promiscuous mode [ 496.403899][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.416819][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.482326][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3122'. [ 496.523344][T16961] team0: Port device team_slave_0 added [ 496.533775][T16961] team0: Port device team_slave_1 added [ 496.604211][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.611805][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.640318][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.655527][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.674544][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.703668][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.730701][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3125'. [ 496.766856][T16999] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3126'. [ 496.771244][T16997] xfrm1: entered promiscuous mode [ 496.796436][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3125'. [ 496.808124][T16997] xfrm1: entered allmulticast mode [ 496.927579][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 496.946164][T16961] hsr_slave_0: entered promiscuous mode [ 496.965359][T16961] hsr_slave_1: entered promiscuous mode [ 496.980206][T16961] debugfs: 'hsr0' already exists in 'hsr' [ 496.996157][T16961] Cannot create hsr debugfs directory [ 497.048466][T17010] xt_cgroup: xt_cgroup: no path or classid specified [ 497.193227][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3134'. [ 497.262197][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 497.400277][T17028] netlink: 'syz.2.3133': attribute type 12 has an invalid length. [ 497.414410][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.457403][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.466687][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.643587][T16961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.690305][T16961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.728822][T16961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.801765][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.814004][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.850762][T17053] syzkaller1: entered promiscuous mode [ 497.858046][T17053] syzkaller1: entered allmulticast mode [ 497.865447][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.888098][ T5148] Bluetooth: hci5: command tx timeout [ 498.003848][T16961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.022493][T17067] net_ratelimit: 2 callbacks suppressed [ 498.022513][T17067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.038294][T16961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.050502][T16961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 498.080804][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.152701][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.253816][T16961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.264523][T16961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.275048][T16961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 498.301736][T17067] tipc: Enabled bearer , priority 0 [ 498.460642][T17070] syzkaller0: entered promiscuous mode [ 498.466309][T17070] syzkaller0: entered allmulticast mode [ 498.484283][T17070] tipc: Resetting bearer [ 498.511617][T17065] tipc: Resetting bearer [ 498.819330][T17086] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 498.828283][T17086] netlink: 'syz.0.3147': attribute type 1 has an invalid length. [ 499.349057][ T5902] tipc: Node number set to 589143795 [ 499.941498][T17065] tipc: Disabling bearer [ 499.958686][ T5148] Bluetooth: hci5: command tx timeout [ 499.967222][T16961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.978803][T16961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.989251][T16961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.354213][T16961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.394889][T16961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.435348][T16961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.483192][T16961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.892646][T17156] netlink: 'syz.2.3166': attribute type 10 has an invalid length. [ 500.929487][T17156] veth0_virt_wifi: entered allmulticast mode [ 500.948828][T17156] team0: Port device veth0_virt_wifi added [ 500.983118][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.032800][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.084896][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.092126][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.142978][T17162] netlink: 'syz.0.3168': attribute type 12 has an invalid length. [ 501.163132][T17162] netlink: 'syz.0.3168': attribute type 29 has an invalid length. [ 501.172241][T17162] __nla_validate_parse: 9 callbacks suppressed [ 501.172255][T17162] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3168'. [ 501.188839][T17162] netlink: 'syz.0.3168': attribute type 2 has an invalid length. [ 501.196722][T17162] netlink: 'syz.0.3168': attribute type 3 has an invalid length. [ 501.205948][T17162] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3168'. [ 501.226734][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.233925][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.395370][T17180] xt_ipcomp: unknown flags 1D [ 501.410878][T17179] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 501.442999][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 501.580976][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 501.679551][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.802487][T17204] bond9 (unregistering): Released all slaves [ 501.824828][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3181'. [ 501.871617][T16961] veth0_vlan: entered promiscuous mode [ 501.911677][T16961] veth1_vlan: entered promiscuous mode [ 501.951180][T17210] IPVS: persistence engine module ip_vs_pe_À not found [ 501.998283][T16961] veth0_macvtap: entered promiscuous mode [ 502.025165][T16961] veth1_macvtap: entered promiscuous mode [ 502.040643][ T5148] Bluetooth: hci5: command tx timeout [ 502.081544][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.102058][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.121404][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.161283][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.192729][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.220946][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.406767][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.423002][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.546836][T17229] bond1 (unregistering): Released all slaves [ 502.597098][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.655605][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.775892][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 502.817032][T17240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.832032][T17242] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3188'. [ 503.016225][T17257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3192'. [ 503.310399][T17273] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 503.337498][T17273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3196'. [ 503.352460][T17273] NCSI netlink: No device for ifindex 0 [ 503.417429][T17279] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 503.436418][T17287] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3200'. [ 503.449499][T17290] netlink: 'syz.4.3202': attribute type 10 has an invalid length. [ 503.517025][T17279] syzkaller0: entered promiscuous mode [ 503.533098][T17290] batman_adv: batadv0: Adding interface: netdevsim0 [ 503.550862][T17290] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.584026][T17290] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 503.659763][T17298] xt_ipcomp: unknown flags 1D [ 503.699923][ T62] syzkaller0: tun_net_xmit 76 [ 503.707579][ T62] syzkaller0: tun_net_xmit 48 [ 503.728728][T12329] syzkaller0: tun_net_xmit 76 [ 503.829646][T17306] netlink: 'syz.1.3206': attribute type 1 has an invalid length. [ 504.118261][ T5148] Bluetooth: hci5: command tx timeout [ 505.501369][T17337] Cannot find add_set index 0 as target [ 505.580060][T17343] syzkaller1: entered promiscuous mode [ 505.590646][T17343] syzkaller1: entered allmulticast mode [ 505.608834][T17343] xt_TCPMSS: Only works on TCP SYN packets [ 505.964289][T17366] vlan1: entered allmulticast mode [ 505.975100][T17366] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 505.995417][T17383] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 506.005566][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 506.014686][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 506.030592][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 506.061170][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 506.834001][T17404] __nla_validate_parse: 5 callbacks suppressed [ 506.834019][T17404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3232'. [ 506.918905][T17416] netlink: 'syz.5.3234': attribute type 1 has an invalid length. [ 506.932338][T17416] netlink: 'syz.5.3234': attribute type 3 has an invalid length. [ 506.955125][T17418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 506.975050][T17416] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3234'. [ 506.986209][T17418] bond2: option all_slaves_active: invalid value (222) [ 507.006866][T17418] bond2 (unregistering): Released all slaves [ 507.014762][ T3534] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 507.186731][T17436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3241'. [ 507.205311][T17432] bond9: option all_slaves_active: invalid value (222) [ 507.216898][T17432] bond9 (unregistering): Released all slaves [ 507.703798][T17436] netlink: 'syz.0.3241': attribute type 1 has an invalid length. [ 507.722547][T17436] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3241'. [ 507.750042][T17436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3241'. [ 509.813317][T17473] tipc: Started in network mode [ 509.825640][T17473] tipc: Node identity d691738355b1, cluster identity 4711 [ 509.842056][T17473] tipc: Enabled bearer , priority 0 [ 509.860493][T17474] syzkaller0: entered promiscuous mode [ 509.865454][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'. [ 509.868001][T17474] syzkaller0: entered allmulticast mode [ 509.942775][T17490] tipc: Resetting bearer [ 510.030525][T17490] tipc: Disabling bearer [ 510.048823][T17520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3258'. [ 510.069575][T17520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3258'. [ 510.102273][T17525] macvtap1: entered promiscuous mode [ 510.107621][T17525] vlan0: entered promiscuous mode [ 510.113969][T17525] macvtap1: entered allmulticast mode [ 510.149289][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 510.159537][T17525] vlan0: entered allmulticast mode [ 510.169088][T17525] veth0_vlan: entered allmulticast mode [ 510.647535][T17559] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 510.704558][T17559] bond1 (unregistering): Released all slaves [ 511.007378][T17578] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 511.065786][T17581] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 511.215579][ T3534] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.428823][ T3534] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.439774][ T3534] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.465826][ T3534] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.489520][T17606] bridge_slave_0: left allmulticast mode [ 511.495288][T17606] bridge_slave_0: left promiscuous mode [ 511.502908][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.567619][T17611] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 511.642744][T17612] netlink: 'syz.4.3288': attribute type 1 has an invalid length. [ 512.004795][T17606] vlan0 (unregistering): left allmulticast mode [ 512.012628][T17606] bridge0 (unregistering): left allmulticast mode [ 512.021821][T17606] vlan0 (unregistering): left promiscuous mode [ 512.032494][T17606] bridge0 (unregistering): left promiscuous mode [ 512.111576][T17608] veth0_to_team: entered promiscuous mode [ 512.117437][T17608] veth0_to_team: entered allmulticast mode [ 512.128096][T17611] batadv0: entered promiscuous mode [ 512.133361][T17611] batadv0: entered allmulticast mode [ 512.161833][T17611] bridge0: port 3(batadv0) entered blocking state [ 512.175643][T17611] bridge0: port 3(batadv0) entered disabled state [ 512.187743][T17611] bridge0: port 3(batadv0) entered blocking state [ 512.194379][T17611] bridge0: port 3(batadv0) entered forwarding state [ 512.261518][ T1163] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 512.275152][ T1163] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 512.393976][T17617] pimreg3: entered allmulticast mode [ 512.415323][T17636] __nla_validate_parse: 7 callbacks suppressed [ 512.415339][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3292'. [ 512.474873][T17630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.490208][T17630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.519499][T17630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.538268][T17630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.556970][T17630] batman_adv: batadv0: Removing interface: netdevsim0 [ 512.586135][T17630] bridge0: port 3(batadv0) entered disabled state [ 512.687229][T17630] bridge0: port 3(batadv0) entered disabled state [ 512.831547][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'. [ 513.060316][T17668] tipc: Enabled bearer , priority 0 [ 513.093164][T17672] tipc: Enabled bearer , priority 0 [ 513.109677][T17672] syzkaller0: entered promiscuous mode [ 513.119729][T17672] syzkaller0: entered allmulticast mode [ 513.160088][T17668] tipc: Disabling bearer [ 513.191672][T17672] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 513.223935][T17673] netlink: 'syz.5.3307': attribute type 4 has an invalid length. [ 513.241525][T17672] tipc: Resetting bearer [ 513.269674][T17671] tipc: Resetting bearer [ 513.275677][T17673] netlink: 'syz.5.3307': attribute type 4 has an invalid length. [ 513.285086][T17681] xt_hashlimit: invalid rate [ 513.321779][T17671] tipc: Disabling bearer [ 513.446829][T17687] 0: reclassify loop, rule prio 0, protocol 800 [ 513.514657][T17693] netlink: 'syz.5.3313': attribute type 1 has an invalid length. [ 513.523641][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3311'. [ 513.785597][T17698] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 513.858882][T17703] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 513.880232][T17698] netlink: 548 bytes leftover after parsing attributes in process `syz.2.3314'. [ 513.932281][T17721] netlink: 'syz.0.3322': attribute type 12 has an invalid length. [ 513.961545][T17721] wg1: entered promiscuous mode [ 513.973100][T17721] wg1: entered allmulticast mode [ 514.114919][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3326'. [ 514.360071][T17744] syzkaller0: entered allmulticast mode [ 514.736211][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 516.129402][T17793] validate_nla: 1 callbacks suppressed [ 516.129418][T17793] netlink: 'syz.4.3347': attribute type 30 has an invalid length. [ 516.171228][T17797] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3349'. [ 516.349355][T17802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 516.387194][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 516.522610][T17815] netlink: 'syz.1.3354': attribute type 10 has an invalid length. [ 516.630443][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 516.770139][T17829] xt_hashlimit: size too large, truncated to 1048576 [ 516.869882][T17839] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 517.051956][T17848] netlink: 'syz.4.3365': attribute type 6 has an invalid length. [ 517.114006][T17851] vti0: entered promiscuous mode [ 517.210790][T17863] netlink: 'syz.4.3370': attribute type 21 has an invalid length. [ 517.382696][T17862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.458322][T17885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.743191][T17899] __nla_validate_parse: 9 callbacks suppressed [ 517.743212][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3377'. [ 517.775828][T17899] block nbd0: Unsupported socket: should be TCP or UNIX. [ 517.845913][T17903] syzkaller0: entered promiscuous mode [ 517.852562][T17903] syzkaller0: entered allmulticast mode [ 517.862356][ T1163] syzkaller0: tun_net_xmit 70 [ 517.896869][T17903] syzkaller0: tun_net_xmit 16 [ 517.901918][T17903] syzkaller0: tun_net_xmit 16 [ 517.961889][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 517.971580][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 517.985818][T17910] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3382'. [ 518.112474][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'. [ 518.138868][T17917] netlink: 'syz.5.3384': attribute type 1 has an invalid length. [ 518.147083][T17917] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3384'. [ 518.164472][T17924] tipc: Enabling of bearer rejected, failed to enable media [ 518.327037][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3390'. [ 518.692657][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'. [ 518.705117][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'. [ 518.733729][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'. [ 518.988218][T17976] netlink: 'syz.2.3402': attribute type 7 has an invalid length. [ 518.995984][T17976] netlink: 'syz.2.3402': attribute type 8 has an invalid length. [ 519.732112][T18034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.906945][ T30] audit: type=1107 audit(1761561778.265:10): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g3âZ"ö¥Rƒ†LH8 L4,Z' [ 520.089051][T18055] 8021q: VLANs not supported on ip_vti0 [ 520.619869][T18089] netlink: 'syz.2.3439': attribute type 2 has an invalid length. [ 520.807560][T18105] tipc: Enabled bearer , priority 10 [ 520.975628][T18111] netlink: 'syz.2.3446': attribute type 4 has an invalid length. [ 521.054268][T18111] `: renamed from bond0 (while UP) [ 521.407120][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.762670][T18162] xt_recent: Unsupported userspace flags (000000b1) [ 521.778894][T18162] sock: sock_set_timeout: `syz.2.3461' (pid 18162) tries to set negative timeout [ 521.904913][T18169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.934166][ T5918] tipc: Node number set to 471383949 [ 522.034942][T18178] netlink: 'syz.1.3468': attribute type 17 has an invalid length. [ 522.134117][T18185] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 522.278916][T18194] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 522.375702][T18200] sctp: [Deprecated]: syz.2.3474 (pid 18200) Use of int in max_burst socket option. [ 522.375702][T18200] Use struct sctp_assoc_value instead [ 522.392133][T18199] netlink: 'syz.4.3473': attribute type 2 has an invalid length. [ 522.419646][T18199] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 522.525850][T18204] syzkaller1: entered promiscuous mode [ 522.543771][T18204] syzkaller1: entered allmulticast mode [ 522.900313][T18230] __nla_validate_parse: 110 callbacks suppressed [ 522.900331][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3487'. [ 522.993001][T18237] bond2: (slave bond_slave_1): Device is not our slave [ 523.004632][T18237] bond2: option active_slave: invalid value (bond_slave_1) [ 523.014588][T18237] bond2 (unregistering): Released all slaves [ 523.325037][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 523.363615][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 523.376927][T18266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.404636][T18276] bond2: entered allmulticast mode [ 523.527178][T18284] wg1 speed is unknown, defaulting to 1000 [ 523.556056][T18287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.742099][T18298] netlink: 'syz.5.3502': attribute type 13 has an invalid length. [ 523.837634][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 523.888898][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.008061][T18319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3509'. [ 524.262614][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'. [ 524.664830][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 524.676348][T18357] tipc: Started in network mode [ 524.683469][T18357] tipc: Node identity b6f4ea40caec, cluster identity 4711 [ 524.697359][T18357] tipc: Enabled bearer , priority 0 [ 524.731031][T18357] syzkaller0: entered promiscuous mode [ 524.737016][T18357] syzkaller0: entered allmulticast mode [ 524.849374][T18357] tipc: Resetting bearer [ 524.863115][T18356] tipc: Resetting bearer [ 524.935861][T18356] tipc: Disabling bearer [ 524.964790][T18369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3523'. [ 525.162110][T18373] tipc: Enabled bearer , priority 0 [ 525.229861][T18376] syzkaller0: entered promiscuous mode [ 525.235366][T18376] syzkaller0: entered allmulticast mode [ 525.252469][T18373] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 525.285309][T18371] tipc: Enabled bearer , priority 2 [ 525.297679][T18373] tipc: Resetting bearer [ 525.308806][T18372] tipc: Resetting bearer [ 525.391726][T18372] tipc: Disabling bearer [ 525.460136][T18391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3530'. [ 525.512529][T18397] netlink: 'syz.2.3530': attribute type 24 has an invalid length. [ 525.525497][T18397] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3530'. [ 525.602292][T18401] tipc: Enabling of bearer rejected, failed to enable media [ 525.631933][T18401] tipc: Enabling of bearer rejected, failed to enable media [ 525.823247][T18419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.830562][T18419] IPv6: NLM_F_CREATE should be set when creating new route [ 526.397954][ T5887] tipc: Node number set to 2199942019 [ 527.434187][ T3534] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.443402][ T3534] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.478226][ T3534] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.498559][ T3534] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.780486][T18458] syzkaller0: entered promiscuous mode [ 527.797494][T18458] syzkaller0: entered allmulticast mode [ 527.810005][T18457] tipc: Enabled bearer , priority 0 [ 527.859792][T18458] tipc: Resetting bearer [ 527.909366][T18456] tipc: Resetting bearer [ 527.967918][T18456] tipc: Disabling bearer [ 528.184752][T18488] __nla_validate_parse: 7 callbacks suppressed [ 528.184770][T18488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3557'. [ 528.207598][T18485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3556'. [ 528.319590][T18494] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 528.329998][T18494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3560'. [ 528.342781][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'. [ 529.272577][T18536] netlink: 'syz.5.3571': attribute type 10 has an invalid length. [ 529.412214][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 529.438002][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 529.462430][T18554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3573'. [ 529.728470][T18576] netlink: 'syz.2.3579': attribute type 1 has an invalid length. [ 529.746489][T18578] veth3: entered promiscuous mode [ 530.021513][T18581] netlink: 'syz.2.3580': attribute type 4 has an invalid length. [ 530.063663][T18581] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3580'. [ 530.201828][T18592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.351899][T12322] IPVS: starting estimator thread 0... [ 530.352860][T18609] netem: incorrect gi model size [ 530.379502][T18609] netem: change failed [ 530.458709][T18610] IPVS: using max 27 ests per chain, 64800 per kthread [ 530.560949][T18619] team0: Device gtp0 is of different type [ 530.772682][T18634] bond3: entered promiscuous mode [ 530.778883][T18639] bridge0: port 3(syz_tun) entered blocking state [ 530.785835][T18639] bridge0: port 3(syz_tun) entered disabled state [ 530.816132][T18639] syz_tun: entered allmulticast mode [ 530.845753][T18634] netlink: 'syz.1.3599': attribute type 10 has an invalid length. [ 530.855557][T18639] syz_tun: entered promiscuous mode [ 530.865360][T18639] bridge0: port 3(syz_tun) entered blocking state [ 530.871935][T18639] bridge0: port 3(syz_tun) entered forwarding state [ 530.882622][T18634] bridge0: port 3(syz_tun) entered disabled state [ 530.889307][T18634] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.896986][T18634] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.907662][T18639] rdma_rxe: rxe_newlink: failed to add syz_tun [ 530.934716][T18634] bridge0: port 3(syz_tun) entered blocking state [ 530.941342][T18634] bridge0: port 3(syz_tun) entered forwarding state [ 530.948256][T18634] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.955459][T18634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.962984][T18634] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.970196][T18634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.020834][T18634] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 531.100355][T18660] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3605'. [ 531.152341][T18662] vlan2: entered promiscuous mode [ 531.162262][T18662] bridge0: entered promiscuous mode [ 531.340047][T18673] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3609'. [ 531.363878][T18673] tipc: Enabled bearer , priority 0 [ 531.380975][T18673] syzkaller0: entered promiscuous mode [ 531.386469][T18673] syzkaller0: entered allmulticast mode [ 531.442622][T18681] sctp: [Deprecated]: syz.1.3612 (pid 18681) Use of int in max_burst socket option. [ 531.442622][T18681] Use struct sctp_assoc_value instead [ 531.456128][T18684] tipc: Resetting bearer [ 531.544550][T18672] tipc: Resetting bearer [ 531.588547][T18672] tipc: Disabling bearer [ 532.134325][T18712] lo: Caught tx_queue_len zero misconfig [ 532.162571][T18712] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 532.296900][T18722] tipc: Enabling of bearer rejected, failed to enable media [ 533.021361][T18769] x_tables: duplicate underflow at hook 3 [ 533.123055][T18786] 8021q: VLANs not supported on gre0 [ 533.200543][T18794] openvswitch: netlink: IP tunnel dst address not specified [ 533.245608][T18796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.523089][T18819] netlink: 'syz.5.3649': attribute type 1 has an invalid length. [ 533.573646][T18819] 8021q: adding VLAN 0 to HW filter on device bond9 [ 533.624410][T18824] 8021q: adding VLAN 0 to HW filter on device bond9 [ 533.644804][T18824] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 533.661666][T18824] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 533.669525][T18827] netlink: 'syz.1.3650': attribute type 1 has an invalid length. [ 533.681222][T18827] __nla_validate_parse: 3 callbacks suppressed [ 533.681236][T18827] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3650'. [ 533.702974][T18832] netlink: 'syz.1.3650': attribute type 1 has an invalid length. [ 533.713999][T18832] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3650'. [ 533.801475][T18819] veth5: entered promiscuous mode [ 533.811078][T18835] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 533.821410][T18819] bond9: (slave veth5): Enslaving as an active interface with a down link [ 533.861861][T18831] vlan0: entered allmulticast mode [ 533.867019][T18831] bond9: entered allmulticast mode [ 533.986061][T18845] netlink: 'syz.0.3656': attribute type 4 has an invalid length. [ 534.469175][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'. [ 534.482071][ T30] audit: type=1804 audit(1761561792.815:11): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3668" name="/newroot/155/cgroup.controllers" dev="tmpfs" ino=807 res=1 errno=0 [ 534.512490][ T30] audit: type=1800 audit(1761561792.815:12): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3668" name="cgroup.controllers" dev="tmpfs" ino=807 res=0 errno=0 [ 534.514931][T18886] netlink: 'syz.0.3671': attribute type 1 has an invalid length. [ 534.564723][T18886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.638601][T18893] netlink: 'syz.5.3672': attribute type 83 has an invalid length. [ 534.657477][T18897] delete_channel: no stack [ 534.667470][T12329] IPVS: starting estimator thread 0... [ 534.675058][T18894] delete_channel: no stack [ 534.769502][T18898] IPVS: using max 29 ests per chain, 69600 per kthread [ 534.814323][T18908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.999781][T18915] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 535.138549][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3683'. [ 535.316953][T18938] netlink: 'syz.0.3685': attribute type 5 has an invalid length. [ 535.530456][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3693'. [ 535.541843][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3693'. [ 535.602502][T18956] ip6gre1: entered allmulticast mode [ 535.669609][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3689'. [ 535.723850][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 536.644139][T19004] syzkaller0: entered promiscuous mode [ 536.661531][T19004] syzkaller0: entered allmulticast mode [ 536.739199][T19021] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3711'. [ 536.776817][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 536.837135][T19024] sctp: [Deprecated]: syz.2.3710 (pid 19024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.837135][T19024] Use struct sctp_sack_info instead [ 538.061709][T19017] C: renamed from lo (while UP) [ 538.068609][T19017] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 539.857402][T19071] __nla_validate_parse: 2 callbacks suppressed [ 539.857420][T19071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3724'. [ 540.008493][T19083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3731'. [ 540.026897][T19087] bridge0: port 3(syz_tun) entered disabled state [ 540.037121][T19088] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3732'. [ 540.049917][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3732'. [ 540.059446][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3732'. [ 540.074529][T19090] tipc: Enabled bearer , priority 0 [ 540.098622][T19090] syzkaller0: entered promiscuous mode [ 540.109894][T19090] syzkaller0: entered allmulticast mode [ 540.170989][T19090] tipc: Resetting bearer [ 540.196667][T19089] tipc: Resetting bearer [ 540.240995][T19089] tipc: Disabling bearer [ 540.373063][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 540.548527][T19119] vlan0: entered promiscuous mode [ 540.553750][T19119] erspan0: entered promiscuous mode [ 540.862193][T19131] batadv0: entered promiscuous mode [ 540.889771][T19131] bond0: entered promiscuous mode [ 540.936889][T19131] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 540.959518][T19131] hsr1: entered allmulticast mode [ 540.964854][T19131] batadv0: entered allmulticast mode [ 540.975949][T19131] bond0: entered allmulticast mode [ 540.997379][T19131] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 541.073636][T19124] infiniband syz0: set active [ 541.082170][T19124] infiniband syz0: added bond_slave_0 [ 541.197249][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 541.230586][T19124] RDS/IB: syz0: added [ 541.234730][T19124] smc: adding ib device syz0 with port count 1 [ 541.245052][T19124] smc: ib device syz0 port 1 has no pnetid [ 541.298994][T19141] vxcan2: entered allmulticast mode [ 541.303124][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 541.608298][T19161] netlink: 'syz.2.3750': attribute type 4 has an invalid length. [ 541.616258][T19158] netlink: 'syz.0.3753': attribute type 2 has an invalid length. [ 541.834951][T19178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3757'. [ 541.863384][T19180] netlink: 'syz.1.3756': attribute type 29 has an invalid length. [ 541.894554][T19180] netlink: 'syz.1.3756': attribute type 29 has an invalid length. [ 542.013168][T19188] wg1 speed is unknown, defaulting to 1000 [ 542.958317][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 543.499279][T19280] netlink: 'syz.1.3779': attribute type 21 has an invalid length. [ 543.873046][T19306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.115345][T19319] netlink: 'syz.2.3791': attribute type 30 has an invalid length. [ 544.686045][T19346] gretap1: entered promiscuous mode [ 544.707894][T19346] gretap1: entered allmulticast mode [ 544.908748][T19367] netlink: 'syz.5.3801': attribute type 15 has an invalid length. [ 544.933331][T19356] __nla_validate_parse: 12 callbacks suppressed [ 544.933349][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'. [ 544.945007][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3801'. [ 544.960458][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3798'. [ 545.181044][T19377] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 545.183641][T19374] macvtap1: entered promiscuous mode [ 545.196469][T19374] vlan0: entered promiscuous mode [ 545.202064][T19374] macvtap1: entered allmulticast mode [ 545.209465][T19374] vlan0: entered allmulticast mode [ 545.215075][T19374] veth0_vlan: entered allmulticast mode [ 545.520042][T19387] bond2: entered promiscuous mode [ 545.536161][T19391] netlink: 'syz.0.3809': attribute type 24 has an invalid length. [ 545.545017][T19387] bond2: entered allmulticast mode [ 545.565720][T19387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.635366][T19397] netlink: 'syz.2.3811': attribute type 8 has an invalid length. [ 545.716906][T19399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3812'. [ 545.734302][T19399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3812'. [ 545.755309][T19404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.813153][T19399] atomic_op ffff888027559998 conn xmit_atomic 0000000000000000 [ 545.931386][T19410] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3812'. [ 545.946768][T19403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.083933][T19403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.294985][T19403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.368044][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3821'. [ 546.441234][T19434] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 546.514974][T19403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.670950][T19445] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3826'. [ 546.714959][ T6937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.746598][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.779692][T19209] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.794851][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3827'. [ 546.828035][ T1163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.911911][T19454] pimreg: entered allmulticast mode [ 546.955268][T19455] veth0: Caught tx_queue_len zero misconfig [ 546.987255][T19455] validate_nla: 2 callbacks suppressed [ 546.987272][T19455] netlink: 'syz.5.3829': attribute type 3 has an invalid length. [ 547.242221][T19467] syzkaller0: entered promiscuous mode [ 547.247855][T19467] syzkaller0: entered allmulticast mode [ 547.274066][T19469] netlink: 'syz.2.3835': attribute type 29 has an invalid length. [ 547.282380][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'. [ 547.422921][T19484] netlink: 'syz.2.3838': attribute type 25 has an invalid length. [ 547.705091][T19499] openvswitch: netlink: Flow actions attr not present in new flow. [ 548.003641][T19526] ip6tnl0: Caught tx_queue_len zero misconfig [ 548.165999][T19543] sctp: [Deprecated]: syz.2.3857 (pid 19543) Use of int in max_burst socket option. [ 548.165999][T19543] Use struct sctp_assoc_value instead [ 548.528364][T19569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.575642][T19575] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 548.599921][T19575] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 548.618617][T19575] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 548.636344][T19575] netlink: 'syz.4.3865': attribute type 2 has an invalid length. [ 549.059664][T19600] netlink: 'syz.1.3873': attribute type 3 has an invalid length. [ 549.105154][T19600] netlink: 'syz.1.3873': attribute type 3 has an invalid length. [ 549.433051][T19621] netlink: 'syz.2.3879': attribute type 29 has an invalid length. [ 549.831898][T19645] bond2: option primary_reselect: invalid value (255) [ 549.844878][T19645] bond2 (unregistering): Released all slaves [ 549.847870][T19642] nbd4: detected capacity change from 0 to 127 [ 549.869024][ T5148] block nbd4: Receive control failed (result -32) [ 549.905278][T19632] ip6t_rpfilter: unknown options [ 549.970614][T19653] syzkaller0: entered promiscuous mode [ 549.988277][T19653] syzkaller0: entered allmulticast mode [ 550.066000][T19666] __nla_validate_parse: 10 callbacks suppressed [ 550.066016][T19666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'. [ 550.110795][T19657] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3889'. [ 550.172415][T19666] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 550.204123][T19662] v: renamed from vlan0 [ 550.251147][T19669] bond10: option miimon: invalid value (18446744073709551585) [ 550.257140][T19677] openvswitch: netlink: IP tunnel dst address not specified [ 550.276430][T19669] bond10: option miimon: allowed values 0 - 2147483647 [ 550.301466][T19669] bond10 (unregistering): Released all slaves [ 550.516708][T19690] tipc: Invalid UDP bearer configuration [ 550.516763][T19690] tipc: Enabling of bearer rejected, failed to enable media [ 550.536727][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'. [ 550.567834][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'. [ 551.042400][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3906'. [ 551.061889][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 551.181245][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'. [ 551.228604][T19735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3909'. [ 551.237666][T19735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3909'. [ 551.249496][T19732] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 551.702960][T19768] veth1_to_bond: entered allmulticast mode [ 551.726228][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3918'. [ 551.770477][T19768] bond0: (slave bond_slave_1): Releasing backup interface [ 551.800897][T19768] veth1_to_bond (unregistering): left allmulticast mode [ 551.820840][T19779] pim6reg1: entered promiscuous mode [ 551.826233][T19779] pim6reg1: entered allmulticast mode [ 551.834505][T19780] tunl0: entered promiscuous mode [ 551.916000][T19782] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 551.942975][T19785] tipc: Enabled bearer , priority 0 [ 551.950713][T19785] syzkaller0: entered promiscuous mode [ 551.956396][T19785] syzkaller0: entered allmulticast mode [ 551.991598][T19785] tipc: Resetting bearer [ 552.005522][T19783] tipc: Resetting bearer [ 552.029906][T19783] tipc: Disabling bearer [ 552.050986][T12322] IPVS: starting estimator thread 0... [ 552.138801][T19790] IPVS: using max 30 ests per chain, 72000 per kthread [ 552.884416][T19823] Unsupported xt match [ 552.884435][T19823] unable to load match [ 553.059542][T19858] IPVS: set_ctl: invalid protocol: 38641 10.1.1.1:20003 [ 553.180508][T19871] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 553.325439][T19879] syzkaller1: entered allmulticast mode [ 553.344815][T19888] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.352493][T19888] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.541758][T19894] validate_nla: 7 callbacks suppressed [ 553.541781][T19894] netlink: 'syz.0.3955': attribute type 4 has an invalid length. [ 553.574656][T19895] netlink: 'syz.0.3955': attribute type 4 has an invalid length. [ 553.692308][T19900] tipc: Trying to set illegal importance in message [ 553.698812][T19901] netlink: 'syz.5.3958': attribute type 1 has an invalid length. [ 553.710356][ T62] tipc: Subscription rejected, illegal request [ 565.238311][T19749] Bluetooth: hci2: command 0x0406 tx timeout [ 570.357967][T19749] Bluetooth: hci4: command 0x0406 tx timeout [ 578.542535][T19918] netlink: 'syz.2.3962': attribute type 39 has an invalid length. [ 578.559694][T19915] netlink: 'syz.0.3960': attribute type 21 has an invalid length. [ 578.567546][T19915] __nla_validate_parse: 15 callbacks suppressed [ 578.567562][T19915] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3960'. [ 578.870824][T19915] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3960'. [ 579.023942][T19933] batadv0: entered promiscuous mode [ 579.033550][T19933] bond0: entered promiscuous mode [ 579.039382][T19933] bond_slave_0: entered promiscuous mode [ 579.045513][T19933] bond_slave_1: entered promiscuous mode [ 579.053458][T19933] debugfs: 'hsr1' already exists in 'hsr' [ 579.060025][T19933] Cannot create hsr debugfs directory [ 579.066061][T19933] hsr1: entered allmulticast mode [ 579.071915][T19933] batadv0: entered allmulticast mode [ 579.077355][T19933] bond0: entered allmulticast mode [ 579.083026][T19933] bond_slave_0: entered allmulticast mode [ 579.102689][T19933] bond_slave_1: entered allmulticast mode [ 579.109155][T19933] bridge0: entered allmulticast mode [ 579.115215][T19933] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 579.135198][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3969'. [ 579.367889][T19948] tipc: Enabled bearer , priority 0 [ 579.376240][T19948] syzkaller0: entered promiscuous mode [ 579.396033][T19948] syzkaller0: entered allmulticast mode [ 579.412789][T19948] tipc: Resetting bearer [ 579.497485][T19959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3974'. [ 579.581550][T19947] tipc: Resetting bearer [ 579.606560][T19947] tipc: Disabling bearer [ 579.894648][T19976] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 579.935634][T19967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 579.993946][T19976] bond4: entered promiscuous mode [ 580.004352][T19976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.040804][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3980'. [ 580.048903][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 580.069016][T19976] bond4: (slave bridge1): making interface the new active one [ 580.076843][T19976] bridge1: entered promiscuous mode [ 580.090218][T19976] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 580.148747][T19983] can: request_module (can-proto-0) failed. [ 580.176766][T19988] netlink: 'syz.1.3982': attribute type 11 has an invalid length. [ 580.239826][T19990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3983'. [ 580.268763][T19992] netlink: 'syz.1.3984': attribute type 5 has an invalid length. [ 580.276758][T19990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3983'. [ 580.413450][T19995] netlink: 'syz.2.3985': attribute type 4 has an invalid length. [ 580.429120][T19995] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3985'. [ 580.470613][T20009] netlink: 'syz.0.3989': attribute type 4 has an invalid length. [ 581.110495][T20037] wg1 speed is unknown, defaulting to 1000 [ 581.158859][T20035] netlink: 'syz.1.3998': attribute type 5 has an invalid length. [ 581.395002][T20065] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4004'. [ 581.689678][T20069] syzkaller1: entered promiscuous mode [ 581.695308][T20069] syzkaller1: entered allmulticast mode [ 581.881986][T20095] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 582.196348][T20073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.203178][T20073] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 582.215121][T20073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.225045][T20073] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 582.256079][T20073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.282164][T20073] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 582.321564][T20073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.336376][T20073] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 582.383872][T20073] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 582.392142][T20073] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 582.426650][T20134] netlink: 'syz.0.4024': attribute type 3 has an invalid length. [ 582.633655][T20139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.776033][T20152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.784469][T20152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.793917][T20152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.813910][T20152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.872047][T20152] batadv0 (unregistering): left promiscuous mode [ 583.616103][T20208] __nla_validate_parse: 11 callbacks suppressed [ 583.616121][T20208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4052'. [ 583.876223][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 584.160312][T19749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.174080][T19749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.182928][T19749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.194721][T19749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.203395][T19749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.226600][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.234336][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.242781][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.253997][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.264394][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.312580][T20241] pim6reg527: entered allmulticast mode [ 584.360396][T20232] wg1 speed is unknown, defaulting to 1000 [ 584.646105][T20260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.032000][T20282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.053243][T20232] chnl_net:caif_netlink_parms(): no params data found [ 585.273331][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 585.323094][T20302] validate_nla: 3 callbacks suppressed [ 585.323111][T20302] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 585.363379][T20232] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.381953][T20232] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.392475][T20303] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 585.398007][T20232] bridge_slave_0: entered allmulticast mode [ 585.416781][T20232] bridge_slave_0: entered promiscuous mode [ 585.437346][T20302] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 585.439559][T20232] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.475881][T20232] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.488214][T20232] bridge_slave_1: entered allmulticast mode [ 585.506427][T20232] bridge_slave_1: entered promiscuous mode [ 585.596718][T20309] bridge2: entered promiscuous mode [ 585.602785][T20309] bridge2: entered allmulticast mode [ 585.709576][T20232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.740964][T20232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.761728][T20322] wg1: left promiscuous mode [ 585.781128][T20322] macvtap1: left promiscuous mode [ 585.786813][T20322] vlan0: left promiscuous mode [ 585.794191][T20322] bridge2: left promiscuous mode [ 585.858637][T20232] team0: Port device team_slave_0 added [ 585.868913][T20232] team0: Port device team_slave_1 added [ 585.941063][T20232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.953148][T20232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.980963][T20232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.004170][T20331] syzkaller1: entered promiscuous mode [ 586.013509][T20331] syzkaller1: entered allmulticast mode [ 586.025849][T20232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.045029][T20232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.102928][T20232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.358595][ T5148] Bluetooth: hci0: command tx timeout [ 586.364987][T20232] hsr_slave_0: entered promiscuous mode [ 586.381496][T20232] hsr_slave_1: entered promiscuous mode [ 586.415567][T20232] debugfs: 'hsr0' already exists in 'hsr' [ 586.430386][T20232] Cannot create hsr debugfs directory [ 586.442078][T20357] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4085'. [ 586.463695][T20357] gretap0: entered promiscuous mode [ 586.540818][T20359] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4085'. [ 586.593245][T20357] netlink: 'syz.1.4085': attribute type 6 has an invalid length. [ 586.604630][T20359] 0ªî{X¹¦: renamed from gretap0 [ 586.634178][T20359] 0ªî{X¹¦: left promiscuous mode [ 586.639569][T20359] 0ªî{X¹¦: entered allmulticast mode [ 586.650265][T20359] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 586.845819][T20373] sctp: [Deprecated]: syz.4.4090 (pid 20373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.845819][T20373] Use struct sctp_sack_info instead [ 586.976157][T20232] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.130432][T20232] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.161173][T20387] netlink: 'syz.4.4094': attribute type 17 has an invalid length. [ 587.182563][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 587.214286][T20387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4094'. [ 587.234984][T20232] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.297477][T20387] gretap0: entered promiscuous mode [ 587.317162][T20387] gretap0: left promiscuous mode [ 587.317181][T20398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4097'. [ 587.409693][T20232] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.462597][T20410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4097'. [ 587.530092][T20413] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 587.546046][T20415] netlink: 'syz.1.4101': attribute type 2 has an invalid length. [ 587.731628][T20418] tipc: Enabling of bearer rejected, failed to enable media [ 587.803668][T20232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 587.849185][T20232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.020355][T20232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.056948][T20232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 588.106527][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 588.331595][T20232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.411213][T20232] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.441294][ T5148] Bluetooth: hci0: command tx timeout [ 588.442865][T19211] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.453959][T19211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.517627][T19211] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.524854][T19211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.784641][T20490] ipvlan0: entered promiscuous mode [ 588.793131][T20490] ipvlan0: entered allmulticast mode [ 588.813217][T20498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.945073][T20502] __nla_validate_parse: 2 callbacks suppressed [ 588.945091][T20502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4124'. [ 588.969908][T20502] netlink: 'syz.4.4124': attribute type 7 has an invalid length. [ 588.995918][T20502] netlink: 'syz.4.4124': attribute type 8 has an invalid length. [ 589.014380][T20232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.041205][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 589.073601][T20502] erspan0: entered promiscuous mode [ 589.104273][T20502] batadv_slave_1: entered promiscuous mode [ 589.117880][T20502] erspan0: left promiscuous mode [ 589.128763][T20502] batadv_slave_1: left promiscuous mode [ 589.417432][T20529] xt_TCPMSS: Only works on TCP SYN packets [ 589.427885][T20528] veth0: entered promiscuous mode [ 589.435188][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 589.442283][T20232] veth0_vlan: entered promiscuous mode [ 589.536618][T20232] veth1_vlan: entered promiscuous mode [ 589.555770][T20532] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4134'. [ 589.571041][T20532] 0ªî{X¹¦: entered promiscuous mode [ 589.576443][T20532] 0ªî{X¹¦: left allmulticast mode [ 589.603222][T20232] veth0_macvtap: entered promiscuous mode [ 589.632028][T20232] veth1_macvtap: entered promiscuous mode [ 589.676782][T20232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.697373][T20232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.716723][ T3534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.730799][ T3534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.758281][ T3534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.767231][ T3534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.866364][T20543] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4139'. [ 590.025385][T20517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.031719][T20517] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 590.168230][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.176066][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.258262][T20553] netlink: 'syz.4.4142': attribute type 2 has an invalid length. [ 590.264799][T19211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.266049][T20553] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4142'. [ 590.285533][T19211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.579810][T20578] netlink: 'syz.1.4151': attribute type 1 has an invalid length. [ 590.590316][T20578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4151'. [ 590.608943][T20582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4150'. [ 590.797268][T20589] syzkaller0: entered promiscuous mode [ 590.804748][T20589] syzkaller0: entered allmulticast mode [ 590.831870][T20591] xt_bpf: check failed: parse error [ 591.040217][T20605] set match dimension is over the limit! [ 591.047532][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4158'. [ 591.078850][T20599] team0 (unregistering): Port device team_slave_0 removed [ 591.092759][T20599] team0 (unregistering): Port device team_slave_1 removed [ 591.450001][T20629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'. [ 591.633871][T20646] netlink: 'syz.0.4167': attribute type 10 has an invalid length. [ 591.663576][T20646] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 591.735445][T20648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.955894][T20658] tipc: Enabling of bearer rejected, already enabled [ 592.069466][T20667] netem: change failed [ 592.083287][T20667] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 592.131993][T20669] vlan2: entered allmulticast mode [ 592.139172][T20669] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 592.284302][T20680] macvtap1: entered promiscuous mode [ 592.290957][T20680] vlan0: entered promiscuous mode [ 592.296449][T20680] macvtap1: entered allmulticast mode [ 592.302855][T20680] vlan0: entered allmulticast mode [ 592.308647][T20680] veth0_vlan: entered allmulticast mode [ 592.368560][T20683] netlink: 'syz.1.4183': attribute type 9 has an invalid length. [ 592.532035][T20694] netlink: 'syz.1.4186': attribute type 6 has an invalid length. [ 594.063571][T20720] netlink: 'syz.0.4190': attribute type 3 has an invalid length. [ 594.210014][T20723] __nla_validate_parse: 8 callbacks suppressed [ 594.210031][T20723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4194'. [ 594.226051][T20726] syzkaller0: entered promiscuous mode [ 594.231751][T20726] syzkaller0: entered allmulticast mode [ 594.243915][T20725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4193'. [ 594.296807][T20726] tipc: Enabled bearer , priority 0 [ 594.360308][T20724] tipc: Resetting bearer [ 594.399503][T20724] tipc: Disabling bearer [ 594.418601][ T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 594.438096][ T12] ref_tracker: netdev@ffff888078fac618 has 1/1 users at [ 594.438096][ T12] batadv_hard_if_event+0xf0f/0x1730 [ 594.438096][ T12] notifier_call_chain+0x1b6/0x3e0 [ 594.438096][ T12] register_netdevice+0x1608/0x1ae0 [ 594.438096][ T12] veth_newlink+0x5d4/0xa60 [ 594.438096][ T12] rtnl_newlink_create+0x310/0xb00 [ 594.438096][ T12] rtnl_newlink+0x16e4/0x1c80 [ 594.438096][ T12] rtnetlink_rcv_msg+0x7cf/0xb70 [ 594.438096][ T12] netlink_rcv_skb+0x208/0x470 [ 594.438096][ T12] netlink_unicast+0x82f/0x9e0 [ 594.438096][ T12] netlink_sendmsg+0x805/0xb30 [ 594.438096][ T12] __sock_sendmsg+0x21c/0x270 [ 594.438096][ T12] __sys_sendto+0x3bd/0x520 [ 594.438096][ T12] __x64_sys_sendto+0xde/0x100 [ 594.438096][ T12] do_syscall_64+0xfa/0xfa0 [ 594.438096][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.438096][ T12]