last executing test programs: 2.092617345s ago: executing program 3 (id=2861): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000004800000000000000110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) socket$packet(0x11, 0xa, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r7}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r7}, 0x20) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x4, [0x25a, 0x10, 0x0, 0x6]}}) 2.017849907s ago: executing program 0 (id=2862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 2.017057081s ago: executing program 3 (id=2864): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004dc0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x8048000, &(0x7f0000000200)={0x11, 0x17, r6, 0x1, 0x1, 0x6, @multicast}, 0x14) 1.942371226s ago: executing program 0 (id=2866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000080002000500000015000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000080002000500000015000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) 1.861788221s ago: executing program 3 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x9, 0x5}, 0x14}}, 0x0) (async, rerun: 32) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000bfffffff1000000000000000050000b000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="040029bd7000fcdbdf2505000000050001000000000014000300fc000000000000000000000000d400000105000100010000000500010001000000050001000000000008000500e00000021400020000000000000000000000ffffac1414bb08000500ac1e01011400030000000000000000000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x10080) 1.860904134s ago: executing program 0 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x506}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x200}]}, 0x68}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000d2c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f000000d3c0)={0x0, 0x0, &(0x7f000000d380)={&(0x7f000000d300)={0x38, r6, 0x125, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x400, 0xd, 0xffff, 0x5, 0x1, 0xc5]}}]}]}]}, 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x54, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa3c, 0x3a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x50}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x200080d0}, 0x24004900) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r13, 0x29, 0x16, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.838307025s ago: executing program 3 (id=2869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000), 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) close(r0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0xa, 0x87, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x9, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x8, 0x40, 0xaa, 0x7, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x2, 0xc, "87439ace0c5f4b8c20a2"}, {0x7, 0x4, "519d"}, {0x7, 0x10, "198455c3449cd7243d2106755806"}, {0x0, 0x8, "3eb684e13614"}, {0x7, 0x6, "86fd7616"}]}, @noop, @timestamp={0x44, 0xc, 0x20, 0x0, 0x1, [0x9, 0x3]}, @lsrr={0x83, 0x7, 0x46, [@broadcast]}, @rr={0x7, 0x1f, 0xf0, [@remote, @multicast2, @empty, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x5, 0x5, {{0x1f, 0x4, 0x0, 0x6, 0x7c, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @empty, {[@ssrr={0x89, 0xf, 0x42, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xf, 0x1, 0x4, [{@remote, 0x7}, {@private=0xa010102, 0x80000000}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3ff}, {@private=0xa010102, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9}, {@multicast1, 0x1ff}, {@local, 0x1}, {@rand_addr=0x64010101, 0x80000001}, {@multicast2, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x29, 0xb, 0x3, 0x6, 0x44, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc0, 0x1, 0x6, 0xa}}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x40c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x6, 0x4, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf91}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r14}}}]}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 1.807606449s ago: executing program 3 (id=2870): r0 = socket$inet(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0x1, &(0x7f0000000180)="961d85d3fa3101eb80", 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="1c5870d5e2e2c750b9b53486c0e11f30aa6eeae00b89ea83d5ec0e7827ce59d0c56e05463d40fd6db3880bbe19d222ecd51c35904d140cad40002c797dd742db77ef725d9e5b7732fc68ad115eb6d344bfbc61bf99c8f247d716b4733040e656285e679787d9e00618caaa760f408256a9804f6efaee6407e02ce297e6faab770360feb41c80fe273dff743199f5bcdafb7f9d80735661491c4678482ea8942a57b6e9da14602d3173bf9c06feef1896c7698a5e7440b92c261fcd9f1d75764e8c022b2394d9d01f8bd66509", 0xcc}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000340)="68f55c928393b87284494351524bedc52cd34a611862d1b59d750195a564da2bb7b7d762bbfa715d985f5a65a975bf4bad565606281382135bac652fc3ae82992a862c3838919abaf5773f68a46490209bec3397645f6ef884a5c7ed0ec3c5727c37a4b6deb7c564e47219a7b332073ef40a04625da37f1dba66927fae571df4e54c705cb4e4cfb42447438efb6481afe6d10f99724a4ea3941c75704c887ecd95a51ca3d97b06ed8202cf7896aaf39e4d9cf58c496530a228ce9b6665f15175e786ffb73a61c30126d26aaa5e6b1d1df2ecef05b87aff361ae6aca885a43052c89673be", 0xe4}, {&(0x7f0000000000)="53acf5047a3a", 0x6}, {&(0x7f0000000280)="6fdcc6f38e43c10c470f99349b2897e119e1847ec473924b8e729d1309add85653437fa78c541dddc5625ba46c2a3f0855ca68ffc87b010029547659b86a2a24ba5203ca902934550a9daed9df7c058d695c143f02269a3ac391c575d5915a6b2fcdae35a132773ae9b0cbe6a27dc32c", 0x70}], 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0x5}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x1, 0xc, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) 1.693382024s ago: executing program 3 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000100b13d47b43e7dbb3900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.403974074s ago: executing program 1 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) 1.282750482s ago: executing program 1 (id=2883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) 829.372868ms ago: executing program 1 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="5fbd9dbbeeb7ed35f35a39377e78f38887740bad7e7e11e59e4829a4681ab5ecea87f8601dfc702e4e67a1e6aec4eac3ab"], 0x28}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="5fbd9dbbeeb7ed35f35a39377e78f38887740bad7e7e11e59e4829a4681ab5ecea87f8601dfc702e4e67a1e6aec4eac3ab"], 0x28}}, 0x0) 824.423161ms ago: executing program 1 (id=2888): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f000006"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000340)=0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 822.721615ms ago: executing program 0 (id=2889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'sit0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000001640), &(0x7f0000001680)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40002) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r1, 0x65114000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x130, 0x98, 0x0, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r11, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 820.598496ms ago: executing program 1 (id=2891): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x8, 0x7fff}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000100)=""/48, 0x4f, 0x30, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000180)=""/89, 0x59, 0x0, &(0x7f0000000200)=""/87, 0x57}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000180)=""/89, 0x59, 0x0, &(0x7f0000000200)=""/87, 0x57}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, &(0x7f0000000340), &(0x7f0000000380)=0x10) accept4$x25(0xffffffffffffffff, &(0x7f00000003c0)={0x9, @remote}, &(0x7f0000000400)=0x12, 0x0) (async) r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0)={0x9, @remote}, &(0x7f0000000400)=0x12, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r4, 0x319c}, {r1, 0x320}, {r3, 0x4082}, {r0, 0x8180}, {r1, 0x3664}, {r5, 0x19}, {r2, 0x48}], 0x7, &(0x7f00000004c0), &(0x7f0000000500)={[0x6]}, 0x8) (async) ppoll(&(0x7f0000000480)=[{r4, 0x319c}, {r1, 0x320}, {r3, 0x4082}, {r0, 0x8180}, {r1, 0x3664}, {r5, 0x19}, {r2, 0x48}], 0x7, &(0x7f00000004c0), &(0x7f0000000500)={[0x6]}, 0x8) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000540)={0x1, 0x95}) r6 = accept(r0, &(0x7f0000000580)=@generic, &(0x7f0000000600)=0x80) bind$alg(r6, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0xfe}, &(0x7f0000000700)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0xfe}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000740)={r7, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000740)={r7, 0x9}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) socketpair(0x1a, 0x6, 0x4, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc8, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) sendmsg$nl_generic(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x31, 0x4, 0x70bd2b, 0x25dfdbfd, {0x10}, [@typed={0x38, 0xfd, 0x0, 0x0, @binary="8e7670a0bc20417eeb7fd4baa3a761f94822d56a81a1ea0d072176abddcb8524a32bcde77d95489c38dd5bfa09b16fd8c1be7c24"}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x54}}, 0x40000) (async) sendmsg$nl_generic(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x31, 0x4, 0x70bd2b, 0x25dfdbfd, {0x10}, [@typed={0x38, 0xfd, 0x0, 0x0, @binary="8e7670a0bc20417eeb7fd4baa3a761f94822d56a81a1ea0d072176abddcb8524a32bcde77d95489c38dd5bfa09b16fd8c1be7c24"}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x54}}, 0x40000) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3f5, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0xc0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000c40)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000c80)) connect$inet6(r11, &(0x7f0000000cc0)={0xa, 0x4e20, 0x3, @remote, 0x7}, 0x1c) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000d00)=0x0) r13 = getuid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={r12, r13}, 0xc) 818.334717ms ago: executing program 4 (id=2892): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 814.555333ms ago: executing program 4 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xedee, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, r1, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 786.289983ms ago: executing program 4 (id=2894): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) accept(r2, 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r6}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) r10 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101f02, 0x0) ioctl$PPPIOCSACTIVE(r10, 0x40107446, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) socket$inet(0x2b, 0x4, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 549.679692ms ago: executing program 2 (id=2896): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xe5, @mcast1, 0x2}}, 0x6, 0x4, 0x4, 0x2, 0x40, 0xffff, 0x4}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x23, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r1, 0x6, 0x8, 0x1, 0xda8, 0x8}, &(0x7f0000000280)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x2, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa000000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x4004) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "294b1ad418374528372fd9b5cb398fbe2b0bcd1a8405f2784feba8e8c15788a1efca10"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8a}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x34040840) r3 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@isdn, &(0x7f0000000640)=0x80, 0x80800) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_deladdrlabel={0x80, 0x49, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1a}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r3) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$qrtr(r3, &(0x7f0000000c40)={0x2a, 0x0, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000d00)={r1, 0x50, &(0x7f0000000c80)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000d40)=0x10) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000d80)={0x1, 0xc825755a34e553f1, 0x2, r5, 0x3}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000f00)={r1, @in6={{0xa, 0x4e24, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, [0xee, 0x6, 0x400, 0x73e, 0x4, 0x3, 0x10001, 0x43, 0x4, 0xfffffffffffffeff, 0x2b, 0x8, 0x3, 0x2, 0x3]}, &(0x7f0000001000)=0x100) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001040)=0xfffffffffffffffd, 0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000010c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r6) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xd8, r9, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, '}'}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "34c4646a50"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7ae9bc126befc4b700cc76c090"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "06257b4fb2f4d29545558c49"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "41981cc3c7"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0xb8, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x88}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc4094}, 0x40) 520.29786ms ago: executing program 2 (id=2897): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc, &(0x7f0000000040)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}, 0x1, 0x0, 0x0, 0x8000}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 457.577135ms ago: executing program 2 (id=2898): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0x6, 0xaf, 0x5, 0x8}, {0x883c, 0x4, 0xf8, 0x4}, {0x4, 0x2}, {0x5, 0x1, 0x2, 0xfffffffa}, {0x5e34, 0x6, 0x6, 0x1}, {0x84a, 0x52, 0xb, 0x4}, {0x4, 0x4, 0x4, 0x9}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 297.792418ms ago: executing program 2 (id=2899): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'batadv_slave_1\x00', {0x48000}, 0x3ff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x7, 0x80000000, 0x3}}) 296.024987ms ago: executing program 0 (id=2900): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x8, 0x7, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x2, 0x1}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x54}, @generic={0x2, 0x7, 0x2, 0x1, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0xb3, 0xc4, &(0x7f00000000c0)=""/196, 0x41000, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[{0x3, 0x3, 0x9, 0x8}, {0x3, 0x3, 0x7, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x8, 0x7, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x2, 0x1}}) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x54}, @generic={0x2, 0x7, 0x2, 0x1, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0xb3, 0xc4, &(0x7f00000000c0)=""/196, 0x41000, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[{0x3, 0x3, 0x9, 0x8}, {0x3, 0x3, 0x7, 0x7}], 0x10, 0x9}, 0x94) (async) 260.414178ms ago: executing program 4 (id=2901): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xed}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4054000) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x20048000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x101}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x40c0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x23c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x69}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1ff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x22}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xcb}, {0x6, 0x16, 0xf84}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x10}, {0x5}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000009c0)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000a00)) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r1, 0x6ec3428b8337c138, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000bc0)={'nicvf0\x00', 0x6}) (async) getsockname$packet(r0, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c80)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r3, 0x710, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x85) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd0, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x80d4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffeff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x48840) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000010c0)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@map=r0, 0x22, 0x0, 0x80000000, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001240)={@fallback=r5, r0, 0x0, 0x200d, r0, @value=r0, @void, @void, @void, r8}, 0x20) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x90, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_generic(r9, &(0x7f0000002a80)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000002a40)={&(0x7f0000001640)={0x13c4, 0x31, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1e}, [@generic="5882f8d5259662a95d580426", @nested={0x39, 0x120, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x8a}, @nested={0x4, 0xd}, @typed={0x8, 0x5, 0x0, 0x0, @pid}, @typed={0x8, 0x125, 0x0, 0x0, @str='pci\x00'}, @generic="d5cd389537b86bbc0a7c222cd4", @nested={0x4, 0x8c}, @nested={0x4, 0x87}]}, @nested={0x1266, 0x10c, 0x0, 0x1, [@nested={0x4, 0xe9}, @typed={0x8, 0x37, 0x0, 0x0, @uid}, @generic="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", @generic="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", @generic="4587d80e28542f9bf3dc44fedb8b07fcd201eeaf095a90eb5bf03cd3a63cf94bc55e885b3fb0a99d8e8626357d2109a795f6d97c85d17541dea79f4900c74b3a01b58f01d6addca07383d8fd24ba7f3dbf2a51cc9f93c96d1ee9b69d8f02bd5ed5eebecc860724283660a6a3853e170403e477", @typed={0xda, 0x50, 0x0, 0x0, @binary="74e67c8c637b4d23b0f5f62805a319fd8f7e619fdade2ea7cb4748331dfd49bb0558259274b56ceb0192dbec85caf69058f8047a4ed47f4118bb0f446ba910c7940f28be3b191790a247b7166c3ba5a3ff931f158ae091372c0380c3933b346d0a0238d08d90a872ec6902d090d65c84a3c39381d8fa229ad2777e9a979572afb5b10008d2c842c8e17d939ff1cc6c5c1472f11f9e58b466cdcf3c8cb132e408c1dd09d133412521e26bc527606767a469818a997f54bd7dc8ed0e79d02a4a084032de87769671164403140c32d21aae0302635228d1"}, @nested={0x4, 0x14a}, @nested={0x4, 0x9c}]}, @generic="f811f0f56e3bd25a586d4a999135fab298923ff040bad61e0548ad2f771759fd925a9b1abef6bb2d00b34b904fa444ad573a6a33877430954e8b2408ea45a818eefd7574874f0a3e338b63b19ea35c3d77dec5943010d71d586993fc469b31596f5a9b9b9ae9e11813a94c527d147c8399c7e86dc86b79cf0dbe634cc7ce9ec5167e9a11aad69bb81b5debb8f882e6656bb82f44147459b70f1905ac77b3c9434c53ec45631f3cb8721ae775", @generic="a04ffc49b00fb37e119fb532580d87d4c56bc09e52964b4533d55146e4529abf5884a3bb8618ccc7f1057e6bca9850e52955031f1ad1caea1ca67d8ef48bdb727b7d0000d914a7b981c2042652667b552e26c8"]}, 0x13c4}, 0x1, 0x0, 0x0, 0x801}, 0x1) 164.659191ms ago: executing program 4 (id=2902): r0 = socket(0x1a, 0x3, 0x888) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff3, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000e00)={{0x0, 0x5, 0x3, 0x101, 0xffffffff, 0x0, 0x57c7, 0x8, 0x0, 0x0, 0x449, 0x1000, 0x200, 0xfff, 0x7}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500001b0000000000019078ac1e0001ac1414aa1110907800000000"], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) listen(r7, 0x4000) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) 163.878086ms ago: executing program 0 (id=2903): bind$phonet(0xffffffffffffffff, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @empty, 0x2000001, 0x0, 0x7d, 0x100, 0x4, 0x2930310}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 127.556439ms ago: executing program 2 (id=2904): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) (async) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x1, 0x24040860) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r3, 0x12700000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delqdisc={0x34c, 0x25, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffc7, 0x6}, {0x5, 0x1}, {0xffe0, 0xd}}, [@TCA_STAB={0x1a0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x45, 0x2, 0x1, 0xff7, 0x0, 0x2, 0x6, 0x8}}, {0x14, 0x2, [0x7, 0x2ae, 0xfff7, 0xe2, 0x0, 0x68e0, 0x80, 0xf2e]}}, {{0x1c, 0x1, {0x2, 0x7, 0xec, 0x7, 0x2, 0x9c6, 0xffff, 0x3}}, {0xa, 0x2, [0x3, 0x3, 0x9]}}, {{0x1c, 0x1, {0xe, 0x20, 0x4, 0x2, 0x0, 0x0, 0x100, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x2a, 0x7fff, 0x4, 0x1, 0x1, 0x101, 0x6}}, {0x10, 0x2, [0x9, 0x0, 0x401, 0x9, 0x8, 0x7]}}, {{0x1c, 0x1, {0x31, 0x8, 0x7, 0x4, 0x0, 0x9, 0x7, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x0, 0x7, 0xfff7, 0x7fff, 0x2, 0x7ff, 0x2, 0x4}}, {0xc, 0x2, [0xffff, 0x3ba4, 0x7, 0x1ff]}}, {{0x1c, 0x1, {0x3f, 0x16, 0x9, 0x6, 0x0, 0x4, 0x4, 0x4}}, {0xc, 0x2, [0x842f, 0x2, 0x0, 0x0]}}, {{0x1c, 0x1, {0xff, 0x88, 0x5, 0x5, 0x0, 0x6, 0x7, 0xa}}, {0x18, 0x2, [0x1b70, 0x6, 0x1ff, 0x0, 0x8001, 0x40, 0x6, 0x122e, 0x81, 0x9]}}, {{0x1c, 0x1, {0x7, 0xf7, 0xb8, 0x8, 0x1, 0x0, 0x10001, 0x1}}, {0x6, 0x2, [0x43]}}, {{0x1c, 0x1, {0x9a, 0x3, 0x1ef, 0xffffffff, 0x2, 0x6, 0xd, 0x4}}, {0xc, 0x2, [0xccb3, 0xfff7, 0x7, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x35, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x2, 0xfff, 0x6, 0x1, 0x9, 0x7ff, 0x8}}, {0x14, 0x2, [0x100, 0x3, 0x5, 0x7, 0xa5cb, 0x6, 0x3, 0x7]}}, {{0x1c, 0x1, {0x1, 0x40, 0x3f, 0x49, 0x2, 0x10001, 0x0, 0x4}}, {0xc, 0x2, [0x4, 0x7, 0x2, 0xb]}}, {{0x1c, 0x1, {0x2, 0x2, 0x2, 0x1, 0x0, 0x3, 0xf, 0x3}}, {0xa, 0x2, [0x9, 0x9, 0xf32]}}, {{0x1c, 0x1, {0x80, 0x5, 0xb, 0x5, 0x1, 0x400001, 0x2, 0x4}}, {0xc, 0x2, [0xe90, 0x2, 0x55, 0xd13]}}, {{0x1c, 0x1, {0x7, 0x5c, 0x3, 0x4, 0x1, 0x80000000, 0x117e, 0xa}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xe, 0x8, 0x2, 0x2, 0x18, 0x6, 0x6]}}, {{0x1c, 0x1, {0x9, 0x8, 0x3, 0x4, 0x0, 0x2, 0x1, 0xb}}, {0x1a, 0x2, [0x800, 0x6, 0x7, 0x1, 0x401, 0x7ff, 0x3, 0x6, 0x4, 0x8, 0x0]}}, {{0x1c, 0x1, {0x8, 0x81, 0x3ff, 0x4, 0x2, 0x0, 0x2, 0x9}}, {0x16, 0x2, [0x6, 0x6, 0x3da8, 0xb0, 0x4a, 0x9b, 0xfffe, 0x2, 0x766]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf1}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x34c}}, 0x0) 13.012627ms ago: executing program 1 (id=2905): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x140f, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x90) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'sit0\x00', r2, 0x700, 0x0, 0x2, 0x3, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0xf, 0x85, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ssrr={0x89, 0x17, 0xcf, [@loopback, @rand_addr=0x64010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$sock(r4, &(0x7f0000002080)=[{{&(0x7f00000002c0)=@caif=@dbg={0x25, 0xda}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="090bc525d2dfe263f1df358f3647da986f428243556b460a", 0x18}], 0x1, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x674b0a90}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}], 0x30}}, {{&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)="30b1a05c1a4ef66870cdb4b5c56e4cc3974869bb1ba5b9ce1e0a7ea3456f934b5ee11727c6fba544023e6922df6506b74c7f8ff543fd26e7d58d9fde36b7c6b0bf1bbcb8ed98fa2096954085d2a343a40427457bcd472a3b52fd234b8e3ec6ec66c4412eb865162f950af88315680b4736759903d62eb499eae0029a7a1dc5c384a06a1d6556b2ec1220f22de5480828a89efd865f265527697729ff", 0x9c}, {&(0x7f0000000540)="1cdc863eeb9481b0367fe9126e70348269f72f9446e1978597d562d79aa31e99a75818799dea2e98b0d5d75573b6ed92a2ff0c12acb27df042a6e1888f528d92eb87d92d390ed2edba383d50103c531bf416e95e46f51f4f1544141886e4814c46013d2d29d25639249d988b4fa5cb82fcdccf2033ca476d2b1588a2ae8a5b7fb40657361746167db360d027a2e2a6f012095a8a638efded536b190a1c1bcea140de977b95", 0xa5}, {&(0x7f0000000600)="4e45601550f8a948ffce9b12126be6791ba2c43273337af8ede0c76b1d11cd74a74f5d0c04201570529c1a00b7ee10676ff7", 0x32}, {&(0x7f0000000640)="db1d20c753d7df2cb6cad3e816bb08bba8618e416c4965cfc2d0422d2e9b395560d5e4dbb875305cb96c4d0ed0c5518ae630af82c8afebb7003cb4e91c7e060802dde822e836333b0b1fbee36ff7245a568059ed03a61a505070eddd7c1cce593c5ebd3e99b1fc6d65560a7a7a07970e4c35e9edaae0f74a478b763543310b0fc2b2cd3900", 0x85}, {&(0x7f0000000700)="dc7bda3bbfef404b45f090736f781782a5d21f78a4dabe4b94c121a8e121bb19d70591db4000a1abba4f805194e8ba28f67ba6b3fb3a6896e464ea457d5064c157a856cd92c0e5753cee62d3a24a2f19caf36f2f01d03e6b759b4579b06ff72c61624ee9e9567af8e2803d9035498387c2ca9c92b1cd015174b361ce34b442c7b393556aad616ac7eae1d56c46e2cd222addb1a875b69a3f726f124e5d28025267bcf0d9c26f210bf9a479e803fef0fea3e3a8a00cf311e0c9ac1d164609dda31c176c49f414021b710e241e", 0xcc}, {&(0x7f0000000800)="0a6ac0b8a8c472929e771c43dd8d6dc480a7035d00fe6e49b4a1458765dc97375b94bb7e73f1a407daaef252c673e8cb8bcbf8c2f51f56a07b43", 0x3a}, {&(0x7f0000000840)="6895cc32646212b09d9789e369df98e98ce91601b03e83f450f94d7439276421b4f3ce6d96c84837bcc88ff3394c3b082bc122c9fbe436def14b4ba5ea0058002fdc9659e1a6be9ae1aa47c9f789346311cf73026f04180dc78d1fe337f7982248d0a2c174cf8d64728b050553623444e76c61ca9e3f7efc63d970e3f764c66b29bf17d0c4a0e7c083b77d85968c21b403c278254a5c2bf7098b0693e8bb6ee1e96f3b6e39e1d8929ef4e25586f2915ab06e1b01cc178af7fd18f831f63affba3147c1cbb3", 0xc5}], 0x7, &(0x7f00000009c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x785}}, @mark={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6da}}], 0xa8}}, {{&(0x7f0000000a80)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b00)="255fa2592b6703fc9cd1d851224682a8c2f1e064c2cc9b8fa63a66729e1cff111e538ad2f665fed2b16134c4a142c33f54d7dc292239e5e8220b6a5571197a0ffc5a0e57b83959867fa873d4bbe27d8a21f58cb988fca4db285119d58e7dbce785d8b4a558a0794304e97ac705aace641436bf55", 0x74}, {&(0x7f0000000b80)="2da294574644f37a37cc705447e1aa43bb8d816f791a6e7a81682dba74f860c3fe33db4319ba8b2dc747f67c2e2e341f50e19c9cd087cbc1e918ecc5d5c482c7a334f5decc68aa3cc4fe696ce55808336e730e745f08ee33c5fba485be0efe1c5ac499d8ce85e51d85fe0ca0aa1354bbd82945a44341c3f2fabd42bd4e036f243ecb0c97d56f81d6424a23f89a2874bb245302bce334c9d6f37641d1b17d4afe8536a63b9809cb0af53a6168fda8a05a095327e269cf9e1a6e5bd2f5cf595c41950a0cf5ef421533", 0xc8}, {&(0x7f0000000c80)="86ce7be9acceb4add762176739d1af789e53727da1ee53b10cd5e76c7f1513055f6b5271898ef22902575883ceb5", 0x2e}, {&(0x7f0000000cc0)="db0979556d117280420f3d6796f408700b91", 0x12}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="c07e345a14d1eb381eb76a0c3d879b22e606227fc37c25169a7706b66fcb4ae6ad42401be432f1da11fb3e117e3f453ae720646402c50e63cb57b404e7018d69af63130cf4218a2a3858f7b10f5f7103696246bb584fd6795d3abbe03a1ca9b3f2adf7853924dafd285c3006a17426c7f96effaa3b70ad971ee74b39f289492f273b31c03472d03cd9422be0706201bfac8135ec23e3a9f776a022a8059cf0adbcfd43b26ac64f13cfbe54d36e8e376f0ba0667013c71c0b", 0xb8}], 0x6, &(0x7f0000001e40)=[@mark={{0x14, 0x1, 0x24, 0xb2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f}}, @timestamping={{0x14, 0x1, 0x25, 0xfe2d}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x59}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f00)="4b59c219e8d24152752275f44e1365e81048e55ff61be6b34c0833b9dc28d1ba943520901255107d95d07f60975a9514a2ccc06473a290b29879ba363c3fba36e29238c4fe346091bb07f83b475522abe2d401e4ecfa2dc222977347b4e83ee29ee314c1158c50bdb496ccc968d60a64ac8ab8331b8150bae5502aa0dd4b3c", 0x7f}, {&(0x7f0000001f80)="df702f6c94409c8c8c164d1c38623866d22f614b7f17aa1c7195bd1ced74c8a86cf909a9", 0x24}, {&(0x7f0000001fc0)="909134d05da5d1fb8f50e8e310f04ce7702c318a2acc0752bd502603", 0x1c}], 0x3, &(0x7f0000002040)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}], 0x4, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'ip6_vti0\x00', &(0x7f0000002180)={'syztnl0\x00', r3, 0x29, 0x5, 0x2, 0x1, 0x40, @mcast2, @private1, 0x8000, 0x80, 0x35d, 0x9}}) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) sendmmsg$alg(r0, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002240)="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", 0xfc}, {&(0x7f0000002340)="54966f31bd81b443e80cbb4207119946d54fba8170de1ee366a567883f249f3cc477ed37a91f4ed4a1ca0712bbef739e2ca8f30c7534e4916bba007146f8047d439096f08bb605701183fa1a6c786554eca5598d13e9cf204a773e519e047231c0263326eebd280ed787bd5ef13a220c56ba7f92c51d505fef436aa18e990c18f4f74517f0e589334e134d9b9ab59ab4407dd016ff3cdfefeef9b135c8e43394c38f2e91a46e0267c9d6d30e9b3b05b0390860f8894dd104f0e0e7bb182668fc64e52e73b025668d785c4d2b4b4737d0b177cce9e03ac4c931c0be8a34f84db4e35c8817e2", 0xe5}, {&(0x7f0000002440)="7b29e5ba4983b3887b67d642bdca646bb1c1a027a039c19b91d53bde8837087b622abb50605819244c7f527ea173a4283363602b7cb3be9fe4ad5df157df1b136717f9e751153fe8e582c5eda92deda40245a73e23803b4d8aeedb8b4091f7dd9af2ad4b49522c48668527fd449a6492e0fac8f2cbe10c62994aa0445de3ea8c768bd103fabfe236d2ee9d99999b8d3881b5221dc03a564c6a92b053dffbf3f5bc95cafd32694cea166bc8c5e0213cd64ad6480102ba41ae52c6987e9eca64ab4b6b96d0bbff7797a5520ba405ca08a78644b44c1a1b41027b3501b4e01232b1c107b54dadaf", 0xe6}, {&(0x7f0000002540)="2caa731e98372bd4ee17929693f474053beaf17bb4f05b4200b7735c7d3cc538588e625c2cb5d6f1e15727b6504ceecce35fef4364167256de88ddab8dad5ae394592fbaebe25c77d125dc85215b1cf401bcdd4d66fc362a5a4dbf3c", 0x5c}], 0x4, &(0x7f0000002600)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x8080}], 0x1, 0x810) (async) sendmmsg$alg(r0, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002240)="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", 0xfc}, {&(0x7f0000002340)="54966f31bd81b443e80cbb4207119946d54fba8170de1ee366a567883f249f3cc477ed37a91f4ed4a1ca0712bbef739e2ca8f30c7534e4916bba007146f8047d439096f08bb605701183fa1a6c786554eca5598d13e9cf204a773e519e047231c0263326eebd280ed787bd5ef13a220c56ba7f92c51d505fef436aa18e990c18f4f74517f0e589334e134d9b9ab59ab4407dd016ff3cdfefeef9b135c8e43394c38f2e91a46e0267c9d6d30e9b3b05b0390860f8894dd104f0e0e7bb182668fc64e52e73b025668d785c4d2b4b4737d0b177cce9e03ac4c931c0be8a34f84db4e35c8817e2", 0xe5}, {&(0x7f0000002440)="7b29e5ba4983b3887b67d642bdca646bb1c1a027a039c19b91d53bde8837087b622abb50605819244c7f527ea173a4283363602b7cb3be9fe4ad5df157df1b136717f9e751153fe8e582c5eda92deda40245a73e23803b4d8aeedb8b4091f7dd9af2ad4b49522c48668527fd449a6492e0fac8f2cbe10c62994aa0445de3ea8c768bd103fabfe236d2ee9d99999b8d3881b5221dc03a564c6a92b053dffbf3f5bc95cafd32694cea166bc8c5e0213cd64ad6480102ba41ae52c6987e9eca64ab4b6b96d0bbff7797a5520ba405ca08a78644b44c1a1b41027b3501b4e01232b1c107b54dadaf", 0xe6}, {&(0x7f0000002540)="2caa731e98372bd4ee17929693f474053beaf17bb4f05b4200b7735c7d3cc538588e625c2cb5d6f1e15727b6504ceecce35fef4364167256de88ddab8dad5ae394592fbaebe25c77d125dc85215b1cf401bcdd4d66fc362a5a4dbf3c", 0x5c}], 0x4, &(0x7f0000002600)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x8080}], 0x1, 0x810) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) r6 = accept4(r4, &(0x7f0000002680)=@nfc_llcp, &(0x7f0000002700)=0x80, 0x800) sendmsg$nl_route(r6, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)=@ipv4_deladdr={0x28, 0x15, 0x8, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x20, 0xfe, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044800) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r7, &(0x7f0000002840)=@alg, &(0x7f00000028c0)=0x80) (async) getsockname(r7, &(0x7f0000002840)=@alg, &(0x7f00000028c0)=0x80) connect$inet(r6, &(0x7f0000002900)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000002900)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000002940)={@remote, @broadcast}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002bc0)={0x5, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002c00)=@base={0x3, 0xfffffffd, 0x0, 0x58, 0x88b, r6, 0x81, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d00)=@bpf_lsm={0x1d, 0x20, &(0x7f0000002980)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000002a80)='GPL\x00', 0x5, 0x47, &(0x7f0000002ac0)=""/71, 0x41100, 0x6, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002b40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x8, 0x9, 0xfffff464}, 0x10, r8, 0x0, 0x2, &(0x7f0000002c80)=[r9], &(0x7f0000002cc0)=[{0x4, 0x2, 0xc, 0xc}, {0x5, 0x4, 0xf, 0x8}], 0x10, 0x9}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000002dc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r3}, 0x14) write$rfkill(r0, &(0x7f0000002e00)={0x0, 0x3, 0x1}, 0x8) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000002e40)=0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000002e80)={@none, 0xc}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000002ec0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @remote}, 0xd8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 'team0\x00'}) (async) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000002ec0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @remote}, 0xd8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 'team0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002f40)='cpuset.effective_mems\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002f40)='cpuset.effective_mems\x00', 0x0, 0x0) r11 = socket(0x23, 0x5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002f80)={{{@in6=@empty}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000003080)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002f80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000003080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000030c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x84, 0x0, r12}, {0xfffffffffffffffb, 0x7, 0x3, 0x800, 0x0, 0x3, 0x0, 0x1}, {0xfffffffffffff470, 0xffffffffffffffff, 0x4, 0x65c}, 0x6, 0x6e6bb0, 0x0, 0x0, 0xf46b43176f397e42}, {{@in=@private=0xa010100, 0x4d3, 0x32}, 0xa, @in6=@local, 0x3503, 0x3, 0x1, 0x0, 0xffff151a, 0x5, 0x5}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000030c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x84, 0x0, r12}, {0xfffffffffffffffb, 0x7, 0x3, 0x800, 0x0, 0x3, 0x0, 0x1}, {0xfffffffffffff470, 0xffffffffffffffff, 0x4, 0x65c}, 0x6, 0x6e6bb0, 0x0, 0x0, 0xf46b43176f397e42}, {{@in=@private=0xa010100, 0x4d3, 0x32}, 0xa, @in6=@local, 0x3503, 0x3, 0x1, 0x0, 0xffff151a, 0x5, 0x5}}, 0xe8) 7.174895ms ago: executing program 2 (id=2906): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2701}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) (async) getsockopt(r0, 0x5, 0x8, &(0x7f0000000100)=""/51, &(0x7f0000000180)=0x33) 0s ago: executing program 4 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) kernel console output (not intermixed with test programs): 71.267480][ T6711] __nla_validate_parse: 20 callbacks suppressed [ 71.267501][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.300443][ T6711] netlink: 120 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.354615][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.377605][ T6715] 8021q: VLANs not supported on ipvlan0 [ 71.392257][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400800][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 71.401620][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.472512][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 71.529152][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 71.602967][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 71.869882][ T5873] Bluetooth: hci4: command tx timeout [ 71.990459][ T6775] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001 [ 72.016498][ T6774] netlink: 'syz.3.233': attribute type 25 has an invalid length. [ 72.317975][ T6802] openvswitch: netlink: Flow key attr not present in new flow. [ 72.427490][ T6814] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 72.521281][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 72.720722][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 72.773096][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 72.832492][ T6846] bond0: entered promiscuous mode [ 72.838035][ T6846] bond_slave_0: entered promiscuous mode [ 72.844638][ T6846] bond_slave_1: entered promiscuous mode [ 72.860244][ T6846] bond0: left promiscuous mode [ 72.866210][ T6846] bond_slave_0: left promiscuous mode [ 72.873394][ T6846] bond_slave_1: left promiscuous mode [ 72.909139][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.324483][ T6876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.661149][ T6901] syzkaller1: entered promiscuous mode [ 73.672027][ T6901] syzkaller1: entered allmulticast mode [ 73.693132][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.951323][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 74.134134][ T6941] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 74.668824][ T6988] bond0: entered allmulticast mode [ 74.678124][ T6988] bond_slave_0: entered allmulticast mode [ 74.684500][ T6988] bond_slave_1: entered allmulticast mode [ 74.693185][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.774426][ T6997] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 74.866765][ T7007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.027147][ T7018] vlan4: entered allmulticast mode [ 75.087290][ T7018] geneve1: entered allmulticast mode [ 75.216449][ T7032] vlan2: entered promiscuous mode [ 75.222084][ T7032] bridge0: entered promiscuous mode [ 75.345991][ T7056] netlink: zone id is out of range [ 75.352357][ T7056] netlink: zone id is out of range [ 75.369612][ T7056] netlink: zone id is out of range [ 75.374869][ T7056] netlink: zone id is out of range [ 75.382146][ T7056] netlink: zone id is out of range [ 75.387374][ T7056] netlink: zone id is out of range [ 75.398835][ T7056] netlink: zone id is out of range [ 75.401973][ T7062] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 75.405775][ T7056] netlink: zone id is out of range [ 75.412334][ T7062] netlink: 'syz.2.312': attribute type 3 has an invalid length. [ 75.428616][ T7056] netlink: zone id is out of range [ 75.678088][ T7081] tipc: Started in network mode [ 75.686171][ T7081] tipc: Node identity aa20e4818196, cluster identity 4711 [ 75.704091][ T7081] tipc: Enabled bearer , priority 0 [ 75.727517][ T7085] syzkaller0: entered promiscuous mode [ 75.746597][ T7085] syzkaller0: entered allmulticast mode [ 75.819882][ T7085] tipc: Resetting bearer [ 75.848642][ T7085] tipc: Disabling bearer [ 75.913758][ T2915] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.928151][ T2915] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.952255][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.967447][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.029484][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 76.556263][ T7165] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 76.611409][ T7168] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 76.701238][ T7165] Illegal XDP return value 4294967274 on prog (id 112) dev N/A, expect packet loss! [ 76.767645][ T7178] __nla_validate_parse: 19 callbacks suppressed [ 76.767663][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 76.789231][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.350'. [ 76.921554][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 76.986589][ T7199] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.572134][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 77.587684][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 77.596750][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.606554][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 77.645865][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.655284][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 77.818002][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 77.881150][ T7267] hsr_slave_0 (unregistering): left promiscuous mode [ 77.916305][ T7275] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 77.929453][ T7269] sctp: [Deprecated]: syz.1.377 (pid 7269) Use of int in max_burst socket option. [ 77.929453][ T7269] Use struct sctp_assoc_value instead [ 77.955405][ T7275] netlink: 'syz.3.378': attribute type 3 has an invalid length. [ 77.981302][ T7275] netlink: 'syz.3.378': attribute type 235 has an invalid length. [ 78.231062][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'. [ 78.442142][ T7317] netlink: 96 bytes leftover after parsing attributes in process `syz.1.390'. [ 78.494871][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 78.507236][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 78.533543][ T7326] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 78.708150][ T7344] tipc: Started in network mode [ 78.725997][ T7344] tipc: Node identity 76a84151dbc, cluster identity 4711 [ 78.741984][ T7344] tipc: Enabled bearer , priority 0 [ 78.755895][ T7345] syzkaller0: entered promiscuous mode [ 78.763721][ T7345] syzkaller0: entered allmulticast mode [ 78.777700][ T7344] tipc: Enabling of bearer rejected, already enabled [ 78.806690][ T7345] tipc: Resetting bearer [ 78.823073][ T7345] tipc: Disabling bearer [ 78.872467][ T7360] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 78.948742][ T7367] Bluetooth: MGMT ver 1.23 [ 79.017777][ T7379] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 79.043406][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.050945][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.104065][ T7387] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 79.124446][ T7387] veth1_macvtap: left promiscuous mode [ 79.228853][ T7397] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 79.254238][ T7397] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 79.271375][ T7397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.295109][ T7400] veth1_macvtap: left promiscuous mode [ 80.437983][ T1143] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.447957][ T7504] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 80.465070][ T1143] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.475539][ T1143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.485269][ T1143] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.491568][ T7504] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 80.516146][ T7504] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 80.683063][ T7520] tipc: Enabling of bearer rejected, failed to enable media [ 81.258833][ T7542] netlink: 'syz.1.460': attribute type 4 has an invalid length. [ 81.364952][ T7546] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 81.629151][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.630711][ T44] cfg80211: failed to load regulatory.db [ 81.694238][ T7564] net_ratelimit: 8 callbacks suppressed [ 81.694259][ T7564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.737709][ T7564] netlink: 'syz.1.466': attribute type 7 has an invalid length. [ 81.778751][ T7564] netlink: 'syz.1.466': attribute type 8 has an invalid length. [ 81.851044][ T7569] __nla_validate_parse: 14 callbacks suppressed [ 81.851063][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 81.859326][ T7570] tipc: Enabled bearer , priority 0 [ 81.881835][ T6332] IPVS: starting estimator thread 0... [ 81.902081][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 81.911213][ T7569] xfrm1: entered promiscuous mode [ 81.926453][ T7569] xfrm1: entered allmulticast mode [ 81.979118][ T7577] IPVS: using max 47 ests per chain, 112800 per kthread [ 82.087021][ T7600] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.475'. [ 82.185917][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 82.197260][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.478'. [ 82.264463][ T7612] syzkaller0: entered promiscuous mode [ 82.270824][ T7612] syzkaller0: entered allmulticast mode [ 82.277748][ T7612] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 82.326436][ T7619] bond1: entered promiscuous mode [ 82.332713][ T7619] bond1: entered allmulticast mode [ 82.338086][ T7619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.501696][ T7640] netlink: 104 bytes leftover after parsing attributes in process `syz.0.485'. [ 82.562858][ T7646] netlink: 140 bytes leftover after parsing attributes in process `syz.0.488'. [ 82.701785][ T7658] netlink: 80 bytes leftover after parsing attributes in process `syz.3.492'. [ 82.795554][ T7669] rose0: entered allmulticast mode [ 82.807964][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 82.819576][ T7665] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 82.878012][ T7673] x_tables: ip_tables: udp match: only valid for protocol 17 [ 82.970758][ T6334] tipc: Node number set to 3758096386 [ 82.978493][ T7683] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 83.005133][ T7685] netlink: 3 bytes leftover after parsing attributes in process `syz.1.502'. [ 83.029665][ T7685] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.057748][ T7691] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.391423][ T7710] netlink: 'syz.0.511': attribute type 11 has an invalid length. [ 83.420918][ T7710] validate_nla: 2 callbacks suppressed [ 83.420934][ T7710] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 83.450080][ T7713] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 83.546357][ T7721] netlink: 'syz.0.515': attribute type 25 has an invalid length. [ 83.671660][ T7732] netlink: 'syz.1.516': attribute type 21 has an invalid length. [ 83.691294][ T7732] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 83.741800][ T7739] geneve2: entered promiscuous mode [ 83.815205][ T7748] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 83.828789][ T7732] veth0: entered promiscuous mode [ 83.844999][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.878034][ T7748] bridge_slave_1: left allmulticast mode [ 83.906161][ T7748] bridge_slave_1: left promiscuous mode [ 83.943196][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.982516][ T7748] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.002846][ T7731] veth0: left promiscuous mode [ 84.046275][ T7763] netlink: 'syz.0.523': attribute type 83 has an invalid length. [ 84.621939][ T7785] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 84.637244][ T7785] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 84.829580][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 85.188254][ T7831] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 85.213853][ T7831] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 85.318171][ T7837] FAULT_INJECTION: forcing a failure. [ 85.318171][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 85.352276][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.3.545 Not tainted syzkaller #0 PREEMPT(full) [ 85.352301][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.352312][ T7837] Call Trace: [ 85.352318][ T7837] [ 85.352338][ T7837] dump_stack_lvl+0x189/0x250 [ 85.352364][ T7837] ? __pfx____ratelimit+0x10/0x10 [ 85.352386][ T7837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.352404][ T7837] ? __pfx__printk+0x10/0x10 [ 85.352426][ T7837] ? fs_reclaim_acquire+0x7d/0x100 [ 85.352449][ T7837] ? __pfx___might_resched+0x10/0x10 [ 85.352463][ T7837] ? lock_acquire+0x5f/0x360 [ 85.352485][ T7837] should_fail_ex+0x414/0x560 [ 85.352507][ T7837] should_failslab+0xa8/0x100 [ 85.352530][ T7837] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 85.352551][ T7837] ? __alloc_skb+0x112/0x2d0 [ 85.352572][ T7837] ? pppoe_sendmsg+0x9f/0x790 [ 85.352595][ T7837] __alloc_skb+0x112/0x2d0 [ 85.352619][ T7837] sock_wmalloc+0xb2/0x130 [ 85.352638][ T7837] pppoe_sendmsg+0x2a8/0x790 [ 85.352672][ T7837] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 85.352692][ T7837] ? rcu_is_watching+0x15/0xb0 [ 85.352707][ T7837] ? aa_sock_msg_perm+0xf1/0x1d0 [ 85.352721][ T7837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.352738][ T7837] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 85.352759][ T7837] __sock_sendmsg+0x21c/0x270 [ 85.352779][ T7837] ____sys_sendmsg+0x52d/0x830 [ 85.352798][ T7837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.352817][ T7837] ? import_iovec+0x74/0xa0 [ 85.352836][ T7837] ___sys_sendmsg+0x21f/0x2a0 [ 85.352853][ T7837] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.352872][ T7837] ? kstrtouint+0x6e/0xe0 [ 85.352903][ T7837] ? rcu_is_watching+0x15/0xb0 [ 85.352918][ T7837] ? lock_release+0x4b/0x3e0 [ 85.352940][ T7837] ? __might_fault+0xcc/0x130 [ 85.352962][ T7837] __sys_sendmmsg+0x227/0x430 [ 85.352981][ T7837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 85.352997][ T7837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 85.353028][ T7837] ? ksys_write+0x22a/0x250 [ 85.353049][ T7837] ? __pfx_ksys_write+0x10/0x10 [ 85.353068][ T7837] ? rcu_is_watching+0x15/0xb0 [ 85.353082][ T7837] __x64_sys_sendmmsg+0xa0/0xc0 [ 85.353102][ T7837] do_syscall_64+0xfa/0x3b0 [ 85.353125][ T7837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.353142][ T7837] ? clear_bhb_loop+0x60/0xb0 [ 85.353161][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.353177][ T7837] RIP: 0033:0x7f8444f8ebe9 [ 85.353203][ T7837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.353217][ T7837] RSP: 002b:00007f8445d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.353240][ T7837] RAX: ffffffffffffffda RBX: 00007f84451b5fa0 RCX: 00007f8444f8ebe9 [ 85.353252][ T7837] RDX: 0000000000000003 RSI: 0000200000001d00 RDI: 0000000000000003 [ 85.353262][ T7837] RBP: 00007f8445d93090 R08: 0000000000000000 R09: 0000000000000000 [ 85.353272][ T7837] R10: 0000000024000854 R11: 0000000000000246 R12: 0000000000000001 [ 85.353282][ T7837] R13: 00007f84451b6038 R14: 00007f84451b5fa0 R15: 00007ffe8f514758 [ 85.353301][ T7837] [ 85.666895][ T7846] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 85.909274][ T7869] Bluetooth: MGMT ver 1.23 [ 85.914561][ T7869] netlink: 'syz.4.553': attribute type 12 has an invalid length. [ 86.154056][ T7884] netlink: 'syz.3.559': attribute type 53 has an invalid length. [ 86.620149][ T7918] veth0_to_bridge: entered allmulticast mode [ 86.628612][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.637654][ T7918] veth1_to_bridge: entered promiscuous mode [ 86.657800][ T7918] veth1_to_bridge: entered allmulticast mode [ 86.903276][ T7932] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 86.915060][ T7932] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 86.959334][ T7938] gretap1: entered promiscuous mode [ 86.967685][ T7938] bond3: (slave gretap1): making interface the new active one [ 86.978975][ T7938] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 86.993475][ T7932] __nla_validate_parse: 32 callbacks suppressed [ 86.993491][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.572'. [ 87.087444][ T7944] netem: incorrect ge model size [ 87.095622][ T7944] netem: change failed [ 87.222501][ T43] nci: nci_rx_work: unknown MT 0x7 [ 87.231433][ T7957] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 87.267368][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'. [ 87.285039][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 87.294173][ T7959] netlink: 300 bytes leftover after parsing attributes in process `syz.2.579'. [ 87.303872][ T7959] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 88.059579][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 88.206884][ T7993] netlink: 92 bytes leftover after parsing attributes in process `syz.0.589'. [ 88.315201][ T8006] netlink: 104 bytes leftover after parsing attributes in process `syz.1.590'. [ 88.381372][ T7968] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 88.393140][ T8015] netlink: 244 bytes leftover after parsing attributes in process `syz.0.594'. [ 88.411557][ T8014] netlink: 244 bytes leftover after parsing attributes in process `syz.0.594'. [ 88.628439][ T8029] validate_nla: 7 callbacks suppressed [ 88.628456][ T8029] netlink: 'syz.0.601': attribute type 21 has an invalid length. [ 88.646014][ T8031] netlink: 'syz.0.601': attribute type 21 has an invalid length. [ 88.656813][ T8031] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.662603][ T8032] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.666148][ T8029] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.726993][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 89.251982][ T8086] openvswitch: netlink: Message has 5 unknown bytes. [ 89.629137][ T5858] Bluetooth: hci0: command 0x0c20 tx timeout [ 89.718201][ T8111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 90.128120][ T8127] netlink: 'syz.3.626': attribute type 8 has an invalid length. [ 90.218249][ T8138] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 90.477729][ T8163] tipc: Enabled bearer , priority 0 [ 90.493474][ T8163] syzkaller0: entered promiscuous mode [ 90.499546][ T8163] syzkaller0: entered allmulticast mode [ 90.522782][ T8167] netlink: 'syz.0.637': attribute type 24 has an invalid length. [ 90.527630][ T8163] tipc: Resetting bearer [ 90.542756][ T8167] openvswitch: netlink: Flow actions attr not present in new flow. [ 90.545630][ T8169] openvswitch: netlink: Flow actions attr not present in new flow. [ 90.560922][ T8167] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 90.562465][ T8162] tipc: Resetting bearer [ 90.580012][ T8162] tipc: Disabling bearer [ 90.863032][ T8196] netlink: 'syz.3.645': attribute type 5 has an invalid length. [ 90.898583][ T8196] geneve3: entered promiscuous mode [ 90.905226][ T8196] geneve3: entered allmulticast mode [ 90.913833][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 90.922846][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 90.932146][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 90.941789][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 90.969600][ T8198] dummy0: entered promiscuous mode [ 90.976614][ T8198] batadv_slave_1: entered promiscuous mode [ 91.140294][ T8210] veth0: entered promiscuous mode [ 91.149968][ T8208] veth0: left promiscuous mode [ 91.198317][ T8222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.209471][ T8222] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 91.426358][ T8243] netlink: 'syz.0.661': attribute type 39 has an invalid length. [ 91.806511][ T8281] sctp: [Deprecated]: syz.3.675 (pid 8281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.806511][ T8281] Use struct sctp_sack_info instead [ 92.036182][ T8295] netlink: 'syz.0.679': attribute type 21 has an invalid length. [ 92.044508][ T8295] __nla_validate_parse: 28 callbacks suppressed [ 92.044525][ T8295] netlink: 152 bytes leftover after parsing attributes in process `syz.0.679'. [ 92.086053][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 92.462668][ T8335] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 92.470443][ T8335] netlink: 144 bytes leftover after parsing attributes in process `syz.3.691'. [ 92.479960][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.691'. [ 92.523550][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 92.659617][ T8345] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 92.666884][ T8347] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.695'. [ 92.715113][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 92.899915][ T8362] sctp: [Deprecated]: syz.4.701 (pid 8362) Use of int in maxseg socket option. [ 92.899915][ T8362] Use struct sctp_assoc_value instead [ 92.974664][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 92.974931][ T8370] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.704'. [ 92.988268][ T8369] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 93.019205][ T8369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.038572][ T8370] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.704'. [ 93.327181][ T8402] syzkaller1: entered promiscuous mode [ 93.332901][ T8402] syzkaller1: entered allmulticast mode [ 93.761452][ T8440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.850171][ T8448] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 94.380165][ T8502] validate_nla: 2 callbacks suppressed [ 94.380183][ T8502] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 94.549876][ T8513] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 94.600908][ T8515] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 94.701581][ T8511] veth0_macvtap: left allmulticast mode [ 94.713412][ T8511] gretap1: left promiscuous mode [ 94.738677][ T43] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.761338][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.772507][ T43] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.782026][ T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.825053][ T43] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.839274][ T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.848347][ T43] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.857680][ T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.016068][ T8541] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.024519][ T8537] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 95.036123][ T5913] IPVS: starting estimator thread 0... [ 95.129123][ T8543] IPVS: using max 52 ests per chain, 124800 per kthread [ 95.677000][ T8607] netlink: 'syz.0.773': attribute type 25 has an invalid length. [ 95.789127][ T8615] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.003760][ T8640] netlink: 'syz.0.782': attribute type 11 has an invalid length. [ 96.237529][ T8661] raw_sendmsg: syz.1.789 forgot to set AF_INET. Fix it! [ 96.529808][ T8687] nbd1: detected capacity change from 0 to 549764202496 [ 96.542278][ T5858] block nbd1: Receive control failed (result -104) [ 96.908576][ T8735] netlink: 'syz.4.809': attribute type 24 has an invalid length. [ 97.012829][ T8745] sctp: [Deprecated]: syz.0.814 (pid 8745) Use of int in max_burst socket option deprecated. [ 97.012829][ T8745] Use struct sctp_assoc_value instead [ 97.597304][ T8718] __nla_validate_parse: 45 callbacks suppressed [ 97.597324][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 97.652630][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 97.818526][ T8768] wg1: entered promiscuous mode [ 97.874905][ T8772] tap0: tun_chr_ioctl cmd 2148553947 [ 97.932642][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 98.727710][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 98.743824][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 98.777513][ T8814] macvlan2: entered promiscuous mode [ 98.783716][ T8814] macvlan2: entered allmulticast mode [ 98.821157][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 98.826829][ T8821] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 98.907621][ T8821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.959604][ T8822] bond1: (slave gretap2): making interface the new active one [ 98.968722][ T8822] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 98.993575][ T8826] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 99.029994][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 99.054747][ T8826] bridge_slave_0: left allmulticast mode [ 99.061166][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.075186][ T8826] bridge_slave_1: left allmulticast mode [ 99.086174][ T8826] bridge_slave_1: left promiscuous mode [ 99.098199][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.110200][ T8826] bond0: (slave bond_slave_0): Releasing backup interface [ 99.117963][ T8826] bond_slave_0: left allmulticast mode [ 99.127269][ T8826] bond0: (slave bond_slave_1): Releasing backup interface [ 99.135931][ T8826] bond_slave_1: left allmulticast mode [ 99.148312][ T8826] team0: Port device team_slave_0 removed [ 99.154950][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 99.169649][ T8826] team0: Port device team_slave_1 removed [ 99.176150][ T8826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.184018][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.193822][ T8826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.202092][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.214505][ T8826] bond0: (slave wlan1): Releasing backup interface [ 99.222208][ T8826] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 99.238492][ T8835] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 99.246599][ T8835] netlink: 'syz.3.838': attribute type 2 has an invalid length. [ 99.254842][ T8842] tipc: Enabling of bearer rejected, already enabled [ 99.274130][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 99.335132][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 99.345742][ T2915] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.390070][ T8845] pim6reg1: entered promiscuous mode [ 99.403444][ T8845] pim6reg1: entered allmulticast mode [ 99.423927][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.458011][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.518016][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.631380][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.714290][ T8883] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.744231][ T8883] `: (slave team0): Enslaving as an active interface with an up link [ 99.763793][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.794787][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.834711][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.872428][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.882899][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.909598][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.918805][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.942627][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 99.957823][ T8883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 100.513934][ T8985] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 100.886308][ T9016] geneve2: entered promiscuous mode [ 100.892030][ T9016] geneve2: entered allmulticast mode [ 100.898276][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.908819][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.921693][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.942003][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 101.293679][ T9037] veth1_macvtap: left promiscuous mode [ 101.557443][ T9061] syz.0.904: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.607552][ T9061] CPU: 1 UID: 0 PID: 9061 Comm: syz.0.904 Not tainted syzkaller #0 PREEMPT(full) [ 101.607581][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.607589][ T9061] Call Trace: [ 101.607594][ T9061] [ 101.607600][ T9061] dump_stack_lvl+0x189/0x250 [ 101.607622][ T9061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.607641][ T9061] ? __pfx__printk+0x10/0x10 [ 101.607661][ T9061] ? lock_release+0x4b/0x3e0 [ 101.607685][ T9061] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.607706][ T9061] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 101.607726][ T9061] warn_alloc+0x214/0x310 [ 101.607750][ T9061] ? stack_depot_save_flags+0x40/0x860 [ 101.607772][ T9061] ? __pfx_warn_alloc+0x10/0x10 [ 101.607795][ T9061] ? kasan_save_track+0x4f/0x80 [ 101.607815][ T9061] ? xskq_create+0x56/0x170 [ 101.607841][ T9061] ? xsk_init_queue+0xb0/0x110 [ 101.607859][ T9061] ? xsk_setsockopt+0x4dc/0x8d0 [ 101.607878][ T9061] ? do_sock_setsockopt+0x17c/0x1b0 [ 101.607894][ T9061] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 101.607909][ T9061] ? do_syscall_64+0xfa/0x3b0 [ 101.607955][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.607975][ T9061] __vmalloc_node_range_noprof+0x125/0x12f0 [ 101.608011][ T9061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.608034][ T9061] ? xsk_setsockopt+0x462/0x8d0 [ 101.608055][ T9061] ? __kasan_kmalloc+0x93/0xb0 [ 101.608077][ T9061] vmalloc_user_noprof+0xad/0xf0 [ 101.608099][ T9061] ? xskq_create+0xbf/0x170 [ 101.608120][ T9061] xskq_create+0xbf/0x170 [ 101.608142][ T9061] xsk_init_queue+0xb0/0x110 [ 101.608163][ T9061] xsk_setsockopt+0x4dc/0x8d0 [ 101.608184][ T9061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.608204][ T9061] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.608226][ T9061] ? lock_release+0x4b/0x3e0 [ 101.608248][ T9061] ? aa_sock_opt_perm+0xff/0x1b0 [ 101.608265][ T9061] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 101.608282][ T9061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.608302][ T9061] do_sock_setsockopt+0x17c/0x1b0 [ 101.608321][ T9061] __x64_sys_setsockopt+0x13f/0x1b0 [ 101.608339][ T9061] do_syscall_64+0xfa/0x3b0 [ 101.608363][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.608379][ T9061] ? clear_bhb_loop+0x60/0xb0 [ 101.608403][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.608419][ T9061] RIP: 0033:0x7fd04318ebe9 [ 101.608435][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.608449][ T9061] RSP: 002b:00007fd0413cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.608468][ T9061] RAX: ffffffffffffffda RBX: 00007fd0433b6090 RCX: 00007fd04318ebe9 [ 101.608481][ T9061] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 101.608491][ T9061] RBP: 00007fd043211e19 R08: 0000000000000004 R09: 0000000000000000 [ 101.608501][ T9061] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.608511][ T9061] R13: 00007fd0433b6128 R14: 00007fd0433b6090 R15: 00007fffea911c38 [ 101.608530][ T9061] [ 101.902961][ T9061] Mem-Info: [ 101.906093][ T9061] active_anon:5343 inactive_anon:0 isolated_anon:0 [ 101.906093][ T9061] active_file:2507 inactive_file:39838 isolated_file:0 [ 101.906093][ T9061] unevictable:768 dirty:56 writeback:0 [ 101.906093][ T9061] slab_reclaimable:11149 slab_unreclaimable:98930 [ 101.906093][ T9061] mapped:29126 shmem:1363 pagetables:1217 [ 101.906093][ T9061] sec_pagetables:0 bounce:0 [ 101.906093][ T9061] kernel_misc_reclaimable:0 [ 101.906093][ T9061] free:1323489 free_pcp:16398 free_cma:0 [ 101.951955][ T9061] Node 0 active_anon:21568kB inactive_anon:0kB active_file:10028kB inactive_file:159152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:224kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:4936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.984100][ T9061] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.015892][ T9061] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.045754][ T9061] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 102.051605][ T9061] Node 0 DMA32 free:1392452kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21520kB inactive_anon:0kB active_file:10028kB inactive_file:157576kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:43344kB local_pcp:24492kB free_cma:0kB [ 102.084223][ T9061] lowmem_reserve[]: 0 0 1 1 1 [ 102.089348][ T9061] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 102.118392][ T9061] lowmem_reserve[]: 0 0 0 0 0 [ 102.123313][ T9061] Node 1 Normal free:3886132kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21600kB local_pcp:10368kB free_cma:0kB [ 102.154719][ T9061] lowmem_reserve[]: 0 0 0 0 0 [ 102.160039][ T9061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.172783][ T9061] Node 0 DMA32: 56*4kB (M) 298*8kB (UME) 208*16kB (UME) 137*32kB (M) 75*64kB (M) 56*128kB (M) 34*256kB (ME) 25*512kB (UM) 15*1024kB (UM) 1*2048kB (M) 325*4096kB (UM) = 1392400kB [ 102.190557][ T9061] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 102.202889][ T9061] Node 1 Normal: 167*4kB (U) 35*8kB (UME) 42*16kB (UME) 59*32kB (UME) 22*64kB (UME) 8*128kB (UME) 3*256kB (ME) 5*512kB (UME) 2*1024kB (ME) 0*2048kB 946*4096kB (M) = 3886132kB [ 102.222206][ T9061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.232229][ T9061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.241664][ T9061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.271297][ T9061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.305664][ T9061] 43754 total pagecache pages [ 102.318591][ T9061] 0 pages in swap cache [ 102.391722][ T9061] Free swap = 124996kB [ 102.404883][ T9061] Total swap = 124996kB [ 102.410170][ T9061] 2097051 pages RAM [ 102.425746][ T9061] 0 pages HighMem/MovableOnly [ 102.439122][ T9061] 425661 pages reserved [ 102.446436][ T9061] 0 pages cma reserved [ 102.604196][ T9117] __nla_validate_parse: 18 callbacks suppressed [ 102.604215][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 102.651918][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 102.716390][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'. [ 102.937815][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 103.032651][ T5946] tipc: Subscription rejected, illegal request [ 103.043069][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 103.089079][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 103.256779][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'. [ 103.275132][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'. [ 103.346949][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 103.394198][ T5858] Bluetooth: hci4: link tx timeout [ 103.399490][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.422607][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 103.504096][ T9199] tipc: Invalid UDP bearer configuration [ 103.504131][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 103.508975][ T9207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.592396][ T9216] sctp: [Deprecated]: syz.4.948 (pid 9216) Use of int in maxseg socket option. [ 103.592396][ T9216] Use struct sctp_assoc_value instead [ 103.628053][ T9222] tipc: Failed to remove unknown binding: 66,1,1/0:1130399054/1130399056 [ 104.641671][ T9266] validate_nla: 60 callbacks suppressed [ 104.641687][ T9266] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 104.694262][ T9266] bridge_slave_1: left allmulticast mode [ 104.704083][ T9266] bridge_slave_1: left promiscuous mode [ 104.720828][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.750965][ T9278] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 104.766807][ T9277] netlink: 'syz.0.963': attribute type 6 has an invalid length. [ 104.778373][ T9266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 104.948163][ T9294] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 104.963345][ T9295] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 104.981404][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.000161][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.034691][ T9295] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.050004][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.083122][ T9308] tipc: Enabled bearer , priority 10 [ 105.102990][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.133510][ T9319] netlink: 'syz.1.976': attribute type 7 has an invalid length. [ 105.203790][ T9327] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 105.450495][ T9351] xt_HMARK: spi-set and port-set can't be combined [ 105.469709][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 105.718673][ T9377] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 105.723799][ T9379] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 105.740517][ T9377] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 105.753542][ T9379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.770307][ T9381] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 106.160104][ T9419] openvswitch: netlink: Unknown key attributes 2 [ 106.226826][ T9428] netlink: 'syz.4.1006': attribute type 16 has an invalid length. [ 106.682646][ T9482] netlink: 'syz.1.1024': attribute type 11 has an invalid length. [ 106.695534][ T9482] netlink: 'syz.1.1024': attribute type 11 has an invalid length. [ 106.716339][ T9483] 8021q: adding VLAN 0 to HW filter on device bond7 [ 106.741468][ T9484] bond7: (slave geneve2): making interface the new active one [ 106.751437][ T9484] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 106.764363][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.769733][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.791942][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.801840][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.849187][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.029850][ T9509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.038125][ T9509] bond2: (slave bond3): making interface the new active one [ 107.047516][ T9509] bond2: (slave bond3): Enslaving as an active interface with an up link [ 107.078742][ T9514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.197504][ T9533] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 107.365579][ T9541] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 107.400984][ T9547] veth9: entered promiscuous mode [ 107.412013][ T9547] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 107.620392][ T9565] __nla_validate_parse: 25 callbacks suppressed [ 107.620409][ T9565] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1047'. [ 107.835275][ T9590] pim6reg1: entered promiscuous mode [ 107.858797][ T9590] pim6reg1: entered allmulticast mode [ 108.117234][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'. [ 108.198275][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'. [ 108.337093][ T9634] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.356056][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 108.554003][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 108.638841][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 108.759445][ T9665] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 109.024901][ T9675] veth3: entered allmulticast mode [ 109.305284][ T9683] gretap1: entered promiscuous mode [ 109.324991][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 109.338189][ T9683] bond4: (slave gretap1): making interface the new active one [ 109.544388][ T9683] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 109.554474][ T9688] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1080'. [ 109.577985][ T9695] macvlan2: entered promiscuous mode [ 109.589399][ T9695] macvlan2: entered allmulticast mode [ 109.600640][ T9695] bond4: entered promiscuous mode [ 109.633009][ T9695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.648421][ T9695] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 109.668746][ T9695] bond4: left promiscuous mode [ 109.685743][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 109.697847][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1084'. [ 109.793210][ T9715] validate_nla: 6 callbacks suppressed [ 109.793226][ T9715] netlink: 'syz.0.1089': attribute type 11 has an invalid length. [ 109.821090][ T9713] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 110.065838][ T9745] netlink: 'syz.1.1099': attribute type 11 has an invalid length. [ 110.138549][ T9752] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 110.512902][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.541706][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.553817][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.574452][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.588547][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.598400][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.614732][ T9779] netlink: 'syz.3.1111': attribute type 9 has an invalid length. [ 110.643902][ T9788] syzkaller0: entered promiscuous mode [ 110.650667][ T9788] syzkaller0: entered allmulticast mode [ 110.717743][ T9799] !: renamed from dummy0 (while UP) [ 111.040501][ T9837] bond2: entered promiscuous mode [ 111.045789][ T9837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.216525][ T9920] tipc: Enabled bearer , priority 0 [ 112.225280][ T9920] syzkaller0: entered promiscuous mode [ 112.231820][ T9920] syzkaller0: entered allmulticast mode [ 112.242320][ T9919] tipc: Resetting bearer [ 112.264624][ T9919] tipc: Disabling bearer [ 112.422314][ T9933] veth0: entered promiscuous mode [ 112.534192][ T9932] veth0: left promiscuous mode [ 112.654462][ T9946] sctp: [Deprecated]: syz.3.1155 (pid 9946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.654462][ T9946] Use struct sctp_sack_info instead [ 112.750822][ T9967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.766501][ T9339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.774620][ T9339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.789427][ T9965] __nla_validate_parse: 26 callbacks suppressed [ 112.789443][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 112.814102][ T9971] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1163'. [ 112.834600][ T9971] tipc: Started in network mode [ 112.840091][ T9971] tipc: Node identity 32e527d8b6f5, cluster identity 4711 [ 112.848352][ T9971] tipc: Enabled bearer , priority 0 [ 112.856374][ T9971] syzkaller0: entered promiscuous mode [ 112.863001][ T9971] syzkaller0: entered allmulticast mode [ 112.875250][ T9968] tipc: Resetting bearer [ 112.884421][ T9968] tipc: Disabling bearer [ 113.032351][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 113.113686][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 113.166806][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 113.464422][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 113.478388][T10021] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1180'. [ 113.498962][T10021] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 113.575399][T10037] sctp: [Deprecated]: syz.4.1186 (pid 10037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.575399][T10037] Use struct sctp_sack_info instead [ 113.627760][T10036] sctp: [Deprecated]: syz.4.1186 (pid 10036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.627760][T10036] Use struct sctp_sack_info instead [ 113.662258][T10037] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1186'. [ 113.672028][T10037] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 113.681681][T10036] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1186'. [ 113.693318][T10036] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 113.703187][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 113.712415][T10046] erspan0: entered allmulticast mode [ 113.722704][T10050] bridge0: port 1(team0) entered blocking state [ 113.732317][T10054] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 113.755325][T10050] bridge0: port 1(team0) entered disabled state [ 113.762951][T10050] team0: entered allmulticast mode [ 113.767798][T10059] openvswitch: netlink: IP tunnel TTL not specified. [ 113.770989][T10050] team0: entered promiscuous mode [ 113.778437][T10062] openvswitch: netlink: IP tunnel TTL not specified. [ 113.942040][T10075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.977186][T10075] bond4: (slave geneve2): making interface the new active one [ 113.991297][T10075] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 115.309105][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 127.069732][ T11] block nbd1: Possible stuck request ffff888025145080: control (read@0,4096B). Runtime 30 seconds [ 132.830335][ T1310] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.839478][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845731][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.149221][ T11] block nbd1: Possible stuck request ffff888025145080: control (read@0,4096B). Runtime 60 seconds [ 178.113460][T10141] __nla_validate_parse: 1 callbacks suppressed [ 178.113484][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'. [ 178.289829][T10143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.920377][T10131] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 178.929061][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 178.983827][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 178.993168][T10156] validate_nla: 37 callbacks suppressed [ 178.993184][T10156] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 179.016110][T10156] netlink: 'syz.4.1212': attribute type 2 has an invalid length. [ 179.046806][T10161] netlink: 'syz.0.1213': attribute type 10 has an invalid length. [ 179.089258][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 179.156970][T10161] geneve0: entered promiscuous mode [ 179.174050][T10161] geneve0: entered allmulticast mode [ 179.198687][T10176] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1211'. [ 179.208788][T10161] team0: Port device geneve0 added [ 179.310601][T10183] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1218'. [ 179.385904][T10192] netlink: 'syz.0.1221': attribute type 75 has an invalid length. [ 179.482270][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 179.517124][T10197] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1223'. [ 179.536755][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1224'. [ 179.570354][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 179.580358][T10197] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1223'. [ 179.590763][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 179.598571][T10197] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1223'. [ 179.610479][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 179.618416][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 179.627206][T10197] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 180.084355][T10240] gre1: entered promiscuous mode [ 180.109141][T10240] gre1: entered allmulticast mode [ 180.652798][T10297] bond3: (slave gretap1): Releasing active interface [ 180.664723][T10297] bond7: (slave geneve2): Releasing active interface [ 180.685090][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.694529][ T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.753755][ T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.762917][ T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.886575][ T5860] Bluetooth: hci4: link tx timeout [ 180.891992][ T5860] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 180.906664][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.913477][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.920614][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.933617][T10322] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.957867][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.966423][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.970389][T10327] netlink: 'syz.0.1263': attribute type 11 has an invalid length. [ 180.974311][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.988297][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 180.994981][ T5860] Bluetooth: hci0: command tx timeout [ 181.002373][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 181.002383][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 181.016995][T10322] syzkaller0 speed is unknown, defaulting to 1000 [ 181.077645][T10333] syzkaller1: entered promiscuous mode [ 181.086539][T10333] syzkaller1: entered allmulticast mode [ 181.283718][T10349] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 181.314391][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.396815][T10357] veth7: entered promiscuous mode [ 181.422369][T10357] veth7: entered allmulticast mode [ 181.671339][T10391] syzkaller0 speed is unknown, defaulting to 1000 [ 182.074029][T10417] unknown channel width for channel at 909000KHz? [ 182.089499][T10417] unknown channel width for channel at 909000KHz? [ 182.096228][T10408] sctp: [Deprecated]: syz.3.1293 (pid 10408) Use of int in max_burst socket option deprecated. [ 182.096228][T10408] Use struct sctp_assoc_value instead [ 182.352319][T10444] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.361152][T10444] team0: Failed to send port change of device bond8 via netlink (err -105) [ 182.370826][T10444] team0: Failed to send options change via netlink (err -105) [ 182.378407][T10444] team0: Port device bond8 added [ 182.384322][ T12] team0: Failed to send port change of device bond8 via netlink (err -105) [ 182.438393][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.594850][T10471] vlan5: entered allmulticast mode [ 182.600347][T10471] veth1_to_hsr: entered allmulticast mode [ 182.668079][T10477] tap0: tun_chr_ioctl cmd 2148553947 [ 182.690258][T10481] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001 [ 182.905783][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.917904][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.928079][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 182.937059][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.950341][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.134731][T10520] __nla_validate_parse: 55 callbacks suppressed [ 183.134748][T10520] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1328'. [ 183.167270][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 183.749958][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 183.798501][T10536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 183.809449][T10536] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 183.818044][T10536] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 183.916679][T10544] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1337'. [ 184.037843][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 184.193608][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'. [ 184.507848][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 184.518556][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 184.543429][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 184.554663][T10589] dummy0: entered promiscuous mode [ 184.561267][T10589] batadv_slave_1: entered promiscuous mode [ 184.567712][T10589] debugfs: 'hsr1' already exists in 'hsr' [ 184.573541][T10589] Cannot create hsr debugfs directory [ 184.675383][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 184.843923][T10614] validate_nla: 31 callbacks suppressed [ 184.843941][T10614] netlink: 'syz.2.1361': attribute type 39 has an invalid length. [ 184.877931][T10614] bond0: (slave syz_tun): Releasing backup interface [ 185.006479][T10635] tipc: Enabling of bearer rejected, failed to enable media [ 185.155513][T10659] vlan0: entered promiscuous mode [ 185.161389][T10659] vlan0: entered allmulticast mode [ 185.166531][T10659] veth0_vlan: entered allmulticast mode [ 185.367363][T10688] netlink: 'syz.1.1385': attribute type 6 has an invalid length. [ 185.421555][T10688] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 185.429411][T10688] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 185.437158][T10688] netlink: 'syz.1.1385': attribute type 2 has an invalid length. [ 185.517535][T10698] netlink: 'syz.1.1388': attribute type 16 has an invalid length. [ 185.549667][T10698] netlink: 'syz.1.1388': attribute type 17 has an invalid length. [ 185.586047][T10711] netlink: 'syz.1.1388': attribute type 16 has an invalid length. [ 185.586980][T10698] erspan0: left allmulticast mode [ 185.604841][T10711] netlink: 'syz.1.1388': attribute type 17 has an invalid length. [ 185.666479][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.695032][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.710593][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.733621][T10711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.751122][T10721] team0: No ports can be present during mode change [ 186.224417][T10767] netlink: 'syz.2.1406': attribute type 16 has an invalid length. [ 186.250458][T10767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.375361][T10786] C: renamed from lo (while UP) [ 186.398752][T10786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.584779][T10810] sctp: [Deprecated]: syz.2.1418 (pid 10810) Use of int in maxseg socket option. [ 186.584779][T10810] Use struct sctp_assoc_value instead [ 186.683245][T10817] tipc: Enabling of bearer rejected, already enabled [ 186.717361][T10817] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 186.734160][T10817] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 186.745416][ T5913] syzkaller0 speed is unknown, defaulting to 1000 [ 186.756598][ T5913] syz2: Port: 1 Link ACTIVE [ 186.764172][ T6332] syzkaller0 speed is unknown, defaulting to 1000 [ 186.769974][T10823] syzkaller0 speed is unknown, defaulting to 1000 [ 186.815463][T10819] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 186.955740][T10836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.014045][T10839] tipc: Enabled bearer , priority 0 [ 187.021545][T10839] syzkaller0: entered promiscuous mode [ 187.027151][T10839] syzkaller0: entered allmulticast mode [ 187.040113][T10838] tipc: Resetting bearer [ 187.051713][T10838] tipc: Disabling bearer [ 187.208837][T10853] hsr_slave_0: left promiscuous mode [ 187.223246][T10853] hsr_slave_1: left promiscuous mode [ 187.237682][ T11] block nbd1: Possible stuck request ffff888025145080: control (read@0,4096B). Runtime 90 seconds [ 187.271702][T10857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.280027][T10857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.287952][T10857] batman_adv: batadv0: Removing interface: gretap1 [ 187.459829][T10872] syzkaller1: entered promiscuous mode [ 187.465400][T10872] syzkaller1: entered allmulticast mode [ 187.492016][T10874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.688627][T10880] bond0: (slave bond_slave_1): Releasing backup interface [ 188.029105][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 188.262879][T10959] __nla_validate_parse: 25 callbacks suppressed [ 188.262897][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 188.301499][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 188.316935][T10963] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1472'. [ 188.328879][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 188.606688][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 188.705485][T11008] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 188.756641][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1484'. [ 188.973010][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 189.034948][T11026] macvtap1: entered promiscuous mode [ 189.046312][T11026] macvtap1: entered allmulticast mode [ 189.063428][T11033] geneve4: entered promiscuous mode [ 189.068675][T11033] geneve4: entered allmulticast mode [ 189.075750][ T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 189.096863][ T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 189.124173][ T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 189.144494][ T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 189.161576][T11044] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1491'. [ 189.192764][T11041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.205145][T11041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.239089][T11041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.273446][T11041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 189.495619][T11041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.511098][T11041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.527533][T11041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.538794][T11041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 189.646088][T11041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.662752][T11041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.673878][T11041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.685425][T11041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 189.732781][T11090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.735720][T11093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1498'. [ 189.770135][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 189.788926][T11041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.828494][T11041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.841183][T11041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.852005][T11041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 189.900468][T11099] IPVS: set_ctl: invalid protocol: 43 10.1.1.6:20001 [ 189.907222][ T6332] IPVS: starting estimator thread 0... [ 189.918599][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.922729][T11099] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 189.930763][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.952493][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 189.969031][ T13] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.030269][T11108] IPVS: using max 45 ests per chain, 108000 per kthread [ 190.043520][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.052930][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.061454][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 190.071331][ T13] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.079655][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.088112][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.096929][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 190.106119][ T13] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.120581][T11117] unknown channel width for channel at 909000KHz? [ 190.127310][ T5946] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.136350][ T5946] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.145170][ T5946] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 190.157902][ T5946] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.357208][T11145] validate_nla: 8 callbacks suppressed [ 190.357222][T11145] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 190.405181][T11149] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 190.451859][T11083] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 190.477265][T11156] netlink: 'syz.0.1522': attribute type 21 has an invalid length. [ 190.519216][T11156] netlink: 'syz.0.1522': attribute type 8 has an invalid length. [ 190.531646][T11159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.533278][T11157] netlink: 'syz.3.1520': attribute type 33 has an invalid length. [ 190.545543][T11159] vlan2: entered allmulticast mode [ 190.552270][T11159] bond4: entered allmulticast mode [ 190.592573][T11157] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 190.767653][T11188] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 190.799755][T11188] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 191.277684][T11253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.709592][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 192.268353][T11278] bond0: entered promiscuous mode [ 192.436935][T11303] bond0: entered promiscuous mode [ 192.443164][T11303] bond_slave_0: entered promiscuous mode [ 192.449071][T11303] bond_slave_1: entered promiscuous mode [ 192.460692][T11303] bridge_slave_1: entered promiscuous mode [ 192.466858][T11303] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 192.475423][T11303] bond0: left promiscuous mode [ 192.481353][T11303] bond_slave_0: left promiscuous mode [ 192.488809][T11303] bond_slave_1: left promiscuous mode [ 192.495775][T11303] bridge_slave_1: left promiscuous mode [ 192.502639][T11303] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 192.601663][T11317] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 192.645532][T11317] bond5: entered promiscuous mode [ 192.652208][T11317] bond5: entered allmulticast mode [ 192.658288][T11317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.683810][T11322] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 192.965380][T11357] tipc: Enabling of bearer rejected, failed to enable media [ 193.366361][T11407] netlink: 'syz.4.1597': attribute type 75 has an invalid length. [ 193.382436][T11409] __nla_validate_parse: 25 callbacks suppressed [ 193.382453][T11409] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1598'. [ 193.648573][T11428] dvmrp1: entered allmulticast mode [ 193.721571][T11439] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 193.734814][T11439] netlink: 'syz.2.1608': attribute type 2 has an invalid length. [ 193.755772][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1609'. [ 193.930078][T11445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.954548][T11450] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1612'. [ 193.965919][T11450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1612'. [ 194.047498][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1616'. [ 194.064823][T11464] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1618'. [ 194.140640][T11474] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 194.219509][T11485] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1624'. [ 194.273743][ T1310] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.282811][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289587][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.522498][T11512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1632'. [ 194.625539][T11526] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.637574][T11518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1635'. [ 194.733903][T11536] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 194.838268][T11547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1645'. [ 194.935671][T11558] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.939996][T11561] openvswitch: netlink: Key type 8194 is out of range max 32 [ 194.979537][T11561] openvswitch: netlink: Key type 8194 is out of range max 32 [ 195.162480][T11589] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 195.716719][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.724073][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.802514][T11649] xfrm1: left promiscuous mode [ 195.807302][T11649] xfrm1: left allmulticast mode [ 195.832489][T11649] veth3: left allmulticast mode [ 195.843471][T11651] validate_nla: 2 callbacks suppressed [ 195.843487][T11651] netlink: 'syz.3.1676': attribute type 3 has an invalid length. [ 195.858753][T11060] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.867955][T11060] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.877497][T11060] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.887793][T11060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.897704][T11060] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.907036][T11060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.918800][T11060] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.928889][T11060] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.081023][T11667] netlink: 'syz.2.1681': attribute type 2 has an invalid length. [ 196.184333][T11677] `: (slave team0): Releasing backup interface [ 196.227067][T11677] bridge_slave_0: left allmulticast mode [ 196.242235][T11685] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 196.259045][T11677] bridge_slave_0: left promiscuous mode [ 196.274800][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.302215][T11677] `: (slave bridge_slave_1): Releasing backup interface [ 196.335179][T11677] `: (slave bond_slave_0): Releasing backup interface [ 196.374399][T11677] `: (slave bond_slave_1): Releasing backup interface [ 196.428273][T11677] team0: Port device team_slave_0 removed [ 196.487644][T11677] team0: Port device team_slave_1 removed [ 196.648114][T11720] sctp: [Deprecated]: syz.4.1693 (pid 11720) Use of int in max_burst socket option. [ 196.648114][T11720] Use struct sctp_assoc_value instead [ 197.001815][T11757] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 197.262986][T11785] sctp: [Deprecated]: syz.0.1713 (pid 11785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.262986][T11785] Use struct sctp_sack_info instead [ 197.285319][T11785] netlink: 'syz.0.1713': attribute type 4 has an invalid length. [ 197.333758][T11785] `: renamed from bond0 (while UP) [ 197.363955][T11787] batadv_slave_1: entered promiscuous mode [ 197.372159][T11786] batadv_slave_1: left promiscuous mode [ 197.421527][T11794] netlink: 'syz.3.1718': attribute type 39 has an invalid length. [ 197.907528][T11836] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 197.940560][T11835] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 198.104601][T11854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.111900][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 198.119165][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 198.126387][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 198.174840][T11854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.255692][T11874] netlink: 'syz.2.1739': attribute type 32 has an invalid length. [ 198.273045][T11876] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.355547][T11884] netlink: 'syz.3.1741': attribute type 4 has an invalid length. [ 198.390760][T11886] __nla_validate_parse: 16 callbacks suppressed [ 198.390778][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 198.556158][T11901] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 198.576309][T11901] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 198.625905][T11907] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 198.637326][T11907] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 198.664116][T11910] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 198.703642][ T6332] IPVS: starting estimator thread 0... [ 198.779877][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'. [ 198.801340][T11918] IPVS: using max 50 ests per chain, 120000 per kthread [ 198.810152][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1755'. [ 199.031385][T11947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.083537][T11954] tc_dump_action: action bad kind [ 199.136298][T11959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1765'. [ 199.149510][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 199.205100][T11968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1768'. [ 199.312823][T11979] IPVS: Unknown mcast interface: nicvf0 [ 199.474155][T11988] `: (slave geneve1): Enslaving as an active interface with an up link [ 199.554425][T11992] pim6reg1: entered promiscuous mode [ 199.562027][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 199.579050][T11992] pim6reg1: entered allmulticast mode [ 199.581372][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1777'. [ 199.635391][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 199.980076][T12049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1788'. [ 201.632900][T12077] validate_nla: 5 callbacks suppressed [ 201.632918][T12077] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 201.894155][T12108] tipc: Enabling of bearer rejected, already enabled [ 201.914824][T12108] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 201.924363][T12113] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 201.929192][T12108] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 201.955369][T12113] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 201.998552][T12108] tipc: Resetting bearer [ 202.137889][T12141] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 202.291270][T12155] netlink: 'syz.1.1817': attribute type 3 has an invalid length. [ 202.428137][T12165] veth9: entered allmulticast mode [ 202.703818][T12191] syzkaller1: entered promiscuous mode [ 202.709727][T12191] syzkaller1: entered allmulticast mode [ 202.814475][T12207] rose0: left allmulticast mode [ 202.873088][T12200] netlink: 'syz.2.1831': attribute type 1 has an invalid length. [ 203.006664][T12230] ip6gre0: Master is either lo or non-ether device [ 203.097356][T12244] netlink: 'syz.1.1841': attribute type 7 has an invalid length. [ 203.815096][T12281] __nla_validate_parse: 21 callbacks suppressed [ 203.815115][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 203.909500][T12293] unknown channel width for channel at 909000KHz? [ 203.916071][T12293] unknown channel width for channel at 909000KHz? [ 203.922882][T12293] unknown channel width for channel at 909000KHz? [ 204.083635][T12297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.101084][T12323] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 204.193568][T12336] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 204.243096][T12342] : renamed from hsr0 (while UP) [ 204.288488][T12355] tipc: Enabled bearer , priority 0 [ 204.303134][T12357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1867'. [ 204.313256][T12357] erspan0: entered allmulticast mode [ 204.387913][T12355] syzkaller0: entered promiscuous mode [ 204.393933][T12355] syzkaller0: entered allmulticast mode [ 204.409965][T12355] tipc: Resetting bearer [ 204.444423][T12355] tipc: Resetting bearer [ 204.521348][T12355] tipc: Disabling bearer [ 204.577935][T12376] openvswitch: netlink: IPv4 tun info is not correct [ 204.618563][T12379] dvmrp0: entered allmulticast mode [ 204.946329][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 204.969344][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1886'. [ 205.004753][T12420] veth1_vlan: left promiscuous mode [ 205.022602][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 205.044069][T12420] tipc: Enabling of bearer rejected, already enabled [ 205.115753][T12429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1891'. [ 205.125401][T12433] netlink: 'syz.2.1894': attribute type 8 has an invalid length. [ 205.141386][T12429] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 205.157844][T12429] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 205.183291][T12432] netlink: 'syz.0.1893': attribute type 11 has an invalid length. [ 205.191572][T12432] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1893'. [ 205.211690][T12437] tipc: Enabled bearer , priority 0 [ 205.219602][T12432] netlink: 'syz.0.1893': attribute type 1 has an invalid length. [ 205.243943][T12432] bond0: entered promiscuous mode [ 205.249607][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.257446][T12437] tipc: Resetting bearer [ 205.282898][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.290895][T12432] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 205.302174][T12432] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 205.330574][T12432] bond0: (slave wireguard0): making interface the new active one [ 205.367223][T12432] wireguard0: entered promiscuous mode [ 205.377969][T12432] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 205.391856][T12436] tipc: Disabling bearer [ 205.418826][T12453] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 205.436642][T12453] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 205.450283][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.491531][T12453] bond0: (slave bridge_slave_1): Releasing backup interface [ 205.524914][T12453] bond0: (slave bond_slave_0): Releasing backup interface [ 205.556477][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 205.581320][T12453] bond0: (slave bond_slave_1): Releasing backup interface [ 205.620642][T12453] team0: Port device team_slave_0 removed [ 205.627813][T12453] team0: Port device team_slave_1 removed [ 205.635376][T12453] bond0: (slave netdevsim0): Releasing backup interface [ 205.646268][T12453] bond0: (slave wlan1): Releasing backup interface [ 205.667887][T12459] macvtap1: entered allmulticast mode [ 205.673810][T12459] veth0_macvtap: entered allmulticast mode [ 205.901447][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 206.095118][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1915'. [ 206.162718][T12530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.351832][T12548] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.411621][T12548] syzkaller0: entered promiscuous mode [ 206.417142][T12548] syzkaller0: entered allmulticast mode [ 206.713318][T12581] validate_nla: 3 callbacks suppressed [ 206.713336][T12581] netlink: 'syz.3.1932': attribute type 32 has an invalid length. [ 206.840474][T12598] openvswitch: netlink: Key type 85 is out of range max 32 [ 206.906785][T12606] erspan0: left allmulticast mode [ 206.927577][T12606] bond0: left promiscuous mode [ 206.954811][T12606] macvtap1: left allmulticast mode [ 207.189177][T12626] nbd2: detected capacity change from 0 to 127 [ 207.197183][T12627] openvswitch: netlink: Flow key attr not present in new flow. [ 207.324220][T12648] macsec0: entered promiscuous mode [ 207.332324][ T5874] block nbd2: Receive control failed (result -32) [ 207.339424][T12648] macsec0: entered allmulticast mode [ 207.490207][T12669] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 207.572300][T12674] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 207.584236][T12674] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 207.615382][T12669] gretap2: entered promiscuous mode [ 207.629829][T12669] bond6: (slave gretap2): making interface the new active one [ 207.641183][T12669] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 207.707149][T12693] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.714167][T12698] netlink: zone id is out of range [ 207.728208][T12698] netlink: del zone limit has 4 unknown bytes [ 207.842244][T12693] syzkaller0: entered promiscuous mode [ 207.864136][T12693] syzkaller0: entered allmulticast mode [ 207.926796][T12718] netlink: 'syz.1.1968': attribute type 3 has an invalid length. [ 207.963626][T12714] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 208.116047][T12740] netlink: 'syz.3.1975': attribute type 9 has an invalid length. [ 208.141878][T12744] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 208.159934][T12744] nbd: must specify a device to reconfigure [ 208.183201][T12745] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 208.248480][T12756] xfrm2: entered allmulticast mode [ 208.351846][T12772] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 208.528212][T12783] kthread_run failed with err -4 [ 208.589461][ T5873] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 208.660555][T12798] netlink: 'syz.4.1993': attribute type 4 has an invalid length. [ 208.704526][T12796] netlink: 'syz.2.1992': attribute type 9 has an invalid length. [ 208.895315][T12814] __nla_validate_parse: 20 callbacks suppressed [ 208.895335][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 208.927549][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 208.961346][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.961397][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 208.985723][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.003838][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 209.008915][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.059853][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.793466][T12854] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 209.901208][T12871] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 209.911091][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2015'. [ 209.926744][T12871] team0: Port device geneve0 added [ 209.952978][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.963797][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2015'. [ 209.964243][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.981875][T12875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 210.019093][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.034996][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.053129][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 210.141100][T12889] netlink: 'syz.4.2022': attribute type 3 has an invalid length. [ 210.150905][T12884] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.164877][T12886] syzkaller1: entered promiscuous mode [ 210.170618][T12886] syzkaller1: entered allmulticast mode [ 210.210412][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2020'. [ 210.235632][T12899] batman_adv: batadv0: Adding interface: wlan1 [ 210.244471][T12899] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.271046][T12899] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 210.324458][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 210.341259][ T44] IPVS: starting estimator thread 0... [ 210.442564][T12910] IPVS: using max 45 ests per chain, 108000 per kthread [ 210.532364][T12936] vlan2: entered allmulticast mode [ 210.537693][T12936] bridge0: entered allmulticast mode [ 210.558726][T12936] bridge5: port 1(vlan2) entered blocking state [ 210.572699][T12936] bridge5: port 1(vlan2) entered disabled state [ 210.583460][T12936] vlan2: entered promiscuous mode [ 210.588520][T12936] bridge0: entered promiscuous mode [ 210.634464][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.646499][T12930] team0: Cannot enslave team device to itself [ 210.728309][T12961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.800706][T12961] syzkaller0 speed is unknown, defaulting to 1000 [ 211.015776][T12997] netlink: 'syz.2.2054': attribute type 11 has an invalid length. [ 211.085724][T13004] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 211.146283][T13011] bond0: entered allmulticast mode [ 211.151760][T13011] bond_slave_0: entered allmulticast mode [ 211.225256][T13022] IPVS: length: 26 != 8 [ 211.436023][T13054] openvswitch: netlink: Unknown key attributes 2 [ 211.651193][T13072] bridge_slave_0: left promiscuous mode [ 211.702134][T13072] veth1_vlan: left promiscuous mode [ 211.708534][T13072] veth0_vlan: left promiscuous mode [ 211.715189][T13072] veth0_vlan: entered promiscuous mode [ 211.733119][T13072] veth1_vlan: entered promiscuous mode [ 211.745354][T13072] veth1_macvtap: left promiscuous mode [ 211.752818][T13072] veth0_macvtap: left promiscuous mode [ 211.759572][T13072] veth0_macvtap: entered promiscuous mode [ 211.784693][T13072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.793275][T13072] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 211.829032][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.837905][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.858283][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.880163][ T6057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.904948][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.913941][T13088] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 211.938201][ T43] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 211.959789][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.998965][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.018095][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.029655][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.040461][T13104] 8021q: VLANs not supported on ip6_vti0 [ 212.046793][T13105] validate_nla: 3 callbacks suppressed [ 212.046808][T13105] netlink: 'syz.4.2087': attribute type 5 has an invalid length. [ 212.351262][T13142] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 212.378835][T13142] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 212.419091][T13142] netlink: 'syz.2.2098': attribute type 2 has an invalid length. [ 212.529309][T13165] netlink: 'syz.0.2106': attribute type 13 has an invalid length. [ 212.544282][T13165] veth0_macvtap: left promiscuous mode [ 212.571126][T13165] macvtap0: entered allmulticast mode [ 212.581358][T13165] macvtap0: refused to change device tx_queue_len [ 212.617069][T13171] gtp0: entered promiscuous mode [ 212.638918][T13171] gtp0: entered allmulticast mode [ 212.758278][T13191] lo speed is unknown, defaulting to 1000 [ 212.777661][T13191] lo speed is unknown, defaulting to 1000 [ 212.793507][T13191] lo speed is unknown, defaulting to 1000 [ 212.801107][T13205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.893624][T13215] netlink: 'syz.1.2122': attribute type 11 has an invalid length. [ 212.905347][T13215] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 212.982058][T13191] infiniband syz0: set active [ 212.986851][ T6332] lo speed is unknown, defaulting to 1000 [ 212.994698][T13191] infiniband syz0: added lo [ 213.058094][T13191] RDS/IB: syz0: added [ 213.064658][T13191] smc: adding ib device syz0 with port count 1 [ 213.072211][T13191] smc: ib device syz0 port 1 has pnetid [ 213.078302][ T6057] lo speed is unknown, defaulting to 1000 [ 213.086359][T13191] lo speed is unknown, defaulting to 1000 [ 213.254919][T13191] lo speed is unknown, defaulting to 1000 [ 213.334040][T13191] lo speed is unknown, defaulting to 1000 [ 213.391605][T13191] lo speed is unknown, defaulting to 1000 [ 213.456986][T13191] lo speed is unknown, defaulting to 1000 [ 214.853206][T13256] sctp: [Deprecated]: syz.2.2134 (pid 13256) Use of int in maxseg socket option. [ 214.853206][T13256] Use struct sctp_assoc_value instead [ 214.860830][T13255] __nla_validate_parse: 25 callbacks suppressed [ 214.860849][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 214.887872][T13259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2132'. [ 214.916690][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 214.944459][T13264] netlink: 'syz.3.2137': attribute type 62 has an invalid length. [ 214.969923][T13255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2136'. [ 214.973779][T13264] netlink: 'syz.3.2137': attribute type 6 has an invalid length. [ 214.995832][T13264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2137'. [ 215.034784][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'. [ 215.047491][T13273] wg1: entered promiscuous mode [ 215.210655][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 215.226577][T13276] dvmrp1: entered allmulticast mode [ 215.233154][T13276] dvmrp1: left allmulticast mode [ 215.256170][T13306] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2147'. [ 215.402130][T13326] sctp: [Deprecated]: syz.0.2154 (pid 13326) Use of int in max_burst socket option deprecated. [ 215.402130][T13326] Use struct sctp_assoc_value instead [ 215.545855][T13339] vlan3: entered promiscuous mode [ 215.600592][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 215.634457][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2160'. [ 215.789610][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.127488][T13355] syzkaller0 speed is unknown, defaulting to 1000 [ 216.135719][T13355] lo speed is unknown, defaulting to 1000 [ 216.254488][T13358] netlink: 'syz.3.2166': attribute type 4 has an invalid length. [ 216.280493][T13358] netlink: 'syz.3.2166': attribute type 4 has an invalid length. [ 216.434477][T13371] syzkaller0 speed is unknown, defaulting to 1000 [ 216.444351][T13371] lo speed is unknown, defaulting to 1000 [ 217.149303][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 217.229630][ C0] net_ratelimit: 10 callbacks suppressed [ 217.229656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.243807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.245705][T13438] validate_nla: 4 callbacks suppressed [ 217.245719][T13438] netlink: 'syz.1.2188': attribute type 27 has an invalid length. [ 217.311220][ T11] block nbd1: Possible stuck request ffff888025145080: control (read@0,4096B). Runtime 120 seconds [ 217.416629][T13455] netlink: 'syz.3.2197': attribute type 2 has an invalid length. [ 217.571849][T13472] netlink: 'syz.4.2201': attribute type 12 has an invalid length. [ 217.651278][T13470] netlink: 'syz.3.2197': attribute type 4 has an invalid length. [ 217.702645][T13486] netlink: 'syz.3.2197': attribute type 4 has an invalid length. [ 217.798774][T13492] dvmrp0: entered allmulticast mode [ 217.923018][T13504] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 218.301564][T13548] ªªªªªª: renamed from vlan0 [ 218.529837][T13570] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 218.547860][T13570] netlink: 'syz.1.2229': attribute type 3 has an invalid length. [ 218.568093][T13570] NCSI netlink: No device for ifindex 131080 [ 218.713509][T13548] wg1: left promiscuous mode [ 218.724919][T13548] veth0_to_bridge: left allmulticast mode [ 218.786633][T13548] veth1_to_bridge: left promiscuous mode [ 218.795742][T13548] veth1_to_bridge: left allmulticast mode [ 219.108016][T13548] `: (slave geneve1): Releasing backup interface [ 219.164858][T13548] geneve3: left promiscuous mode [ 219.176598][T13548] geneve3: left allmulticast mode [ 219.186967][T13548] bond2: left promiscuous mode [ 219.204540][T13548] geneve4: left promiscuous mode [ 219.209949][T13548] geneve4: left allmulticast mode [ 219.222401][T13548] veth9: left allmulticast mode [ 219.252369][T13548] vlan2: left allmulticast mode [ 219.257267][T13548] bridge0: left allmulticast mode [ 219.262762][T13548] vlan2: left promiscuous mode [ 219.267528][T13548] bridge0: left promiscuous mode [ 219.272817][T13548] bridge5: port 1(vlan2) entered disabled state [ 219.293324][T13593] bridge5: entered promiscuous mode [ 219.298772][T13593] bridge5: entered allmulticast mode [ 219.352085][T13433] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.363106][T13433] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.383440][T13433] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 219.400928][T13433] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 219.411420][T13433] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.421012][T13433] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.429831][T13433] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 219.438314][T13433] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 219.462282][T13433] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.471504][T13606] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 219.483257][T13433] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.496435][T13433] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 219.509348][T13610] netlink: 'syz.2.2239': attribute type 1 has an invalid length. [ 219.536829][T13433] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 219.612774][T13610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.628341][T13433] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.646482][T13433] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.655166][T13433] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 219.663813][T13433] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 219.903579][T13656] __nla_validate_parse: 14 callbacks suppressed [ 219.903596][T13656] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2250'. [ 219.948480][T13657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2251'. [ 220.161142][T13677] syzkaller0: entered promiscuous mode [ 220.166710][T13677] syzkaller0: entered allmulticast mode [ 220.214507][T13690] TCP: TCP_TX_DELAY enabled [ 220.453448][T13704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.651420][T13719] netlink: 209900 bytes leftover after parsing attributes in process `syz.4.2269'. [ 221.498708][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 221.521351][T13741] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2275'. [ 221.530967][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2275'. [ 221.634166][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 221.654404][T13761] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2284'. [ 221.673492][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 221.722430][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 222.060694][T13803] : entered promiscuous mode [ 222.128454][T13815] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 222.282166][T13824] validate_nla: 5 callbacks suppressed [ 222.282184][T13824] netlink: 'syz.2.2302': attribute type 4 has an invalid length. [ 223.127439][T13918] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 223.160629][T13918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.627210][T13980] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 223.649765][T13980] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.657614][T13980] gretap3: entered promiscuous mode [ 223.663844][T13980] gretap3: entered allmulticast mode [ 223.706885][T13993] netlink: 'syz.0.2351': attribute type 2 has an invalid length. [ 223.719254][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 224.293739][T14027] netlink: 'syz.2.2363': attribute type 4 has an invalid length. [ 224.469520][T14044] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.674255][T14072] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 224.709694][T14070] IPv6: sit3: Disabled Multicast RS [ 224.736859][T14079] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 224.769498][T14076] syzkaller1: entered promiscuous mode [ 224.775013][T14076] syzkaller1: entered allmulticast mode [ 224.806297][T14076] tipc: Enabled bearer , priority 0 [ 224.815935][T14076] syzkaller0: entered promiscuous mode [ 224.822702][T14076] syzkaller0: entered allmulticast mode [ 224.858702][T14088] netlink: 'syz.3.2384': attribute type 5 has an invalid length. [ 224.873457][T14091] netlink: 'syz.2.2386': attribute type 29 has an invalid length. [ 224.892189][T14074] tipc: Resetting bearer [ 224.908593][T14074] tipc: Disabling bearer [ 224.952467][T14095] bond8: entered promiscuous mode [ 224.969353][T14095] bond8: entered allmulticast mode [ 224.974807][T14095] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.094863][T14116] __nla_validate_parse: 64 callbacks suppressed [ 225.094883][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2394'. [ 225.111707][T14116] netlink: 'syz.3.2394': attribute type 7 has an invalid length. [ 225.119740][T14116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2394'. [ 225.363843][T14148] syzkaller1: entered promiscuous mode [ 225.369652][T14148] syzkaller1: entered allmulticast mode [ 225.525677][T14156] netlink: 'syz.0.2407': attribute type 3 has an invalid length. [ 225.561101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.571422][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.603066][T14167] netlink: 'syz.3.2410': attribute type 5 has an invalid length. [ 225.629176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.731975][T14177] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2414'. [ 225.803205][T14182] syz_tun: entered promiscuous mode [ 225.808906][T14182] batadv_slave_0: entered promiscuous mode [ 225.818276][T14182] debugfs: 'hsr1' already exists in 'hsr' [ 225.824222][T14182] Cannot create hsr debugfs directory [ 225.829788][T14182] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 225.840223][T14182] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.850962][T14182] hsr1: entered allmulticast mode [ 225.855987][T14182] syz_tun: entered allmulticast mode [ 225.861737][T14182] batadv_slave_0: entered allmulticast mode [ 226.269516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.347993][T14227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2426'. [ 226.426058][T14232] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 226.449948][T14232] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.482001][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 226.482466][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 226.500450][T14237] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2433'. [ 226.509652][T14234] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2432'. [ 226.631200][T14266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2441'. [ 226.637363][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2441'. [ 227.482748][T14325] validate_nla: 3 callbacks suppressed [ 227.482775][T14325] netlink: 'syz.1.2456': attribute type 29 has an invalid length. [ 227.498605][T14325] netlink: 'syz.1.2456': attribute type 29 has an invalid length. [ 227.508002][T14325] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 227.540857][T14329] pim6reg1: entered promiscuous mode [ 227.546210][T14329] pim6reg1: entered allmulticast mode [ 227.756091][T14355] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 228.153466][T14400] 8021q: VLANs not supported on wg1 [ 228.264845][T14414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.520343][T14442] tipc: Enabling of bearer rejected, failed to enable media [ 228.831633][T14476] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 228.840293][T14476] netlink: 'syz.1.2504': attribute type 3 has an invalid length. [ 229.043386][T14501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.649955][T14522] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 229.657789][T14522] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 229.690345][T14529] delete_channel: no stack [ 229.838243][T14547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.067593][T14568] gre2: entered promiscuous mode [ 230.084314][T14568] gre2: entered allmulticast mode [ 230.407391][T14601] can: request_module (can-proto-0) failed. [ 230.686372][T14644] Dead loop on virtual device ip6_vti0, fix it urgently! [ 230.709885][T13432] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1b [ 230.835620][T14666] netlink: 'syz.1.2552': attribute type 21 has an invalid length. [ 230.844533][T14666] __nla_validate_parse: 23 callbacks suppressed [ 230.844548][T14666] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2552'. [ 230.953351][T14678] netlink: 'syz.4.2560': attribute type 4 has an invalid length. [ 231.003776][T14678] openvswitch: netlink: IPv4 tun info is not correct [ 231.081632][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 231.092108][T14693] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2567'. [ 231.128925][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2566'. [ 231.186349][T14708] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 231.263980][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'. [ 231.312628][T14719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2575'. [ 231.317335][T14723] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 231.476735][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2576'. [ 231.553644][T14750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2582'. [ 231.585424][T14755] netlink: 'syz.2.2584': attribute type 11 has an invalid length. [ 231.596307][T14755] netlink: 'syz.2.2584': attribute type 11 has an invalid length. [ 231.605246][T14755] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2584'. [ 231.713563][T14768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.758771][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 231.813031][T14777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2589'. [ 232.166738][T14779] geneve2: entered promiscuous mode [ 233.047018][T14794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.130013][T14800] validate_nla: 38 callbacks suppressed [ 233.130031][T14800] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 233.435321][T14840] netlink: 'syz.4.2606': attribute type 7 has an invalid length. [ 233.478785][T14840] : entered promiscuous mode [ 233.613447][T14859] netlink: del zone limit has 4 unknown bytes [ 234.080106][T14907] netlink: 'syz.4.2631': attribute type 15 has an invalid length. [ 234.144532][T14913] netlink: 'syz.3.2633': attribute type 21 has an invalid length. [ 234.152909][T14913] netlink: 'syz.3.2633': attribute type 6 has an invalid length. [ 234.203362][T14916] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 235.325344][T14929] netlink: 'syz.2.2637': attribute type 4 has an invalid length. [ 235.358146][T14942] netlink: 'syz.0.2642': attribute type 3 has an invalid length. [ 235.446319][T14957] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 235.455669][T14957] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 235.496660][T14963] smc: net device erspan0 applied user defined pnetid SYZ0 [ 235.587796][T14975] bridge0: port 1(veth0_to_bridge) entered blocking state [ 235.608386][T14975] bridge0: port 1(veth0_to_bridge) entered disabled state [ 235.635674][T14975] veth0_to_bridge: entered allmulticast mode [ 235.653068][T14975] veth0_to_bridge: entered promiscuous mode [ 235.726808][T14988] netlink: 'syz.1.2656': attribute type 6 has an invalid length. [ 235.738634][T14987] netlink: 'syz.1.2656': attribute type 6 has an invalid length. [ 235.779542][T14987] netlink: 'syz.1.2656': attribute type 6 has an invalid length. [ 236.026601][T15003] __nla_validate_parse: 32 callbacks suppressed [ 236.026619][T15003] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2659'. [ 236.281954][T15012] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2663'. [ 236.449470][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 236.462899][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2667'. [ 236.492233][T15026] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 237.086132][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 237.129106][T15071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 237.604005][T15099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2692'. [ 237.674839][T15106] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2693'. [ 237.735287][T15111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.746154][T15111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.824572][T15111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.836144][T15111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.904305][T15111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.919409][T15111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.016967][T15111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.024403][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 238.047683][T15111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.195407][T11060] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.215463][T15147] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2703'. [ 238.224603][T11060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.225180][T11060] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.272439][T11060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.298591][T15147] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 238.331332][T15147] 0ªî{X¹¦: entered allmulticast mode [ 238.340471][T15147] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 238.381502][T11060] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.402893][T11060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.484644][T11060] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.497235][T11060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.625283][T15182] openvswitch: netlink: ufid size 143 bytes exceeds the range (1, 16) [ 239.103747][T15219] validate_nla: 2 callbacks suppressed [ 239.103766][T15219] netlink: 'syz.2.2724': attribute type 21 has an invalid length. [ 239.135210][T15221] netlink: 'syz.2.2724': attribute type 21 has an invalid length. [ 239.508314][T15264] netlink: 'syz.1.2735': attribute type 28 has an invalid length. [ 239.517666][T15264] netlink: 'syz.1.2735': attribute type 3 has an invalid length. [ 239.595516][T15269] 8021q: VLANs not supported on ip_vti0 [ 240.027595][T15292] openvswitch: netlink: Missing key (keys=40, expected=80) [ 240.291985][T15318] hsr_slave_0 (unregistering): left promiscuous mode [ 240.349450][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 240.683994][T15360] netlink: 'syz.4.2767': attribute type 10 has an invalid length. [ 240.693557][T15360] dummy0: entered promiscuous mode [ 240.699717][T15360] bridge0: port 2(dummy0) entered blocking state [ 240.706425][T15360] bridge0: port 2(dummy0) entered disabled state [ 240.713043][T15360] dummy0: entered allmulticast mode [ 240.808451][T15370] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 240.867583][T15376] netlink: 'syz.0.2772': attribute type 39 has an invalid length. [ 240.975995][T15391] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 240.984900][T15391] netlink: 'syz.1.2776': attribute type 3 has an invalid length. [ 240.998099][T15391] NCSI netlink: No device for ifindex 131080 [ 241.006867][T15390] smc: removing net device bond0 with user defined pnetid SYZ2 [ 241.029381][T15390] ` (unregistering): Released all slaves [ 241.112258][T15402] sit2: entered promiscuous mode [ 241.118125][T15402] sit2: entered allmulticast mode [ 241.129389][T15403] tipc: Enabling of bearer rejected, already enabled [ 241.145175][T15406] __nla_validate_parse: 19 callbacks suppressed [ 241.145193][T15406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2782'. [ 241.149649][T15403] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 241.188199][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 241.198724][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'. [ 241.212467][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2784'. [ 241.213531][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 241.234966][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 241.259593][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'. [ 241.313034][T15420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2786'. [ 241.435525][T15431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2792'. [ 241.515909][T15440] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 242.000842][T15464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2804'. [ 242.077856][T15476] netlink: 'syz.2.2807': attribute type 21 has an invalid length. [ 242.246537][T15485] syzkaller0 speed is unknown, defaulting to 1000 [ 242.279286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.297495][T15485] lo speed is unknown, defaulting to 1000 [ 242.683756][T15518] erspan0: entered promiscuous mode [ 242.690205][T15518] erspan0: entered allmulticast mode [ 242.702063][T15520] IPv6: sit3: Disabled Multicast RS [ 242.708736][T15520] sit3: entered allmulticast mode [ 243.168919][T15548] syzkaller0 speed is unknown, defaulting to 1000 [ 243.181742][T15548] lo speed is unknown, defaulting to 1000 [ 243.549178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.707773][T15606] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 243.898778][T15630] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.915493][T15631] bond9: (slave veth9): Enslaving as an active interface with a down link [ 243.944222][T15630] vlan2: entered allmulticast mode [ 243.951352][T15630] veth0_to_bond: entered allmulticast mode [ 243.957914][T15630] veth0_to_bond: entered promiscuous mode [ 243.967035][T15630] veth0_to_bond: left promiscuous mode [ 243.974339][T15630] bond9: (slave vlan2): making interface the new active one [ 243.983228][T15630] veth0_to_bond: entered promiscuous mode [ 243.989879][T15630] vlan2: entered promiscuous mode [ 243.996691][T15630] bond9: (slave vlan2): Enslaving as an active interface with an up link [ 244.026340][T15639] openvswitch: netlink: Key type 29 is not supported [ 244.033538][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.196054][T15660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.287067][T15667] C: renamed from lo [ 244.797206][T15713] validate_nla: 4 callbacks suppressed [ 244.797224][T15713] netlink: 'syz.1.2878': attribute type 10 has an invalid length. [ 244.982413][ T5868] syz_tun (unregistering): left promiscuous mode [ 244.998757][T15728] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.008444][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.016190][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.024152][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.031833][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.039684][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.065994][T15729] syzkaller0 speed is unknown, defaulting to 1000 [ 245.074481][T15729] lo speed is unknown, defaulting to 1000 [ 245.125942][T15740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.140660][T15740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.276943][T15754] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 245.297426][T15757] hsr_slave_1: left promiscuous mode [ 245.391222][T15765] tipc: Resetting bearer [ 245.397277][T15765] tipc: Resetting bearer [ 245.408219][T15757] netlink: 'syz.0.2889': attribute type 16 has an invalid length. [ 245.420822][ T6334] lo speed is unknown, defaulting to 1000 [ 245.431558][T15729] chnl_net:caif_netlink_parms(): no params data found [ 245.438149][T15757] netlink: 'syz.0.2889': attribute type 17 has an invalid length. [ 245.462859][T15757] sit0: left promiscuous mode [ 245.492914][T15757] `: left allmulticast mode [ 245.498241][T15757] 8021q: adding VLAN 0 to HW filter on device ` [ 245.525334][T15757] veth1_vlan: entered promiscuous mode [ 245.533567][T15757] tipc: Resetting bearer [ 245.548698][T15757] veth0_macvtap: entered promiscuous mode [ 245.555733][T15757] veth0_macvtap: entered allmulticast mode [ 245.562679][T15757] macvtap0: left allmulticast mode [ 245.568120][T15757] veth0_macvtap: left allmulticast mode [ 245.586017][T15757] ip6gre1: left allmulticast mode [ 245.598418][T15757] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 245.606619][T15757] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 245.615885][T15757] tipc: Resetting bearer [ 245.616366][T15779] netlink: 'syz.4.2894': attribute type 10 has an invalid length. [ 245.622642][T15757] bond1: left promiscuous mode [ 245.635129][T15757] bond1: left allmulticast mode [ 245.643330][T15757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.654852][T11060] bond3: (slave ip6gretap1): link status up again after 0 ms [ 245.655534][T15757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.670637][T11060] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 245.683736][T15757] veth9: left promiscuous mode [ 245.689288][T11060] bond3: (slave ip6gretap1): link status up again after 0 ms [ 245.697954][T15780] netlink: 'syz.4.2894': attribute type 10 has an invalid length. [ 245.707104][T15757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.719048][ T36] bond3: (slave ip6gretap1): link status up again after 0 ms [ 245.727913][T15757] gretap1: left promiscuous mode [ 245.741145][T15757] macvtap1: left promiscuous mode [ 245.746268][T15757] vlan0: left promiscuous mode [ 245.752808][T15757] macvtap1: left allmulticast mode [ 245.758002][T15757] vlan0: left allmulticast mode [ 245.763340][T15757] veth0_vlan: left allmulticast mode [ 245.776363][T15757] bond0: left promiscuous mode [ 245.781402][T15757] wireguard0: left promiscuous mode [ 245.785007][T15787] netlink: 'syz.2.2897': attribute type 23 has an invalid length. [ 245.790240][T15757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.803865][T15757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.833232][T15789] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 245.839427][ T9339] bridge0: port 1(team0) entered blocking state [ 245.847344][ T9339] bridge0: port 1(team0) entered forwarding state [ 245.861215][T15779] dummy0: left allmulticast mode [ 245.866227][T15779] dummy0: left promiscuous mode [ 245.874574][T15779] bridge0: port 2(dummy0) entered disabled state [ 245.883220][T15779] team0: Port device dummy0 added [ 245.892538][T15780] team0: Port device dummy0 removed [ 245.912259][T15789] bond6: entered promiscuous mode [ 245.917500][T15789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.013163][T15800] netlink: 'syz.0.2900': attribute type 10 has an invalid length. [ 246.030448][T15729] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.037805][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.046253][T15729] bridge_slave_0: entered allmulticast mode [ 246.053669][T15729] bridge_slave_0: entered promiscuous mode [ 246.065580][T15729] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.072995][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.080524][T15729] bridge_slave_1: entered allmulticast mode [ 246.087663][T15729] bridge_slave_1: entered promiscuous mode [ 246.132560][ T13] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 246.146582][ T13] bond3: active interface up! [ 246.165651][T15729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.182627][T15729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.280636][T15822] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 246.292560][T15822] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 246.300976][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.1.2905 Not tainted syzkaller #0 PREEMPT(full) [ 246.310335][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.320384][T15822] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 246.325839][T15822] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 246.345436][T15822] RSP: 0018:ffffc90003a3fae0 EFLAGS: 00010202 [ 246.351510][T15822] RAX: 0000000000000000 RBX: ffff888056deb000 RCX: 0000000000000000 [ 246.359476][T15822] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.367431][T15822] RBP: ffffc90003a3fc10 R08: 0000000000000003 R09: 0000000000000004 [ 246.375389][T15822] R10: dffffc0000000000 R11: fffff52000747f4c R12: dffffc0000000000 [ 246.383344][T15822] R13: dffffc0000000000 R14: ffff8880321bf100 R15: 0000000000000002 [ 246.391301][T15822] FS: 00007f06fac7b6c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 246.400221][T15822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.406800][T15822] CR2: 00007f06fac59f98 CR3: 000000002f91e000 CR4: 00000000003526f0 [ 246.414775][T15822] Call Trace: [ 246.418046][T15822] [ 246.420965][T15822] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 246.426072][T15822] ? bpf_lsm_capable+0x9/0x20 [ 246.430735][T15822] ? security_capable+0x7e/0x2e0 [ 246.435665][T15822] rose_ioctl+0x3ce/0x8b0 [ 246.439982][T15822] ? __pfx_rose_ioctl+0x10/0x10 [ 246.444818][T15822] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.449834][T15822] sock_do_ioctl+0xd9/0x300 [ 246.454326][T15822] ? __pfx_sock_do_ioctl+0x10/0x10 [ 246.459422][T15822] ? do_futex+0x333/0x420 [ 246.463748][T15822] sock_ioctl+0x576/0x790 [ 246.468062][T15822] ? lock_release+0x4b/0x3e0 [ 246.472643][T15822] ? __pfx_sock_ioctl+0x10/0x10 [ 246.477480][T15822] ? __fget_files+0x2a/0x420 [ 246.482058][T15822] ? __fget_files+0x3a0/0x420 [ 246.486811][T15822] ? __fget_files+0x2a/0x420 [ 246.491395][T15822] ? bpf_lsm_file_ioctl+0x9/0x20 [ 246.496324][T15822] ? __pfx_sock_ioctl+0x10/0x10 [ 246.501160][T15822] __se_sys_ioctl+0xfc/0x170 [ 246.505737][T15822] do_syscall_64+0xfa/0x3b0 [ 246.510229][T15822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.516279][T15822] ? clear_bhb_loop+0x60/0xb0 [ 246.520941][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.526817][T15822] RIP: 0033:0x7f06f9d8ebe9 [ 246.531227][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.550824][T15822] RSP: 002b:00007f06fac7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.559233][T15822] RAX: ffffffffffffffda RBX: 00007f06f9fb6090 RCX: 00007f06f9d8ebe9 [ 246.567190][T15822] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000006 [ 246.575146][T15822] RBP: 00007f06f9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 246.583100][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.591057][T15822] R13: 00007f06f9fb6128 R14: 00007f06f9fb6090 R15: 00007ffde5b5cf58 [ 246.599035][T15822] [ 246.602050][T15822] Modules linked in: [ 246.606052][T15822] ---[ end trace 0000000000000000 ]--- [ 246.611547][T15822] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 246.617022][T15822] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 246.636674][T15822] RSP: 0018:ffffc90003a3fae0 EFLAGS: 00010202 [ 246.642793][T15822] RAX: 0000000000000000 RBX: ffff888056deb000 RCX: 0000000000000000 [ 246.650797][T15822] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.658771][T15822] RBP: ffffc90003a3fc10 R08: 0000000000000003 R09: 0000000000000004 [ 246.666795][T15822] R10: dffffc0000000000 R11: fffff52000747f4c R12: dffffc0000000000 [ 246.674813][T15822] R13: dffffc0000000000 R14: ffff8880321bf100 R15: 0000000000000002 [ 246.682826][T15822] FS: 00007f06fac7b6c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 246.691813][T15822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.698408][T15822] CR2: 00007f06fac59f98 CR3: 000000002f91e000 CR4: 00000000003526f0 [ 246.706458][T15822] Kernel panic - not syncing: Fatal exception in interrupt [ 246.713816][T15822] Kernel Offset: disabled [ 246.718129][T15822] Rebooting in 86400 seconds..