last executing test programs: 7.384399103s ago: executing program 1 (id=2951): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='net_prio.prioidx\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) close(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x848c4}, 0x40000c1) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x2, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x95a0d91e6f0cc9a8, 0xfd, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x100}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x2, 0x101, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) sendmmsg(r3, 0x0, 0x0, 0x20000080) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050003000000585e6ad18c13202b08000300", @ANYRES32=r9], 0x28}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x80001) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 7.219111938s ago: executing program 1 (id=2952): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x404878b3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xf7, &(0x7f00000007c0)=""/247, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xd, 0x1ff, 0x8}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000940)=[{0x5, 0x4, 0x2, 0x3}, {0x3, 0x5, 0x8, 0xb}, {0x0, 0x3, 0x9, 0x1}, {0x5, 0x5, 0x2, 0x3}, {0x2, 0x5, 0xa, 0x8}, {0x0, 0x3, 0xe, 0x2}, {0x1, 0x2, 0x4, 0xc}, {0x1, 0x1, 0xc, 0x4}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0xe}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r2, r3, 0x25, 0xcef4806005c858db, @void}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0x3, 0x6, 0x1, 0xc}, {0x0, 0x2, 0x7, 0x6, 0x6}, 0xf65, 0x9, 0x2f4}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004050) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) 6.808675406s ago: executing program 1 (id=2956): epoll_create1(0x80000) (async) r0 = epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x29}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x17, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8002}, 0x40001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0xd3, 0x90, &(0x7f00000002c0)="d8d89b506de9ea29a66294b053c2729099650fe0b104c69f90c2e82c0837170e85fafede18aba8d7eb33ce8a24006dfd6a76ed0b4983e8b04aa5e58111744293fab0653a8d7a5b942f572bfe2c85a10cbcbbf1794c0b45d489364cf9b218720fb573bbc02f5b219177fdfdd129e7e5e6b892a6566d508f9db4639b915468bb08c165734c9c1448b3d6aedca36a095f1155b892957c41662598fb7004f7aa90b0be927dcfa8374d259da61061c283b0cb38e5d9aeada59e1aee3123bce8879e195724eefe35c6dbfccf30013c69a0f72bb63870", &(0x7f00000003c0)=""/144, 0xfd, 0x0, 0x94, 0x1000, &(0x7f0000000480)="3d0cc6a76485f2f8a188d1ee3c721189f847a56eb4879426d5967c9a98259902b25a0fed3608ec47bfc8195365bfc5e0197bd3aff7ad6febb46506743c967c9c85671107b4a23ed84d8467c37f85959f6dd73ef2a3b14cfab752c4160f294450e690f10f52734b56e965ebe294f545d3ceb10d323408746d5556445036f32b805360cf545964f16bfa6b1e4b2ae123dc0f57a92d", &(0x7f0000000540)="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", 0x4, 0x0, 0x3}, 0x50) r4 = syz_init_net_socket$ax25(0x3, 0x1, 0xce) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000015c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000000, 0x3c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r6 = socket(0x2a, 0xa, 0xffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001780)=0x0) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000001cc0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001800)={0x44c, 0x3f3, 0x310, 0x70bd25, 0x25dfdbfd, {0x2, 0x1, 0xb, [0x0, 0x1d1, 0x9, 0x9, 0x9, 0x9, 0xfff, 0x8, 0x3ff, 0x0, 0x8001, 0x3, 0x7, 0x8, 0x0, 0x9, 0xffff, 0x3, 0x6d5, 0x4, 0xffffffff, 0x4, 0xfffffff7, 0x312, 0x10000, 0x0, 0xe, 0x7, 0x80000001, 0xe, 0x1, 0x6, 0x8c7, 0x0, 0xe, 0x7, 0x10001, 0x1ff, 0x1, 0x8, 0x9, 0x24b, 0x310, 0x22, 0x3, 0x9, 0xc, 0xdfec, 0x2, 0x2, 0x80000000, 0x9, 0x0, 0x3000000, 0x1, 0x8, 0x3, 0x3, 0xaeb2, 0x8, 0x1, 0x5, 0x6d8, 0x47], [0xffffffff, 0x8, 0x4, 0x101, 0x5, 0x10001, 0x2b, 0x1, 0x9, 0x6, 0x6, 0xffff, 0xffff, 0xb3f0, 0x7f, 0x4, 0x3, 0x0, 0x7, 0xf581, 0x9082, 0x1, 0x0, 0x3, 0x8, 0x100, 0x9, 0x1, 0x467, 0xc71, 0x4969, 0x400, 0x0, 0x7, 0x8, 0xe4, 0x8, 0x3, 0x5, 0x2, 0x5, 0x0, 0xff, 0x1e, 0x5d27, 0x6, 0x100, 0xfffffeff, 0x3, 0x1, 0x1, 0x5, 0x9, 0x15b, 0x0, 0x8001, 0x4, 0x58, 0x1, 0x0, 0x63, 0x5, 0xa74e, 0x5], [0x1, 0x6, 0x386, 0x5, 0x80, 0x3, 0xb, 0x0, 0x8, 0x80000000, 0x62, 0x1, 0x800, 0x6, 0xe9e, 0xfffffff7, 0x7f, 0x533, 0xd, 0x0, 0x2, 0x2, 0x9, 0x0, 0x8000, 0xfffffffb, 0x101, 0x3, 0xb, 0x2, 0x1ff, 0x3, 0x2, 0xffff8000, 0xc, 0x1, 0x3, 0x7, 0x7fffffff, 0x2, 0x400, 0x4, 0x8, 0xc6d0, 0xa86f, 0x7fffffff, 0x1, 0x81, 0x8b61, 0x4, 0x7fff, 0x8, 0x7, 0x3ff, 0xd, 0x6, 0x0, 0xd, 0x2, 0x3, 0xb, 0x3, 0x66e, 0x3], [0x8c, 0x1ff, 0x5939, 0x8, 0x7fffffff, 0xc, 0x8001, 0x6, 0x4, 0x3, 0xe, 0x2, 0x100, 0x80000000, 0xffff, 0x1, 0x682, 0x80000000, 0x400, 0x3, 0x1, 0x4, 0x3, 0x0, 0x4, 0x3, 0x9, 0x4, 0xd7, 0x34383650, 0x6, 0x9, 0xa, 0x4, 0x2d00d483, 0x6, 0x8, 0x80000001, 0x800, 0x23, 0xfffffff7, 0xfffffffa, 0x0, 0xc, 0x82, 0x401, 0xc, 0x7fffffff, 0x828b809, 0x6, 0x7, 0xffffff95, 0xffff, 0x4, 0x1552, 0xf, 0x200, 0x87b, 0xfffff5fe, 0x9, 0x400, 0x2, 0xfffffff8, 0x1000], 0x29, ['\a[}\x00', '\x00', 'wlan0\x00', '\x00', '^})\x00', 'nl80211\x00', '-\x00', '$.\x00', '\\&\xd2&}]%)\\\x00', ']\x00']}, ["", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000001cc0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001800)={0x44c, 0x3f3, 0x310, 0x70bd25, 0x25dfdbfd, {0x2, 0x1, 0xb, [0x0, 0x1d1, 0x9, 0x9, 0x9, 0x9, 0xfff, 0x8, 0x3ff, 0x0, 0x8001, 0x3, 0x7, 0x8, 0x0, 0x9, 0xffff, 0x3, 0x6d5, 0x4, 0xffffffff, 0x4, 0xfffffff7, 0x312, 0x10000, 0x0, 0xe, 0x7, 0x80000001, 0xe, 0x1, 0x6, 0x8c7, 0x0, 0xe, 0x7, 0x10001, 0x1ff, 0x1, 0x8, 0x9, 0x24b, 0x310, 0x22, 0x3, 0x9, 0xc, 0xdfec, 0x2, 0x2, 0x80000000, 0x9, 0x0, 0x3000000, 0x1, 0x8, 0x3, 0x3, 0xaeb2, 0x8, 0x1, 0x5, 0x6d8, 0x47], [0xffffffff, 0x8, 0x4, 0x101, 0x5, 0x10001, 0x2b, 0x1, 0x9, 0x6, 0x6, 0xffff, 0xffff, 0xb3f0, 0x7f, 0x4, 0x3, 0x0, 0x7, 0xf581, 0x9082, 0x1, 0x0, 0x3, 0x8, 0x100, 0x9, 0x1, 0x467, 0xc71, 0x4969, 0x400, 0x0, 0x7, 0x8, 0xe4, 0x8, 0x3, 0x5, 0x2, 0x5, 0x0, 0xff, 0x1e, 0x5d27, 0x6, 0x100, 0xfffffeff, 0x3, 0x1, 0x1, 0x5, 0x9, 0x15b, 0x0, 0x8001, 0x4, 0x58, 0x1, 0x0, 0x63, 0x5, 0xa74e, 0x5], [0x1, 0x6, 0x386, 0x5, 0x80, 0x3, 0xb, 0x0, 0x8, 0x80000000, 0x62, 0x1, 0x800, 0x6, 0xe9e, 0xfffffff7, 0x7f, 0x533, 0xd, 0x0, 0x2, 0x2, 0x9, 0x0, 0x8000, 0xfffffffb, 0x101, 0x3, 0xb, 0x2, 0x1ff, 0x3, 0x2, 0xffff8000, 0xc, 0x1, 0x3, 0x7, 0x7fffffff, 0x2, 0x400, 0x4, 0x8, 0xc6d0, 0xa86f, 0x7fffffff, 0x1, 0x81, 0x8b61, 0x4, 0x7fff, 0x8, 0x7, 0x3ff, 0xd, 0x6, 0x0, 0xd, 0x2, 0x3, 0xb, 0x3, 0x66e, 0x3], [0x8c, 0x1ff, 0x5939, 0x8, 0x7fffffff, 0xc, 0x8001, 0x6, 0x4, 0x3, 0xe, 0x2, 0x100, 0x80000000, 0xffff, 0x1, 0x682, 0x80000000, 0x400, 0x3, 0x1, 0x4, 0x3, 0x0, 0x4, 0x3, 0x9, 0x4, 0xd7, 0x34383650, 0x6, 0x9, 0xa, 0x4, 0x2d00d483, 0x6, 0x8, 0x80000001, 0x800, 0x23, 0xfffffff7, 0xfffffffa, 0x0, 0xc, 0x82, 0x401, 0xc, 0x7fffffff, 0x828b809, 0x6, 0x7, 0xffffff95, 0xffff, 0x4, 0x1552, 0xf, 0x200, 0x87b, 0xfffff5fe, 0x9, 0x400, 0x2, 0xfffffff8, 0x1000], 0x29, ['\a[}\x00', '\x00', 'wlan0\x00', '\x00', '^})\x00', 'nl80211\x00', '-\x00', '$.\x00', '\\&\xd2&}]%)\\\x00', ']\x00']}, ["", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000001d40)=@add_del={0x2, &(0x7f0000001d00)='veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000001d40)=@add_del={0x2, &(0x7f0000001d00)='veth0_virt_wifi\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x80, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe0000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x200000c0) sendmsg$nl_generic(r2, &(0x7f0000002080)={&(0x7f0000001ec0), 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x134, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x6}, [@typed={0x4, 0x83}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r7}, @generic="d3e055393983d86b3443da14d6c1ef6c1c41677a2888959b21b675477f6d74a8c12e8a12a66ba2a06b74de7c84ca597eea3f19693c48cd53a55d4f54badaa200621d985a8a92bdf56976477ecff1d6e0", @generic="3ade6e7029d616a6fc1cd77c280bafcd198aaf2fad5de3709c55e0f7a1cd0e7fa021981b5b341cb068284fafa1914e0667578ef536df8f6e8da71f331ca5ac9b7591a627ddeead9b9fce370972023303c4825c447ae8f7abe32dcc6e8741c6fb0a05dfcef3a51c686a9ec6c16144d1a1eeea76ccae3abf971203be5cfbb59f67227b887086fe6cf02c881d849fdd0b8e083e55984ce06ba189c2ce921278f1317c953ce81fdfd122d47bcac082a8ba3a15e529cd86d3c9c344ad1f8b1c66bfbd30f8"]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x98, r5, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x219}], @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x0, 0x1, 0x0, {0x9d, 0x4, 0x0, 0xb, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x33, 0x7f}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x2404c808) syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r2) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000002580)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x24c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x880}, 0x80) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002600), r6) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) socket(0xb, 0x4, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002740), r6) sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x50, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$alg(r6, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002880)="8bc6efbad73346246c2d78202c5497cf55e1395b774b23308f3c3aab09fd7bc43500ea00b7420fa29db39cc29c96a993108c8aab319932cef86fd0064ce9b3d097f891ff911eb90d99174e14212b77c21b904ebaed1fbc0060dd05b53015b2c37dbefbd6a9fa3a85b653a3f832889286f8a591e53da3610317e4110fd707481249ef1bdc85513df0a599dab01c3cb2a52787e58fe741c2c92cd2ab6ecc0a1e3cb856faea7b3ea4fe1c7a3aa4878df26b79b0a7fa4fee450eb6479e5aea89d563ee54db8de272663f70d5e652c437206c313fc060ae530b7b2a", 0xd9}, {&(0x7f0000002980)="d88b4ac276c544e8c3c64e8813f0dd77d4674d69127bf88b6e15eb9853daff4c77307d24848e1c06bfad6263eb59f35c466cfdabe9f701e31a6f538fdd141272b3dd77de12f4badbeab7bacc668c32f32082c91d046f80ea9c9999475c4b0c85903084290df209100359c01e8410e908c7af64ca5faf2c0e734361d17dfd72e6706f1c5dc757f3014c8eaf1e581395443e822abd5d124044900386ea19a3fd1930ca57c224680b384705ec80eb0b6f12fb20ee64b6ca04d60d9214a1c5918abaed749073e777b163982b8eb6c86222", 0xcf}, {&(0x7f0000002a80)="b8dc4b1920526d19ea7af84b9c34cc6b213735ca19a75ad37a3ce59c370358f9409b3a677ca426953e11f8409584e48e31fa5b2869b49b6876153f41f5493b96ec14ba76f0b7226a3c6a9721a65016a60d2a4c956539aac9bbbd9d6f377b153ebc8f604744958b099126cb377097637fd70a315f171248e663b4d0c0dd94863d3d2e10e45b3cc29ba5c6cf06ba8d95f882e317b4f2fa2a7cc5f3a17ab192c3692f8dd9a95cf5b132bad6b0206e5cf2ef88f0904f690341ba68cdfef51e9e3b083e713e01b26b4d70be3e5b92bf9e42b94760bd4813f886a0a6239db6669aafda5e684faf143dd17ad3e5f0bc12bcfcaef1855c48ca95f5c79f", 0xf9}, {&(0x7f0000002b80)="a6ace56437ab0436329f82552bef94ce1752c4fc", 0x14}, {&(0x7f0000002bc0)="46efca4da79fa0cd9b43cebc5ef11addc7af564bbcd79121f6ab0f0aa10c898b564401f56386e4aad3f0b1c09733588241b751f55e31a3e7eab0c25359d3a56bb5616bf5c66859e5d1c52ddd081286daf48fb527efd771043cca2105eba2aae33bd42608f14802fbb18934ce84eb0849f2c0c56553628e69e090b61fd0ffb3f355cc1f021124b9b7ac7e8ef5e261955e103f6110161518cea1c7", 0x9a}, {&(0x7f0000002c80)="8eb31cf6b01ba21395a62fa37db5c9f09b72e791328473944945e21067d17bb2e75166f8dc9d22073c25ca8d85e0210bd74bcf3d33af9220e8026faa3bf6cb34", 0x40}], 0x6, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xa09fbb583740c2a7}, 0x2) (async) sendmsg$alg(r6, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002880)="8bc6efbad73346246c2d78202c5497cf55e1395b774b23308f3c3aab09fd7bc43500ea00b7420fa29db39cc29c96a993108c8aab319932cef86fd0064ce9b3d097f891ff911eb90d99174e14212b77c21b904ebaed1fbc0060dd05b53015b2c37dbefbd6a9fa3a85b653a3f832889286f8a591e53da3610317e4110fd707481249ef1bdc85513df0a599dab01c3cb2a52787e58fe741c2c92cd2ab6ecc0a1e3cb856faea7b3ea4fe1c7a3aa4878df26b79b0a7fa4fee450eb6479e5aea89d563ee54db8de272663f70d5e652c437206c313fc060ae530b7b2a", 0xd9}, {&(0x7f0000002980)="d88b4ac276c544e8c3c64e8813f0dd77d4674d69127bf88b6e15eb9853daff4c77307d24848e1c06bfad6263eb59f35c466cfdabe9f701e31a6f538fdd141272b3dd77de12f4badbeab7bacc668c32f32082c91d046f80ea9c9999475c4b0c85903084290df209100359c01e8410e908c7af64ca5faf2c0e734361d17dfd72e6706f1c5dc757f3014c8eaf1e581395443e822abd5d124044900386ea19a3fd1930ca57c224680b384705ec80eb0b6f12fb20ee64b6ca04d60d9214a1c5918abaed749073e777b163982b8eb6c86222", 0xcf}, {&(0x7f0000002a80)="b8dc4b1920526d19ea7af84b9c34cc6b213735ca19a75ad37a3ce59c370358f9409b3a677ca426953e11f8409584e48e31fa5b2869b49b6876153f41f5493b96ec14ba76f0b7226a3c6a9721a65016a60d2a4c956539aac9bbbd9d6f377b153ebc8f604744958b099126cb377097637fd70a315f171248e663b4d0c0dd94863d3d2e10e45b3cc29ba5c6cf06ba8d95f882e317b4f2fa2a7cc5f3a17ab192c3692f8dd9a95cf5b132bad6b0206e5cf2ef88f0904f690341ba68cdfef51e9e3b083e713e01b26b4d70be3e5b92bf9e42b94760bd4813f886a0a6239db6669aafda5e684faf143dd17ad3e5f0bc12bcfcaef1855c48ca95f5c79f", 0xf9}, {&(0x7f0000002b80)="a6ace56437ab0436329f82552bef94ce1752c4fc", 0x14}, {&(0x7f0000002bc0)="46efca4da79fa0cd9b43cebc5ef11addc7af564bbcd79121f6ab0f0aa10c898b564401f56386e4aad3f0b1c09733588241b751f55e31a3e7eab0c25359d3a56bb5616bf5c66859e5d1c52ddd081286daf48fb527efd771043cca2105eba2aae33bd42608f14802fbb18934ce84eb0849f2c0c56553628e69e090b61fd0ffb3f355cc1f021124b9b7ac7e8ef5e261955e103f6110161518cea1c7", 0x9a}, {&(0x7f0000002c80)="8eb31cf6b01ba21395a62fa37db5c9f09b72e791328473944945e21067d17bb2e75166f8dc9d22073c25ca8d85e0210bd74bcf3d33af9220e8026faa3bf6cb34", 0x40}], 0x6, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xa09fbb583740c2a7}, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002dc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002dc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ppoll(&(0x7f0000002e00)=[{r6, 0x2420}, {r4, 0x40}, {0xffffffffffffffff, 0x4000}, {r4, 0x3020}, {r12, 0x400}, {r0, 0x410}], 0x6, &(0x7f0000002e40), &(0x7f0000002e80)={[0x8]}, 0x8) (async) ppoll(&(0x7f0000002e00)=[{r6, 0x2420}, {r4, 0x40}, {0xffffffffffffffff, 0x4000}, {r4, 0x3020}, {r12, 0x400}, {r0, 0x410}], 0x6, &(0x7f0000002e40), &(0x7f0000002e80)={[0x8]}, 0x8) 6.571264482s ago: executing program 1 (id=2958): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES16=r0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="97b7a6c0848c", 0x6}, {&(0x7f0000000080)="96b8bd6320ec2a9866", 0x9}, {&(0x7f0000000100)="e7d1f57368a84e11046bb49705c593a09ebaf5177eb89d0901fbfb915f9688f85404b7429235c9d0ea25978abc00cbf226096d88505f2b16d43bffb69f28fd", 0x3f}, {&(0x7f00000001c0)="bf95b902f3f14e54f4d367af42494f790687ea9a05e03bcf59b57c270327d212f889ab04ee1e509279edbf1b74b2377915aba24233c2e7a00c762921d0103bf12c54143079712034947193b549c21e74cbae325ada783d7f943a5e51c7c944b06e9f4e73f0542989483b080e8857887f5ec8255315974fa044ea02c158c52dc017c746357ae93f509a3e59c80071a911550f240df87be466fff7d8b6d6ea86bb0cdd6fac4c06933c86de8dd28fee088a167885a480b78c79706412b6b8339f9ef12bfecfb74109be6a40395b39cf333f595ae54fbab6", 0xd6}, {&(0x7f00000002c0)="1ba61c4a1afaa2cf182d8a6ba844bd900ee8cd344b081ded7024c38490f7f0b61e8efedd9f90cde03603015a8d09ddfb9930a15200de63756a46", 0x3a}, {&(0x7f0000000300)="77888b66e5d8dff40f6c951be1ec3916b47747392cf22a046a803d", 0x1b}], 0x6, &(0x7f00000003c0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x19, 0x0, 0x3, [0x2, 0x6, 0x10001]}, @noop, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x0, [{@loopback, 0xdb7b}, {@loopback, 0xfffeffff}]}, @generic={0x82, 0x11, "275fdf55cd1250fc0e316d0f07d938"}, @noop, @noop, @generic={0x88, 0x4, "dfff"}, @rr={0x7, 0x13, 0x75, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x24, 0xbd, 0x0, 0xd, [0x1, 0x9, 0x9, 0x5, 0x5, 0x5, 0x5, 0xa8]}]}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x6a, [@broadcast, @broadcast, @remote, @remote, @empty, @multicast1, @loopback, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0x35, [@private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010102, @loopback, @multicast2, @private=0xa010102]}, @noop, @generic={0x0, 0xf, "13d37ef63a11b008a6cfb5eb7e"}, @generic={0x44, 0x12, "b8ecd2286ce444138980126aa821f4f4"}, @timestamp={0x44, 0xc, 0x7e, 0x0, 0x1, [0x1, 0xb1]}, @cipso={0x86, 0x37, 0x0, [{0x5, 0xd, "8af925400db0e43311b0af"}, {0x5, 0x12, "887623dc10523b9c1fd3c95e71b0c87d"}, {0x1, 0x7, "2ef1309cc2"}, {0x0, 0xb, "ac2b5af62b08aae1c7"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0x8, [{@broadcast, 0xa0a6}]}, @end, @ra={0x94, 0x4, 0x1}]}}}], 0x1b0}, 0x48000) 6.500722388s ago: executing program 1 (id=2960): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000005ad9e0546d8cd786996dd789d81470dcc69d2d1025000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100717565756500000014000280080004400000001606000340000100000900010073797a30000000000900020073797a3200000000140000101100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 6.124926536s ago: executing program 1 (id=2964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newqdisc={0x1c0, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xffe0, 0x10}, {0xc, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x8, 0xe, 0x0, 0x2, 0x12, 0x3, 0x7}}, {0x12, 0x2, [0x101, 0x800, 0x101, 0xfffb, 0x9, 0x7ff, 0x9]}}, {{0x1c, 0x1, {0xa, 0x81, 0x28, 0x0, 0x2, 0xf, 0x2, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x400, 0x7, 0x7, 0x0, 0x1]}}, {{0x1c, 0x1, {0xea, 0x40, 0x8, 0x6e7, 0x1, 0x3, 0x8, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x80, 0x0, 0xa24, 0xc, 0x2, 0x2c166925, 0x7, 0x3}}, {0xa, 0x2, [0x80, 0x8001, 0x8000]}}, {{0x1c, 0x1, {0x3, 0x3, 0x94, 0x7, 0x0, 0xc23b, 0x7c, 0x3}}, {0xa, 0x2, [0x10, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x88, 0x1, 0x1ff, 0x5, 0x2, 0x1, 0x3, 0x5}}, {0xe, 0x2, [0x6, 0x2, 0x1, 0x2400, 0x7ff]}}, {{0x1c, 0x1, {0x22, 0x6, 0x3, 0x2, 0x0, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xd, 0x1, 0x55, 0x4b, 0x2, 0x19, 0x9, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x800, 0x5, 0x0, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0x2, 0x2, 0x7ff]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xffc3}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.604958059s ago: executing program 0 (id=2990): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727e", 0x2f, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 3.411725518s ago: executing program 0 (id=2992): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)=':^\x00', 0x690200, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x4b]}, {0x8, 0x2, 0x3a489561, 0x3d}}, 0x7ff, &(0x7f0000000080), &(0x7f00000000c0)=0xc}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x3, 0x560f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x10, 0x90000000, 0x7b}}) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r8}, 0x14) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r16, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001680)={&(0x7f00000001c0), 0xc, &(0x7f0000001640)={&(0x7f0000001b00)=ANY=[@ANYBLOB="80080000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000200030108000000f3ff0707040000000600fa03420e000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002b81000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f585000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400030000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="9401028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000100ebffffffffffffff00000000000000052303860f6c00e4ffffff080004000500000008f9f5e9ca001871497b4964ba6b21ced403251117d7826db9d92c7632d61e10ee979cc82f022935445bcb66d20326c041a945e94b6b", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040008000d84ff000000010000010700000002000130ffff00000000070800000001feff08f9930000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400e724000008000100", @ANYRES32=r8, @ANYBLOB="7801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009e2e000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r14, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c000400810025030000000000100740020000000800060643650000f626030904000000050081030100000000000006290000008100010a82000000000107050400000004000002ff0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r17, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000b00013b090000000300098004000000"], 0x880}, 0x1, 0x0, 0x0, 0x20004011}, 0x10) 3.035053348s ago: executing program 4 (id=2998): ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000380)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, 0x3, 0x0, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r10) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r11, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) (async) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r3) 2.816530665s ago: executing program 2 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 2.756544228s ago: executing program 0 (id=3002): splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0xbcda, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1, 0x0, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400010029bd0500fddbcf250a6b2137a1e5ef6aff11b7a8b114", @ANYRES32=r6, @ANYBLOB="080008000804000014000200fe8000000000000000000000000000bb"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x105040, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x105040, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000002c0)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000002c0)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="000002b7c70281", 0x7}], 0x2) r9 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40000) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000200)={0x9767, 0x8, 0x3, 0x3, 0x5, 0x21, 0x1e, "057f7cb64d9d65de9aa753f7d27324d371b8f871", "9d48d941b8c4fa8534de63356af40d577168ee97"}) (async) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000200)={0x9767, 0x8, 0x3, 0x3, 0x5, 0x21, 0x1e, "057f7cb64d9d65de9aa753f7d27324d371b8f871", "9d48d941b8c4fa8534de63356af40d577168ee97"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6, 0x0, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2.596641195s ago: executing program 2 (id=3003): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000280001800d0001007564703a73797a0e0000c15fa098028008000200f6010000080001000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) connect$rose(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000280001800d0001007564703a73797a0e0000c15fa098028008000200f6010000080001000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) (async) 1.466391804s ago: executing program 0 (id=3004): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newqdisc={0x1c0, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xffe0, 0x10}, {0xc, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x8, 0xe, 0x0, 0x2, 0x12, 0x3, 0x7}}, {0x12, 0x2, [0x101, 0x800, 0x101, 0xfffb, 0x9, 0x7ff, 0x9]}}, {{0x1c, 0x1, {0xa, 0x81, 0x28, 0x0, 0x2, 0xf, 0x2, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x400, 0x7, 0x7, 0x0, 0x1]}}, {{0x1c, 0x1, {0xea, 0x40, 0x8, 0x6e7, 0x1, 0x3, 0x8, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x80, 0x0, 0xa24, 0xc, 0x2, 0x2c166925, 0x7, 0x3}}, {0xa, 0x2, [0x80, 0x8001, 0x8000]}}, {{0x1c, 0x1, {0x3, 0x3, 0x94, 0x7, 0x0, 0xc23b, 0x7c, 0x3}}, {0xa, 0x2, [0x10, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x88, 0x1, 0x1ff, 0x5, 0x2, 0x1, 0x3, 0x5}}, {0xe, 0x2, [0x6, 0x2, 0x1, 0x2400, 0x7ff]}}, {{0x1c, 0x1, {0x22, 0x6, 0x3, 0x2, 0x0, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xd, 0x1, 0x55, 0x4b, 0x2, 0x19, 0x9, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x800, 0x5, 0x0, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0x2, 0x2, 0x7ff]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x5000000}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.465999751s ago: executing program 2 (id=3005): syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtaction={0x48, 0x5a, 0x100, 0x0, 0xfffffffc, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.252384354s ago: executing program 4 (id=3007): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 1.251336069s ago: executing program 3 (id=3008): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) readv(r0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0xb2, [0x0, 0x7, 0x2, 0x401, 0xffffffff, 0x6], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000200)=""/178}, &(0x7f00000003c0)=0x78) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'xfrm0\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000911ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20184f93"], 0x4a) 1.23465971s ago: executing program 2 (id=3009): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8, 0x4, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r3, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ad4a454faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000006800010000000000fddbdf25020000000000000006000700010000000c000880050004000100000008000500", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x440a}, 0x4040414) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @local}, &(0x7f00000002c0)=0xc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x1ec0, 'syz0\x00'}}}, 0x28}}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1409, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x2, @l2={'ib', 0x3a, 'ip_vti0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008804}, 0x24040080) 1.1905434s ago: executing program 0 (id=3010): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030ae9000000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780060001002b66000008000640000000030900010073797a300000000014000000110001"], 0x114}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) 1.089667689s ago: executing program 4 (id=3011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000740)={@private2, 0x0}, &(0x7f0000000780)=0x14) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="abbb97cb72a94a558c026e76fed052ad8204b55ae0b71265ff4a47a5", 0x1c}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x56}}], 0x48}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)="5eff449a9e285db7ccf5b276fc87d4859faeab7e38be5d082c02ae0f429915d5955946aeb788a0b56214588959ef046db1e0d61059daef37428ede7bf65e23508ba60582287b5cae98f84c190e794c4705e2c0725ae18df60b8e7aa2c5f8ff0e75d4c0b1f54b14f5bb7f352d43c614eb099f1aa2687e5c7b1e933ccc3af8b05c25efe043d65f8b8af770b26d623753d8c528b8e9db1aa2659a2bccb23dac22cc44c57f0e2a41a6ea42d7c6c6555ee6a601e6343349cd77896a84eb50b56bb4cbc2c318143407191e2420e13f18a5a1c44101cd04781b526d6fa2a42c5c132f5aec43", 0xe2}, {&(0x7f00000003c0)="00499ecc577650c642c665234071eef5ced1c67a020aa4b92a0c4232dddeee194c64e62242bffcdb5ab85f463b8bc6550478678a065dfcf81ac4a9befa56be07b9f488b4b4181863e7b17fe8d744ed1dca701bf9616ff5d469bec097484a7822625f270b19998cc03adb4ee8ade87ed71347360f6876a65a0b15b04b1609daaf39aa645c1a084ec8abe010b920a5b4936d0494ddf06f31c2da39f5e107587803ba4b47c0dfbb835ba85e70e169f5960739441a0616aed705e936f88b909ff5f27c14e6d1081b891d7583830480816167491f", 0xd2}, {&(0x7f0000000600)="0a07e2cb20e9c461927aef3c713aefa74a95f03b8925c53298ef68fabfb27a47f331b20e808676daf067da3565e0c7d60307b969dc142227d22f417804f988b976e4f10c5799a5bbbcb7573ba3c0e0163eba6a0c4c0794f622616335f7207deeb4694731e6bacdbc395c1803867d1ce4e7150f5e190ef063fba76f334c9b0bbde88ffa626278b9d081de56d4cde64d81acff8039aa828e9611224496d4270f79e73dcfe71d394d2d4887a635ca132cc1df722e2e90b55ef79541980c41d7670a2a4be8de80766a00cf5d3d342366a9357ac821c747ebd6b818b252f3f28dd69e5ab2e17ef9e9", 0xe6}], 0x3, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @loopback}}}], 0x68}}, {{&(0x7f0000000840)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="15a5756e4ff385b6222cb4566806e746af2ec3cc827c9b000b948941b4db3521daa136fd70e76347d14e7fcb42d8b35880daef0685cfc40d45cb67f4251ed70fcbac0b57687d531c405e2ecd0ee9f628bb9ac1b2776b70f61fc11043283eb906528ececda7b9d218f2820daed1c1c886b92bbe76ad289b48e9572666298c7bdc5f6d852b6ea87cf76acf76c39787466375d9f39d8b1f9c541a8abdd78df2d84fafb4b59cfb8d95f58c7f238d329a5d", 0xaf}, {&(0x7f0000000940)="eeed28ad501cc8182b4f32df87df3320303a14b21bfda76f2a1bedbccde297ff65c331599af74589f989c867017c52e426b23481e4ce3a7e9a748d612e3d19fd79c5e3b1101ccb93bbd62707ec9831e05708b54393776f89aecf2eec1179180b3c7da8930d8bccd004b93f9fff72d64f24b54897636c08271da6b6385f39a15b039d47908cb82ddb56629663c177ba1254de42f709b4b48f61572faf449d41639c7351282fce633490e0dc8f706d02", 0xaf}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x44, 0x11, "53db2e24be1046acb25bd26866ffbb"}, @cipso={0x86, 0x57, 0x3, [{0x2, 0x4, "1290"}, {0x1, 0xf, "e96165c8fae51f38bdf47e4214"}, {0x0, 0xf, "b939019fcc36a700c8b2aa5b25"}, {0x0, 0x7, "1df0951217"}, {0x5, 0x2}, {0x7, 0x7, "adf9030af6"}, {0x0, 0xa, "6dc7b824fc27b859"}, {0x2, 0x9, "75584bd964c983"}, {0x0, 0x4, "b7f9"}, {0x1, 0x8, "9d6ff3c35149"}]}, @timestamp={0x44, 0x8, 0xb9, 0x0, 0x5, [0x3]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x4d, 0x3, 0x6, [{@loopback, 0x9}, {@local, 0x9}]}, @noop]}}}], 0xf8}}], 0x3, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="2c001000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250100000018000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r4 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000001c40)={&(0x7f0000001b80)=[{&(0x7f0000001480)="1f5fcf5f2bb5ea5fd8a580c3194758e071b74ecca086d7b0a2e919737bc2db492ac07044a485d18ff63f089fef9222bc9bda1586fad25cdd06709db00390c23629661c252154bc0e6344de27359d60836445d09514edaeb9ce9b1659a2e4c5d0b53718daa1aec11315eab9a4addbcefe994c17b4eecea5c63c301d1aa57b94041033c2f9f08e275f1d18159028ccf93ee8c1b5c9f6f4837b9ef41a307cf6764c323b58e25a4c9ae71bb25016", 0xac}, {&(0x7f0000001540)="7ab03d88f2ba769b4693baa7aa54915f54081412c42dd72941a53620cfa21697886f0e4ad076490f652e9514ce562cba29e05f34330d3ca4b6cf54a4abc8f3aa1f3cc7e45f8532953f5ef35174293b7c7cffb43f693b7ef3be1c8a0c5929c309aa98dac08f067fc28c5235c7433c182b36f892ffdbc84e0b3aa5bc59fcea253486d56efc7c301021999cd1ee8783077edf7911e517c4c6d78587cbc53a0f4affe91fd7042f24d353d25acf8876e3f040043780f1907520621c924afd4fb77b6c603b0ef0a66ff750aab80fe3147fb21e270251f23f683754c983038666b958c34df1efc368141a5189afa65f", 0xec}, {&(0x7f0000001640)="444b7c799f4719e8cc3e38", 0xb}, {&(0x7f0000001680)="96f05e32e958cae959bc2a2dc6759f2295e47fd1638fc37a", 0x18}, {&(0x7f00000016c0)="4356650f987539eaf01041ae54f2b3698e6ef875d13ee36ef301fc467fc9dbf00ecfa8973864edfa9dcea4aef89b2095868f1bade6a81f426f6a010f4004450e9d2ed1403915e7f31c4b8a472063e9e8fd888fe6b079912ba11ca6e1b42b58f1814a7fbad86b23ceb2ad2d50673f7a8dbb36bdedb7ac8b9ffe69e7272a3cebd1e2f1e2bcba026709616b0d71e8befcfa9ca93b868624b0f71f48ef3730e40e322c78db93a1bd3cd1b2bb854c92164cd00405abbd791292c49620ac53952c408647e9c1aed3a7a16eb90217d7ec12c4145a3920b48af77b8fecb40e15e5bdd128b5ce8dcd94e448", 0xe7}, {&(0x7f00000017c0)="4d0eb334c8a29ad94e4e1dfc5bc1136a02326b971ad0401780194dfe64e3181e7a43b148f2762474747fb514093dfa24d23b9fe2191286a684899d9e372156b5b6c63c734d568e02e9d9142fda3a2dd8268708443507b139df32a5c49499f2adf3f3cab79f8ca257d67b95ca753bfc305e4f74f88d2b8e33a95e88c6111a9baf667658fd3bbd1f165f4d1104264cae12", 0x90}, {&(0x7f0000001880)="a3e3305c0fda68b6aa57abdcc54d47ad5dd22a2fd64357e5f67fe40815aa77ad67b2ba1626b594b0492d5b90f9097e3db0a79b85623f1fcfb9e872ca44bb6114e0228675c05ea8a79e46199a051d2884a54eda2218d74831db2581e7ca", 0x5d}, {&(0x7f0000001900)="b3e94a9c25ff5bc4d5f764aec4b83d3ab810a383845603b185254cc62882dd84d396e434e5d79e069868bcfc215aa9a162e7c4894ffa9499ff1c8ce56911baace99cbbf928fbdb390dd7572fe9e73b4fb934a3c12d05cb71a9e2829ecf55fedf25408b8e837d026f048d0d2385a210e0c56f63ce26d801c7894366fd81706d40799ee3e208666ff0ceb5664c3edfb24127611c9a87a97b9d6c3405", 0x9b}, {&(0x7f00000019c0)="e54033ee4a8dc8ae97b1ffffc31a53c0dbfc7e386ac078bdc011d5ecc615ddd48e4bf26b6f5900167d6ccdea9b2f935ccbda9750b042a60d650e4275ce7736dbbeaa96a128e6041d188af2889b20f79422a08f6eddbc32ae1654323e4482822c47656f7630cb05d5914a99e486ecf53cd1ed97ad86f3d7ac857f75cd16ad9dfbe92249eb3d1b5f17f7c0ee56d7084c7514f4d0a49ae9e0a250b0995dffdda875efd5e2e92fad4afece3b3b6dd58ffc41fdcd70fef7f41adc85d2b49cc30b3dffcdf820e2e9714efb9aafb9388b13ebde0932a8c7db65ddd29afecbc6a07725b70ea7fa95af7a4e4025002c6c5b8577c522b532efc3", 0xf5}, {&(0x7f0000001ac0)="1b83fa0caf8a1f797e955b39e8c21e104619d48d8bbad25e32598d8a7c4d76a1c2c68c392c9c41dac9203286e9a39faa6285a66fdf7308d19f45eb7e0dc62f7bab48e209e6cc8de3d1c368c2dee4ec04962c1f5c117edead33bbe553c13f45522f1db13e36ad0358f1c583c0caed979b64c0abde1a0ad0c9d9a5389aa5070f5cba88c97ded9c97", 0x87}], 0xa, 0x40, 0x0, 0x7, 0x7fffffff, 0x8, 0x1, 0x8}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000d00)={'gre0\x00', r1, 0x40, 0x80, 0x3, 0x7, {{0x8, 0x4, 0x1, 0x27, 0x20, 0x67, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_prespec={0x44, 0xc, 0x1d, 0x3, 0x0, [{@local, 0xe51e}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000000d80)={0x644, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffd27e}}}, {0x38, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0xb9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbd}}}, {0x40, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc2c}}}]}}, {{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r1}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x546b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8c5a}}}, {0x57, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x644}}, 0xc005) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 918.033592ms ago: executing program 3 (id=3012): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4044081) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) (async) r5 = socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x32, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) recvfrom$unix(r2, &(0x7f0000000240)=""/23, 0x17, 0x120, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 900.396171ms ago: executing program 0 (id=3013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r6, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}}, 0x14}, 0x1, 0xffffffff00000003}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) 786.796579ms ago: executing program 2 (id=3014): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x39c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x36c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x5, 0x17, 0xd, 0xa, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x905769fd14dac897}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfff}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x68, {0x2, 0x4e24, @empty}, 'bond0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70b92c, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44051}, 0x20000014) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 741.451373ms ago: executing program 4 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0xb, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040), 0x100000000000026a, 0x0) 739.988994ms ago: executing program 3 (id=3016): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[], 0x0, 0x2}, 0xe8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x0, 0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r3, 0x4, r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e0000000200", @ANYBLOB="ebf700"/20, @ANYRESOCT=r7, @ANYRES64], 0x50) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) socket(0x2, 0x80805, 0x0) 621.682885ms ago: executing program 4 (id=3017): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0xd}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x38}}], 0x1, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/381, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x240000d7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503eefbeb435c213249fc09103c5200"/33, 0x21, 0x4, &(0x7f0000000600)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7}]}, 0x1c}}, 0x48850) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a01000000000000000000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000000000067e0f2cb645ac86e0000f35764c0f11c4a990ae83b3bcc00", @ANYRES32=r5, @ANYBLOB="0000000000000000850000002600000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018230000", @ANYRES32, @ANYBLOB="0000000001800000183400000500000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r6 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000040)=""/123, 0x7b, 0x0, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r9, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r11, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005", @ANYRES16=r11, @ANYRES64=r1, @ANYRES16=r5, @ANYRES16, @ANYRES64=r11], 0x54}}, 0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 543.401498ms ago: executing program 3 (id=3018): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0xfffffe84, &(0x7f0000001580)=[{&(0x7f0000001b00)={0x0, 0x3d, 0x10, 0x1, 0x25dfdbfe, "", [@nested={0x0, 0xf7, 0x0, 0x1, [@generic="f86dcc76392e5bccfbc9c3830ea2a41c085a2d346b274a8032d05ce9f218c1bc58f8a7acd7157c31b13d4ca7933a5a4fe4b978f8aa9984f3ab468c2780c812994835f4be2e45e3db355891325959d8309e33bed68bec9ad4c3a25e213fb7fb10500dd902ff354c0978e246ff801812ddd3d6892b4a14ed802bdd8526cf131cfd55de61e7e4d3a759af1336730bf95525824b7588f3bc21de0ec17c48fe7c367c8276e5db5948ac42e344b1749ab7222c680e3d5aa9a6d3f3a9361b1f98acf243ec19e81770cf5f", @typed={0x0, 0x39, 0x0, 0x0, @str='[.-/\x00'}, @typed={0x14, 0x95, 0x0, 0x0, @binary="965c5835a268893f996a6360cbd0b89f81bd458a5089d29dfacf054888c50501c5dda0a12ec7d34752469370a8fe3d6378a5f922ecc53ebbf1de185d2acb8a2369f77c88071dafc5af9276286a02497e1b6063d1d9f8a34e766b3dd0121692bf9749878e168e541258b803e040834bca786a408c79cf01df9f622821aecdc56101933c17b281730e7bd7057a24752b919a74bde7c0e122aa0b6d402824afb4b58772817bafad"}]}, @nested={0x0, 0xb3, 0x0, 0x1, [@generic="3958756bc788357d41d333d04a3d84f5685ee3e1166466e9d263ec27ae741aa97d63e36daff194", @nested={0x0, 0x146}, @typed={0x0, 0x2f}, @generic="1075ff9ed3bf5588d78836bf0babd31e112dee9a2aeba586a222c3c1068dee7a9eebdda96787476ad306b7dec6cb03ad6272c3e84f7725fe330c2a28a72d184b636cb0d7a133019fa20a997ff5fab4e7f955a16dfe29566ce2b29dcb04a862624eab4bbb59e077b620f1fb070460ef82df", @nested={0x0, 0x2c}, @typed={0x0, 0x10e, 0x0, 0x0, @str='!\xf8\x7f{#-{/\x9b)\x00'}, @generic="15fb2c34e21f9dfa5f602ac962bf146967e4c9b4413c7e674db1146ef957a593f6f04b880e361da9fb6929264f59180ce5d2e7eddf3d2ee34855ea6d5066c807446426e20522bf10a41cf8377652b3c03596", @generic="9b5e36afa0d0221b303f97eade9d606df5dcbb960754efcb42e3749b177ef965d4584772826be6", @generic="698e8d83091a3a382af77186857618189124a2de22fcf0527a498b67a34877f0b3ef21f799ffd2d5b235246c8564da4c150aa8e1e67519b9ef6460103b59ab8b14d3f2dd4ad83150e5e3aac3d41977b19d1a1ea682672df0b5880247b98c9749391f41976e18169718c2676ce7c8300f09ea9b771cb313baf44542b6e207fe83", @generic="76c5a9a4c536"]}]}}, {&(0x7f0000000440)={0x0, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb}}, {&(0x7f0000000480)={0x0, 0x11, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="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", @generic="8057f342f642f9012bfb30c678e1d21869bd3c6cb74f01405a865214868576421dc89f7656c3fbd95a44947e06b2da09333a", @nested={0x0, 0xfe, 0x0, 0x1, [@generic="ab70d4ad4475890e6465b61b6541746a97bcceae0b43f961279db3b755b4c21c82c9dbc656dea38e361188279590ea9c80a1b5d82d8529ba9147bf3361ba995f6044f84c9e57f5889396bef464bc13fdbecced7a6fa17bb5e7675b2267bdc5704a6083dabbc2524df5", @nested={0x0, 0xcc}, @typed={0x0, 0x41, 0x0, 0x0, @ipv4=@multicast1}, @generic="66ac0f1b4b02c8", @typed={0x0, 0x64, 0x0, 0x0, @u64=0x2}]}]}}], 0x1}, 0x6c001004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000080000200000000000000029000000370000000c0000000000000004010f0401080000280000000000000029000000050000000002020100"], 0x60}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) 352.523539ms ago: executing program 3 (id=3019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4088400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040885) 227.699395ms ago: executing program 2 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24008020) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000040)=0xfff7) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000000c0)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r10, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 1.232582ms ago: executing program 3 (id=3021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 0s ago: executing program 4 (id=3022): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x2e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000140)={0x7, 'macvtap0\x00', {0xf}}) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) close(0x3) kernel console output (not intermixed with test programs): nterface the new active one [ 148.203575][ T8999] bridge1: entered promiscuous mode [ 148.210589][ T8999] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 148.259599][ T9005] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.352925][ T9005] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 148.867821][ T9020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.021371][ T9033] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 149.058633][ T9030] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.095374][ T9037] netlink: 'syz.3.818': attribute type 17 has an invalid length. [ 149.135600][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.213722][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.279683][ T9041] bond2: entered promiscuous mode [ 149.324353][ T9041] bond2: entered allmulticast mode [ 149.358332][ T9041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.374862][ T9043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.388057][ T9047] can: request_module (can-proto-0) failed. [ 150.178079][ T9104] netlink: 'syz.1.838': attribute type 2 has an invalid length. [ 150.188424][ T9104] netlink: 'syz.1.838': attribute type 8 has an invalid length. [ 150.566537][ T9122] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 150.590184][ T9122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.748075][ T9128] tipc: Enabling of bearer rejected, failed to enable media [ 150.826151][ T9135] __nla_validate_parse: 7 callbacks suppressed [ 150.826173][ T9135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'. [ 150.847198][ T9135] openvswitch: netlink: Flow key attr not present in new flow. [ 150.885960][ T9136] syzkaller1: entered promiscuous mode [ 150.899572][ T9136] syzkaller1: entered allmulticast mode [ 150.955780][ T9140] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 151.113224][ T9146] tipc: Resetting bearer [ 151.245000][ T9144] syzkaller0: entered promiscuous mode [ 151.250541][ T9144] syzkaller0: entered allmulticast mode [ 151.262421][ T9155] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.390863][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.022366][ T9180] netlink: 'syz.0.859': attribute type 3 has an invalid length. [ 152.040275][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 152.955186][ T9191] netlink: 'syz.1.862': attribute type 4 has an invalid length. [ 152.997277][ T7739] IPVS: starting estimator thread 0... [ 153.016151][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.864'. [ 153.043409][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 153.093529][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.123058][ T9197] IPVS: using max 34 ests per chain, 81600 per kthread [ 153.192745][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 153.205671][ T9203] C: renamed from lo [ 153.205843][ T9205] netlink: 'syz.3.867': attribute type 5 has an invalid length. [ 153.221886][ T9203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 153.270570][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 153.297913][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 153.376843][ T9210] team0: entered allmulticast mode [ 153.384352][ T9210] team_slave_0: entered allmulticast mode [ 153.390352][ T9210] team_slave_1: entered allmulticast mode [ 153.421054][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 153.432975][ T9210] netlink: 'syz.4.870': attribute type 21 has an invalid length. [ 153.462020][ T9227] lo: left promiscuous mode [ 153.472005][ T9227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.489509][ T9210] team0: left allmulticast mode [ 153.503111][ T9210] team_slave_0: left allmulticast mode [ 153.510023][ T9210] team_slave_1: left allmulticast mode [ 153.600467][ T9229] netlink: 'syz.2.875': attribute type 8 has an invalid length. [ 153.647351][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 154.035930][ T9263] validate_nla: 1 callbacks suppressed [ 154.035952][ T9263] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 154.134367][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 154.660341][ T9289] bridge4: entered promiscuous mode [ 154.666047][ T9289] bridge4: entered allmulticast mode [ 154.673553][ T9286] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 154.704792][ T9286] openvswitch: netlink: IP tunnel dst address not specified [ 154.942583][ T9297] netlink: 'syz.1.894': attribute type 4 has an invalid length. [ 155.295885][ T9322] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 155.311881][ T9322] netlink: 'syz.0.902': attribute type 2 has an invalid length. [ 155.320961][ T9322] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 155.354501][ T9322] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 155.645432][ T9343] netlink: 'syz.0.909': attribute type 4 has an invalid length. [ 155.657097][ T9342] netlink: 'syz.1.910': attribute type 9 has an invalid length. [ 155.916399][ T9356] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 155.925430][ T9356] __nla_validate_parse: 3 callbacks suppressed [ 155.926728][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 156.163000][ T9369] x_tables: duplicate entry at hook 3 [ 156.292340][ T9369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.350163][ T9375] bond5: (slave veth0_to_bond): making interface the new active one [ 156.366128][ T9375] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.401244][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'. [ 156.461580][ T9369] bond6 (unregistering): Released all slaves [ 156.588142][ T9394] netlink: 184 bytes leftover after parsing attributes in process `syz.3.929'. [ 156.643406][ T9394] netlink: 184 bytes leftover after parsing attributes in process `syz.3.929'. [ 157.447226][ T9435] ip6tnl1: entered allmulticast mode [ 157.600876][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 157.616339][ T9444] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.632924][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.944'. [ 157.664024][ T9442] bridge0: entered promiscuous mode [ 157.686669][ T9442] bridge0: left promiscuous mode [ 158.570588][ T9493] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 158.739297][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 159.121414][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 159.141821][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 159.207354][ T7454] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.207485][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 159.222192][ T7454] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.300108][ T7454] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.312678][ T7454] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.710592][ T9593] xt_hashlimit: size too large, truncated to 1048576 [ 159.984640][ T9624] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 160.157710][ T9661] validate_nla: 10 callbacks suppressed [ 160.157733][ T9661] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 160.319899][ T9672] syzkaller1: entered promiscuous mode [ 160.951521][ T9729] C: renamed from lo [ 160.980124][ T9729] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.031893][ T9738] netlink: 'syz.0.983': attribute type 5 has an invalid length. [ 161.092708][ T9729] bridge0: port 3(gretap0) entered blocking state [ 161.111462][ T9729] bridge0: port 3(gretap0) entered disabled state [ 161.118904][ T9729] gretap0: entered allmulticast mode [ 161.126765][ T9729] gretap0: entered promiscuous mode [ 161.132752][ T9729] bridge0: port 3(gretap0) entered blocking state [ 161.139433][ T9729] bridge0: port 3(gretap0) entered forwarding state [ 161.430647][ T9763] xt_hashlimit: size too large, truncated to 1048576 [ 162.160033][ T9783] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 162.212022][ T9795] __nla_validate_parse: 5 callbacks suppressed [ 162.212043][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 162.285424][ T9783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.437620][ T9795] bond3: (slave geneve2): making interface the new active one [ 162.473691][ T9795] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 162.475555][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 162.533498][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 162.597279][ T9810] gretap0: entered promiscuous mode [ 162.620276][ T9810] gretap0: left promiscuous mode [ 162.650263][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 162.713360][ T9813] netlink: 'syz.4.999': attribute type 33 has an invalid length. [ 162.849993][ T9824] xt_hashlimit: size too large, truncated to 1048576 [ 162.894131][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'. [ 162.979553][ T9838] syzkaller0: entered promiscuous mode [ 163.008232][ T9838] syzkaller0: entered allmulticast mode [ 163.236935][ T9846] netlink: 'syz.0.1009': attribute type 9 has an invalid length. [ 163.490573][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 163.520497][ T9854] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 163.534600][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 163.555094][ T9854] F: renamed from gretap0 (while UP) [ 163.580091][ T9854] bridge0: port 3(F) entered disabled state [ 163.591897][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 164.684149][ T9905] netlink: 'syz.3.1027': attribute type 2 has an invalid length. [ 164.728631][ T9910] netlink: 'syz.3.1027': attribute type 2 has an invalid length. [ 164.975826][ T9919] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1028'. [ 164.997247][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 165.098691][ T9929] xt_cgroup: path and classid specified [ 165.174668][ T9928] syzkaller1: entered promiscuous mode [ 165.183940][ T9928] syzkaller1: entered allmulticast mode [ 165.272272][ T9937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.327376][ T9940] syzkaller1: entered promiscuous mode [ 165.342858][ T9940] syzkaller1: entered allmulticast mode [ 165.605216][ T9956] tipc: Enabled bearer , priority 10 [ 165.856714][ T9976] netlink: 'syz.0.1042': attribute type 4 has an invalid length. [ 165.903265][ T9970] veth0: entered promiscuous mode [ 166.203236][ T9978] veth0: left promiscuous mode [ 166.234460][ T9998] xt_hashlimit: size too large, truncated to 1048576 [ 166.417749][T10007] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 166.430918][T10008] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 166.544023][T10017] netlink: 'syz.3.1056': attribute type 4 has an invalid length. [ 166.556282][T10017] .`: renamed from bond0 [ 166.885265][T10020] ip6erspan0: entered allmulticast mode [ 166.960823][T10034] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 167.283232][T10047] xt_hashlimit: size too large, truncated to 1048576 [ 167.335375][T10043] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 167.356540][T10051] FAULT_INJECTION: forcing a failure. [ 167.356540][T10051] name failslab, interval 1, probability 0, space 0, times 1 [ 167.369799][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.2.1063 Not tainted syzkaller #0 PREEMPT(full) [ 167.369827][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.369839][T10051] Call Trace: [ 167.369848][T10051] [ 167.369856][T10051] dump_stack_lvl+0xe8/0x150 [ 167.369889][T10051] should_fail_ex+0x412/0x560 [ 167.369939][T10051] should_failslab+0xa8/0x100 [ 167.369966][T10051] ? __nf_conntrack_alloc+0x81/0x3e0 [ 167.369994][T10051] kmem_cache_alloc_noprof+0x87/0x650 [ 167.370015][T10051] ? nf_ct_pernet+0x45/0x270 [ 167.370048][T10051] __nf_conntrack_alloc+0x81/0x3e0 [ 167.370084][T10051] init_conntrack+0x16f/0xf70 [ 167.370112][T10051] ? __pfx_init_conntrack+0x10/0x10 [ 167.370134][T10051] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 167.370162][T10051] ? __siphash_unaligned+0x22e/0x3b0 [ 167.370197][T10051] nf_conntrack_in+0xbd8/0x15e0 [ 167.370226][T10051] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.370288][T10051] ? __pfx_nf_conntrack_in+0x10/0x10 [ 167.370319][T10051] ? ip6t_do_table+0x1df/0x1560 [ 167.370347][T10051] ? __pfx_ip6t_do_table+0x10/0x10 [ 167.370388][T10051] ? stack_trace_save+0xa9/0x100 [ 167.370415][T10051] ? ipv6_defrag+0x2d6/0x3b0 [ 167.370442][T10051] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 167.370471][T10051] nf_hook_slow+0xc5/0x220 [ 167.370502][T10051] NF_HOOK+0x21f/0x3c0 [ 167.370526][T10051] ? skb_orphan+0x4f/0xd0 [ 167.370553][T10051] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 167.370575][T10051] ? NF_HOOK+0x9e/0x3c0 [ 167.370598][T10051] ? __pfx_NF_HOOK+0x10/0x10 [ 167.370626][T10051] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 167.370658][T10051] ? netif_receive_skb+0x102/0xc50 [ 167.370680][T10051] netif_receive_skb+0x278/0xc50 [ 167.370704][T10051] ? __pfx_netif_receive_skb+0x10/0x10 [ 167.370720][T10051] ? __lock_acquire+0x6b5/0x2cf0 [ 167.370748][T10051] ? tun_rx_batched+0x185/0x790 [ 167.370772][T10051] tun_rx_batched+0x1de/0x790 [ 167.370792][T10051] ? __build_skb+0x62/0x440 [ 167.370820][T10051] ? __pfx_tun_rx_batched+0x10/0x10 [ 167.370854][T10051] ? tun_get_user+0x2354/0x3dd0 [ 167.370877][T10051] ? __local_bh_enable_ip+0xd0/0x130 [ 167.370905][T10051] ? tun_get_user+0x2669/0x3dd0 [ 167.370926][T10051] tun_get_user+0x2a78/0x3dd0 [ 167.370968][T10051] ? aa_file_perm+0x50e/0x15e0 [ 167.370986][T10051] ? __pfx_tun_get_user+0x10/0x10 [ 167.371005][T10051] ? aa_file_perm+0x192/0x15e0 [ 167.371043][T10051] ? ref_tracker_alloc+0x35c/0x4c0 [ 167.371065][T10051] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.371088][T10051] ? tun_get+0x1c/0x2f0 [ 167.371114][T10051] ? tun_get+0x1c/0x2f0 [ 167.371133][T10051] ? tun_get+0x1c/0x2f0 [ 167.371159][T10051] tun_chr_write_iter+0x113/0x200 [ 167.371183][T10051] vfs_write+0x61d/0xb90 [ 167.371215][T10051] ? __pfx_vfs_write+0x10/0x10 [ 167.371251][T10051] ? __fget_files+0x2a/0x420 [ 167.371288][T10051] ksys_write+0x150/0x270 [ 167.371314][T10051] ? __pfx_ksys_write+0x10/0x10 [ 167.371349][T10051] do_syscall_64+0x14d/0xf80 [ 167.371376][T10051] ? trace_irq_disable+0x3b/0x150 [ 167.371392][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.371413][T10051] ? clear_bhb_loop+0x40/0x90 [ 167.371438][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.371458][T10051] RIP: 0033:0x7f456615d04e [ 167.371485][T10051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.371502][T10051] RSP: 002b:00007f4566f96fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.371524][T10051] RAX: ffffffffffffffda RBX: 00007f4566f976c0 RCX: 00007f456615d04e [ 167.371537][T10051] RDX: 000000000000003e RSI: 0000200000000000 RDI: 00000000000000c8 [ 167.371548][T10051] RBP: 00007f4566f97090 R08: 0000000000000000 R09: 0000000000000000 [ 167.371559][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.371571][T10051] R13: 00007f4566416128 R14: 00007f4566416090 R15: 00007ffd8a8670f8 [ 167.371602][T10051] [ 167.850045][T10054] netlink: 'syz.1.1064': attribute type 6 has an invalid length. [ 168.300339][T10079] netlink: 'syz.0.1072': attribute type 4 has an invalid length. [ 168.438038][T10083] __nla_validate_parse: 10 callbacks suppressed [ 168.438063][T10083] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1075'. [ 168.500572][T10089] xt_hashlimit: size too large, truncated to 1048576 [ 168.546326][T10091] FAULT_INJECTION: forcing a failure. [ 168.546326][T10091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 168.692652][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 168.692681][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.692692][T10091] Call Trace: [ 168.692700][T10091] [ 168.692708][T10091] dump_stack_lvl+0xe8/0x150 [ 168.692742][T10091] should_fail_ex+0x412/0x560 [ 168.692783][T10091] _copy_from_user+0x2d/0xb0 [ 168.692808][T10091] kstrtouint_from_user+0xd6/0x180 [ 168.692830][T10091] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 168.692867][T10091] proc_fail_nth_write+0x8e/0x210 [ 168.692895][T10091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.692928][T10091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.692957][T10091] vfs_write+0x29a/0xb90 [ 168.692989][T10091] ? __pfx_vfs_write+0x10/0x10 [ 168.693011][T10091] ? __fget_files+0x2a/0x420 [ 168.693034][T10091] ? __fget_files+0x3a0/0x420 [ 168.693050][T10091] ? __fget_files+0x2a/0x420 [ 168.693077][T10091] ksys_write+0x150/0x270 [ 168.693101][T10091] ? __pfx_ksys_write+0x10/0x10 [ 168.693136][T10091] do_syscall_64+0x14d/0xf80 [ 168.693163][T10091] ? trace_irq_disable+0x3b/0x150 [ 168.693179][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.693198][T10091] ? clear_bhb_loop+0x40/0x90 [ 168.693221][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.693252][T10091] RIP: 0033:0x7faec3d5d04e [ 168.693271][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.693286][T10091] RSP: 002b:00007faec4c7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.693308][T10091] RAX: ffffffffffffffda RBX: 00007faec4c7f6c0 RCX: 00007faec3d5d04e [ 168.693321][T10091] RDX: 0000000000000001 RSI: 00007faec4c7f0a0 RDI: 0000000000000004 [ 168.693333][T10091] RBP: 00007faec4c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.693344][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.693354][T10091] R13: 00007faec4016128 R14: 00007faec4016090 R15: 00007ffdff79ebe8 [ 168.693387][T10091] [ 169.146896][T10098] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1079'. [ 169.188463][T10098] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1079'. [ 169.604981][T10129] tap0: tun_chr_ioctl cmd 1074025672 [ 169.624292][T10129] tap0: ignored: set checksum disabled [ 169.631537][T10129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1089'. [ 169.781676][ T7758] IPVS: starting estimator thread 0... [ 169.871002][T10139] syzkaller0: entered promiscuous mode [ 169.880330][T10139] syzkaller0: entered allmulticast mode [ 169.893320][T10143] IPVS: using max 23 ests per chain, 55200 per kthread [ 170.014327][T10150] netlink: 'syz.0.1093': attribute type 12 has an invalid length. [ 170.031998][T10150] netlink: 'syz.0.1093': attribute type 29 has an invalid length. [ 170.040282][T10150] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1093'. [ 170.072961][T10150] netlink: 'syz.0.1093': attribute type 2 has an invalid length. [ 170.096211][T10150] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1093'. [ 170.172197][T10167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.619713][T10193] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 170.643299][T10193] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1106'. [ 170.684005][T10199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'. [ 170.771948][T10202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.779009][T10202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.018675][T10213] validate_nla: 1 callbacks suppressed [ 171.018696][T10213] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 171.074625][T10214] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1113'. [ 172.131211][T10213] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 172.287159][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1115'. [ 172.345389][T10224] gretap0: entered promiscuous mode [ 172.361257][T10224] gretap0: entered allmulticast mode [ 172.615979][T10244] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 172.989744][T10222] sctp: [Deprecated]: syz.2.1116 (pid 10222) Use of int in maxseg socket option. [ 172.989744][T10222] Use struct sctp_assoc_value instead [ 173.861597][T10305] sctp: [Deprecated]: syz.4.1139 (pid 10305) Use of int in max_burst socket option deprecated. [ 173.861597][T10305] Use struct sctp_assoc_value instead [ 174.021851][T10310] bond0: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.038999][T10310] bond0: (slave C): Enslaving as an active interface with an up link [ 174.048870][T10310] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 174.088867][T10309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 174.310046][T10328] batadv2: entered allmulticast mode [ 174.337295][T10331] __nla_validate_parse: 6 callbacks suppressed [ 174.337318][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 174.844670][T10339] bond6: entered allmulticast mode [ 175.179814][T10355] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 175.225130][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 175.269627][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 175.490315][T10370] syzkaller0: entered promiscuous mode [ 175.495928][T10370] syzkaller0: entered allmulticast mode [ 175.516576][T10365] syzkaller1: entered promiscuous mode [ 175.522352][T10365] syzkaller1: entered allmulticast mode [ 175.532966][T10373] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 175.606136][T10379] openvswitch: netlink: Missing valid actions attribute. [ 175.622985][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 175.638169][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.675121][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 175.871208][T10387] lo: Caught tx_queue_len zero misconfig [ 175.928327][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 175.930225][T10395] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 175.949532][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 175.959087][T10395] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 175.974890][T10395] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 176.183717][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 176.209174][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 176.211867][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 176.382420][T10421] xt_hashlimit: size too large, truncated to 1048576 [ 176.406671][T10416] can: request_module (can-proto-0) failed. [ 176.836670][T10443] bridge0: left allmulticast mode [ 177.359916][T10468] tipc: Can't bind to reserved service type 2 [ 177.405120][T10468] hsr_slave_0: left promiscuous mode [ 177.432723][T10468] hsr_slave_1: left promiscuous mode [ 177.529258][T10476] syzkaller0: entered promiscuous mode [ 177.553065][T10476] syzkaller0: entered allmulticast mode [ 177.615319][T10477] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 177.781378][T10483] netlink: 'syz.4.1189': attribute type 4 has an invalid length. [ 177.804434][T10494] Bluetooth: MGMT ver 1.23 [ 177.817458][T10483] netlink: 'syz.4.1189': attribute type 4 has an invalid length. [ 178.167904][T10514] netlink: 'syz.1.1197': attribute type 2 has an invalid length. [ 178.306280][T10519] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 178.355849][T10519] netlink: 'syz.1.1200': attribute type 72 has an invalid length. [ 178.772268][T10555] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 178.836140][T10555] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 178.964695][T10563] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 179.067788][T10563] netlink: 'syz.0.1214': attribute type 72 has an invalid length. [ 179.110884][T10569] netlink: 'syz.1.1216': attribute type 4 has an invalid length. [ 179.606073][T10598] x_tables: unsorted underflow at hook 1 [ 179.619686][T10596] nbd: socks must be embedded in a SOCK_ITEM attr [ 179.875921][T10613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.891564][T10615] tipc: Enabling of bearer rejected, media not registered [ 180.191608][T10638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.305591][T10638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.437046][T10638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.458541][T10653] __nla_validate_parse: 9 callbacks suppressed [ 180.458561][T10653] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1244'. [ 180.477565][T10653] netlink: Unknown conntrack attr (0) [ 180.500923][T10658] bridge1: entered promiscuous mode [ 180.511474][T10658] bridge1: entered allmulticast mode [ 180.630569][T10638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.705650][T10673] veth0: entered promiscuous mode [ 180.746725][T10671] veth0: left promiscuous mode [ 180.955951][ T7447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.000513][ T7818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.071976][ T7454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.131913][ T7454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.299123][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 181.596053][T10717] bond0: entered promiscuous mode [ 181.609115][T10717] bond_slave_0: entered promiscuous mode [ 181.622592][T10717] bond_slave_1: entered promiscuous mode [ 181.648841][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 181.656165][T10717] batadv0: entered promiscuous mode [ 181.677596][T10717] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.690344][T10717] bond0: left promiscuous mode [ 181.723297][T10717] bond_slave_0: left promiscuous mode [ 181.731036][T10717] bond_slave_1: left promiscuous mode [ 181.765442][T10717] batadv0: left promiscuous mode [ 181.790589][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1266'. [ 181.831450][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 181.847569][T10733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.011812][T10716] infiniband sy‡1: set active [ 182.017097][T10716] infiniband sy‡1: added bond0 [ 182.115993][T10716] RDS/IB: sy‡1: added [ 182.121059][T10716] smc: adding ib device sy‡1 with port count 1 [ 182.143233][T10716] smc: ib device sy‡1 port 1 has no pnetid [ 182.255227][T10749] xt_hashlimit: size too large, truncated to 1048576 [ 182.501185][T10760] bond4: option fail_over_mac: invalid value (16) [ 182.560853][T10760] bond4 (unregistering): Released all slaves [ 182.680770][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 182.909668][T10775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.919513][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.941412][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.968072][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.990116][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.013430][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.043749][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.064628][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.076910][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.457497][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463917][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.793293][T10796] bond0: entered promiscuous mode [ 203.798395][T10796] bond_slave_0: entered promiscuous mode [ 203.812420][T10796] bond_slave_1: entered promiscuous mode [ 203.935718][T10798] xt_l2tp: missing protocol rule (udp|l2tpip) [ 204.003491][T10802] xt_hashlimit: size too large, truncated to 1048576 [ 204.547981][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1299'. [ 204.677792][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 204.956312][T10858] validate_nla: 5 callbacks suppressed [ 204.956333][T10858] netlink: 'syz.4.1307': attribute type 4 has an invalid length. [ 205.055275][T10862] netlink: 'syz.3.1308': attribute type 4 has an invalid length. [ 205.246281][T10868] syzkaller0: entered promiscuous mode [ 205.252240][T10868] syzkaller0: entered allmulticast mode [ 205.997089][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 223.928763][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 223.939886][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 223.963631][T10900] netlink: 'syz.3.1323': attribute type 4 has an invalid length. [ 223.972522][T10901] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1321'. [ 223.982529][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 223.986733][T10903] RDS: rds_bind could not find a transport for 400:2000:1900:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 224.048108][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 224.048213][ T7818] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.074415][ T7818] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.084617][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 224.111115][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 224.120235][ T7818] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.136408][ T7818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.169624][T10906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1325'. [ 224.425001][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1332'. [ 224.439790][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 224.442502][T10925] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 224.454870][T10918] nbd: must specify a size in bytes for the device [ 224.626048][T10933] syzkaller0: entered promiscuous mode [ 224.634295][T10918] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20003 [ 225.165994][T10946] C: left allmulticast mode [ 225.176448][T10946] tunl0: left allmulticast mode [ 225.192652][T10946] gre0: left allmulticast mode [ 225.199057][T10946] gretap0: left allmulticast mode [ 225.214494][T10946] erspan0: left allmulticast mode [ 225.244054][T10946] ip_vti0: left allmulticast mode [ 225.280526][T10946] ip6_vti0: left allmulticast mode [ 226.513004][T11000] syzkaller0: entered promiscuous mode [ 226.518693][T11000] syzkaller0: entered allmulticast mode [ 226.938001][T11026] dvmrp0: entered allmulticast mode [ 227.044543][T11028] x_tables: duplicate entry at hook 1 [ 227.186594][T11036] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 227.213040][T11036] netlink: 'syz.4.1363': attribute type 2 has an invalid length. [ 228.147025][T11067] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 228.255081][T11069] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 228.403700][T11069] bond4: entered promiscuous mode [ 228.408823][T11069] bond4: entered allmulticast mode [ 228.424709][T11079] xt_cgroup: xt_cgroup: no path or classid specified [ 228.459441][T11084] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 228.489387][T11069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.518705][T11072] macvlan2: entered promiscuous mode [ 228.547446][T11072] macvlan2: entered allmulticast mode [ 228.556043][T11072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.623522][T11099] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 228.678506][T11099] bond0: (slave gretap2): making interface the new active one [ 228.687108][T11099] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 228.701023][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.095267][T11118] __nla_validate_parse: 8 callbacks suppressed [ 229.095289][T11118] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1388'. [ 229.175263][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 229.584838][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 229.621588][T11140] hsr0: entered promiscuous mode [ 229.627888][T11140] macvlan0: entered allmulticast mode [ 229.633883][T11140] hsr0: entered allmulticast mode [ 229.640389][T11140] hsr_slave_0: entered allmulticast mode [ 229.683741][T11140] hsr_slave_1: entered allmulticast mode [ 229.722668][T11157] delete_channel: no stack [ 229.730735][T11143] IPv6: Can't replace route, no match found [ 229.773345][T11143] IPv6: Can't replace route, no match found [ 229.780957][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1394'. [ 229.845549][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 229.976919][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 230.016552][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 230.113034][T11177] netlink: 'syz.4.1405': attribute type 4 has an invalid length. [ 230.141346][T11177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 230.238434][T11181] net_ratelimit: 25 callbacks suppressed [ 230.238457][T11181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.480455][T11195] syzkaller1: entered promiscuous mode [ 230.488064][T11195] syzkaller1: entered allmulticast mode [ 230.497820][T11195] syzkaller1: left promiscuous mode [ 230.503619][T11195] syzkaller1: left allmulticast mode [ 230.521181][T11198] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 230.523457][T11195] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1408'. [ 230.549238][T11198] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1411'. [ 230.571309][T11198] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 230.687731][T11205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.885549][T11218] sctp: [Deprecated]: syz.3.1417 (pid 11218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.885549][T11218] Use struct sctp_sack_info instead [ 230.929240][T11223] netlink: 'syz.2.1419': attribute type 4 has an invalid length. [ 231.355127][T11241] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 231.530897][T11241] bond4 (unregistering): Released all slaves [ 231.915814][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.199756][T11299] sctp: [Deprecated]: syz.0.1435 (pid 11299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.199756][T11299] Use struct sctp_sack_info instead [ 232.321488][T11304] xt_socket: unknown flags 0x50 [ 232.925631][T11330] gtp0: entered promiscuous mode [ 232.936382][T11330] gtp0: entered allmulticast mode [ 233.042397][T11337] IPVS: set_ctl: invalid protocol: 0 100.1.1.4:20000 [ 233.349403][T11353] netlink: 'syz.1.1450': attribute type 83 has an invalid length. [ 233.712974][T11372] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 233.721190][T11372] dummy0: entered promiscuous mode [ 233.774672][T11372] bridge0: port 3(dummy0) entered blocking state [ 233.784469][T11372] bridge0: port 3(dummy0) entered disabled state [ 233.791078][T11372] dummy0: entered allmulticast mode [ 233.814846][T11372] bridge0: port 3(dummy0) entered blocking state [ 233.821414][T11372] bridge0: port 3(dummy0) entered forwarding state [ 234.120062][T11391] : entered promiscuous mode [ 234.235039][T11395] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 234.285156][T11395] 9: entered promiscuous mode [ 234.417625][T11402] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 234.429425][T11409] netlink: 'syz.1.1465': attribute type 12 has an invalid length. [ 234.551929][T11412] pimreg: entered allmulticast mode [ 235.037374][T11443] veth0: entered promiscuous mode [ 235.106354][T11441] veth0: left promiscuous mode [ 235.271924][T11456] validate_nla: 1 callbacks suppressed [ 235.271946][T11456] netlink: 'syz.1.1478': attribute type 21 has an invalid length. [ 235.287538][T11460] __nla_validate_parse: 19 callbacks suppressed [ 235.287560][T11460] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1481'. [ 235.434154][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 235.462512][T11456] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 235.522426][T11456] bond7 (unregistering): Released all slaves [ 235.551815][T11480] delete_channel: no stack [ 235.671118][T11483] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 235.692935][T11483] netlink: 'syz.4.1485': attribute type 3 has an invalid length. [ 235.701027][T11483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1485'. [ 235.967766][T11503] xt_socket: unknown flags 0xe4 [ 236.154250][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'. [ 236.183871][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 236.488599][T11542] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1499'. [ 236.834713][ T7454] bond0: (slave gretap2): link status definitely down, disabling slave [ 236.865227][ T7454] bond0: now running without any active interface! [ 236.938332][T11562] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1503'. [ 237.020917][T11562] netlink: 'syz.2.1503': attribute type 4 has an invalid length. [ 237.049189][T11562] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1503'. [ 237.161261][T11571] syzkaller0: entered promiscuous mode [ 237.186167][T11571] syzkaller0: entered allmulticast mode [ 237.962249][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 237.988592][T11594] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 238.140824][T11604] netlink: 'syz.2.1515': attribute type 1 has an invalid length. [ 238.212934][T11604] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1515'. [ 238.392058][T11613] netlink: 'syz.3.1519': attribute type 3 has an invalid length. [ 238.580046][T11620] xt_recent: Unsupported userspace flags (000000b1) [ 238.987998][T11634] netlink: 'syz.3.1526': attribute type 8 has an invalid length. [ 239.226805][T11647] tipc: Enabling of bearer rejected, failed to enable media [ 240.458939][T11702] __nla_validate_parse: 7 callbacks suppressed [ 240.458962][T11702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1541'. [ 241.437025][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 241.463896][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 241.614705][T11746] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 241.903222][T11757] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.953272][T11758] openvswitch: netlink: IP tunnel dst address not specified [ 241.960857][T11757] bond0: (slave lo): Error: Device can not be enslaved while up [ 242.574593][T11797] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 242.989400][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 243.050310][T11816] lo speed is unknown, defaulting to 1000 [ 243.066116][T11816] lo speed is unknown, defaulting to 1000 [ 243.084261][T11816] lo speed is unknown, defaulting to 1000 [ 243.109400][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 243.111629][T11816] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.146284][T11816] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.373008][T11816] lo speed is unknown, defaulting to 1000 [ 243.451968][T11830] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.460177][T11830] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.768579][T11816] lo speed is unknown, defaulting to 1000 [ 243.796468][ T7450] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.838711][T11816] lo speed is unknown, defaulting to 1000 [ 243.839201][ T7450] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.873910][T11819] lo speed is unknown, defaulting to 1000 [ 243.985534][ T7450] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.012988][ T7450] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.035107][T11816] lo speed is unknown, defaulting to 1000 [ 244.059346][T11816] lo speed is unknown, defaulting to 1000 [ 244.358122][T11863] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.505238][T11898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1592'. [ 245.514685][T11898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1592'. [ 245.736229][T11912] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1597'. [ 245.824731][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 245.837857][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1597'. [ 245.897525][T11920] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1599'. [ 246.105424][T11930] netlink: 'syz.4.1602': attribute type 11 has an invalid length. [ 246.126607][T11930] netlink: 'syz.4.1602': attribute type 4 has an invalid length. [ 246.162674][T11930] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.1602'. [ 246.251692][T11934] netlink: 'syz.0.1604': attribute type 7 has an invalid length. [ 246.266762][T11936] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 246.288386][T11934] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1604'. [ 246.298413][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 246.311170][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'. [ 246.513637][T11940] bond1: entered allmulticast mode [ 246.604159][T11940] bridge3: entered promiscuous mode [ 246.609434][T11940] bridge3: entered allmulticast mode [ 246.619358][T11940] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 246.644350][T11949] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 246.658013][T11945] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 246.667617][T11950] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 247.153051][T11973] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 247.807185][T12013] netlink: 'syz.3.1630': attribute type 2 has an invalid length. [ 247.832238][T12013] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 247.847391][T12022] xt_HMARK: spi-set and port-set can't be combined [ 247.907046][T12025] xt_HMARK: spi-set and port-set can't be combined [ 248.755592][T12084] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 248.820448][T12084] netlink: 'syz.2.1651': attribute type 2 has an invalid length. [ 248.874892][T12090] syzkaller0: entered promiscuous mode [ 248.880434][T12090] syzkaller0: entered allmulticast mode [ 249.347892][T12120] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 249.769749][T12149] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.802043][T12149] netlink: 'syz.4.1669': attribute type 11 has an invalid length. [ 249.813341][T12149] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 250.004277][T12162] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 250.035763][T12162] team0: Device gtp1 is up. Set it down before adding it as a team port [ 250.243024][T12165] wireguard0: entered promiscuous mode [ 250.328220][T12182] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.515997][T12196] __nla_validate_parse: 54 callbacks suppressed [ 250.516020][T12196] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1679'. [ 250.619173][T12198] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 250.627119][T12198] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 250.654136][T12198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1682'. [ 250.655153][T12201] ip6tnl0: Caught tx_queue_len zero misconfig [ 250.684036][T12198] dummy0: entered promiscuous mode [ 250.690159][T12198] bridge0: port 4(dummy0) entered blocking state [ 250.718126][T12198] bridge0: port 4(dummy0) entered disabled state [ 250.738497][T12198] dummy0: entered allmulticast mode [ 250.770432][T12198] bridge0: port 4(dummy0) entered blocking state [ 250.777096][T12198] bridge0: port 4(dummy0) entered forwarding state [ 250.858210][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'. [ 251.076528][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1689'. [ 251.232586][T12233] openvswitch: netlink: Key type 132 is out of range max 32 [ 251.243979][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1694'. [ 251.253529][T12231] openvswitch: netlink: Flow actions attr not present in new flow. [ 251.295528][T12239] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.1697'. [ 251.315402][T12239] netlink: Unknown conntrack attr (type=2304, max=9) [ 251.359816][T12241] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 251.384971][T12247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1700'. [ 251.428816][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'. [ 251.547504][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'. [ 251.572221][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 251.607625][T12254] dummy0: left allmulticast mode [ 251.616772][T12254] bridge0: port 4(dummy0) entered disabled state [ 251.638992][T12254] F: left promiscuous mode [ 251.653190][T12254] bridge0: port 3(F) entered disabled state [ 251.684735][T12254] bridge_slave_1: left allmulticast mode [ 251.690628][T12254] bridge_slave_1: left promiscuous mode [ 251.720881][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.744598][T12254] bridge_slave_0: left allmulticast mode [ 251.750503][T12254] bridge_slave_0: left promiscuous mode [ 251.758477][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.277799][T12293] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 252.568364][T12294] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.575809][T12294] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.836036][T12294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.868711][T12294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.059949][T12294] hsr0: left allmulticast mode [ 253.065703][T12294] hsr_slave_0: left allmulticast mode [ 253.071097][T12294] hsr_slave_1: left allmulticast mode [ 253.096862][T11289] lo speed is unknown, defaulting to 1000 [ 253.096901][T12301] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 253.110657][T11289] syz0: Port: 1 Link DOWN [ 253.156823][ T7457] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.165966][ T7457] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.186701][ T7457] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.195735][ T7457] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.212150][ T7457] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.221145][ T7457] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.266362][ T7457] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.295537][ T7457] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.661128][T12346] syzkaller0: entered promiscuous mode [ 253.668472][T12346] syzkaller0: entered allmulticast mode [ 253.717621][T12346] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 253.917696][T12360] xt_l2tp: v2 doesn't support IP mode [ 254.431316][T12393] netlink: 'syz.3.1741': attribute type 7 has an invalid length. [ 254.555566][T12409] pim6reg: entered allmulticast mode [ 254.572180][T12408] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 254.593220][T12409] pim6reg: left allmulticast mode [ 254.690762][T12425] netlink: 'syz.3.1752': attribute type 142 has an invalid length. [ 255.283803][T12448] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 255.370315][T12448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.395644][T12425] lo speed is unknown, defaulting to 1000 [ 255.450979][T12452] bond2: (slave veth5): Enslaving as an active interface with a down link [ 255.474940][T12458] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 255.627971][T12464] __nla_validate_parse: 24 callbacks suppressed [ 255.627995][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'. [ 255.657546][T12468] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1764'. [ 255.899539][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.743090][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 256.928379][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 258.130407][T12497] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1768'. [ 258.139736][T12497] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1768'. [ 258.300710][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 258.314823][T12515] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1775'. [ 258.545362][T12532] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1779'. [ 258.997766][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 259.011032][T12545] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 259.032469][T12545] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 259.064611][T12545] gretap1: entered promiscuous mode [ 259.086664][T12545] gretap1: entered allmulticast mode [ 259.530745][T12570] netlink: 'syz.1.1789': attribute type 33 has an invalid length. [ 259.531176][T12571] netlink: 'syz.1.1789': attribute type 33 has an invalid length. [ 259.555400][T12569] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 259.599795][T12570] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 259.626256][T12570] bond7 (unregistering): Released all slaves [ 259.694724][T12571] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 259.707467][T12571] bond7 (unregistering): Released all slaves [ 259.808659][T12582] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 259.985633][T12594] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 260.099131][T12603] sctp: [Deprecated]: syz.3.1797 (pid 12603) Use of int in max_burst socket option. [ 260.099131][T12603] Use struct sctp_assoc_value instead [ 260.116893][T12605] Unsupported ieee802154 address type: 0 [ 260.321287][T12620] netlink: 'syz.1.1804': attribute type 7 has an invalid length. [ 260.632170][T12634] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 260.685511][T12634] bond5: entered promiscuous mode [ 260.695303][T12634] bond5: entered allmulticast mode [ 260.700989][T12634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.714106][T12640] bridge0: port 3(gretap0) entered blocking state [ 260.728853][T12640] bridge0: port 3(gretap0) entered disabled state [ 260.749153][T12640] gretap0: entered allmulticast mode [ 260.769318][T12640] gretap0: entered promiscuous mode [ 260.985641][T12656] netlink: 'syz.2.1815': attribute type 61 has an invalid length. [ 260.993846][T12656] __nla_validate_parse: 4 callbacks suppressed [ 260.993864][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'. [ 261.009364][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.032965][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.138933][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.177395][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.190776][ T7450] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.199780][ T7450] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.214541][ T7450] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.236365][ T7450] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.273463][T12671] h: entered promiscuous mode [ 261.281747][T12671] netlink: 'syz.2.1819': attribute type 3 has an invalid length. [ 261.293836][T12673] x_tables: duplicate underflow at hook 3 [ 261.424058][T12678] tipc: Enabling of bearer rejected, failed to enable media [ 261.436280][T12680] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1824'. [ 261.470550][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1821'. [ 261.486361][T12684] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1825'. [ 261.496398][T12683] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 261.505473][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1821'. [ 261.537613][T12684] netlink: 'syz.4.1825': attribute type 2 has an invalid length. [ 261.553391][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 261.678986][T12696] netlink: 'syz.3.1828': attribute type 6 has an invalid length. [ 262.578692][T12737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.259263][T12737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.271444][T12737] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 263.283226][T12737] bond7: (slave vcan0): Error -95 calling set_mac_address [ 263.530076][T12763] 0·: renamed from hsr_slave_1 [ 263.658379][T12763] 0·: entered allmulticast mode [ 263.666224][T12763] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 264.049466][T12795] xt_l2tp: invalid flags combination: 0 [ 264.067956][T12795] syz.0.1859 uses old SIOCAX25GETINFO [ 264.104114][T12795] bridge4: entered promiscuous mode [ 264.118163][T12795] bridge4: entered allmulticast mode [ 264.140383][T12795] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 264.643838][T12842] tunl0: entered promiscuous mode [ 264.676606][T12842] validate_nla: 6 callbacks suppressed [ 264.676627][T12842] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 264.746065][T12852] netlink: 'syz.2.1876': attribute type 4 has an invalid length. [ 264.791764][T12854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.819363][T12856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.338313][T12883] rdma_op ffff88802b86f9f0 conn xmit_rdma 0000000000000000 [ 265.365775][T12883] --map-set only usable from mangle table [ 265.476901][T12897] ip6t_srh: unknown srh match flags 5F28 [ 266.180302][T12921] __nla_validate_parse: 22 callbacks suppressed [ 266.180326][T12921] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1896'. [ 267.536678][T12994] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1912'. [ 267.914229][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 267.950380][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 268.188790][T13025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'. [ 268.207886][T13024] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 268.219448][T13025] netlink: 'syz.4.1924': attribute type 7 has an invalid length. [ 268.262219][T13025] netlink: 'syz.4.1924': attribute type 8 has an invalid length. [ 268.289242][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 268.765668][T13057] xt_addrtype: ipv6 does not support BROADCAST matching [ 268.792354][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 269.013834][T13061] netlink: 'syz.0.1933': attribute type 39 has an invalid length. [ 269.096066][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 269.232387][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1934'. [ 269.640959][T13072] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 270.329387][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 270.359051][T13111] chnl_net:caif_netlink_parms(): no params data found [ 270.874114][T13151] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 270.876361][T13152] tipc: Started in network mode [ 270.893603][T13152] tipc: Node identity , cluster identity 4711 [ 270.914955][T13152] tipc: Failed to set node id, please configure manually [ 270.942459][T13152] tipc: Enabling of bearer rejected, failed to enable media [ 271.037655][T13156] bond4: invalid ARP target 0.0.0.0 specified for addition [ 271.045096][T13156] bond4: option arp_ip_target: invalid value (0) [ 271.054746][T13156] bond4 (unregistering): Released all slaves [ 271.302624][T13170] ip_vti0: Caught tx_queue_len zero misconfig [ 271.312984][T13175] netlink: 'syz.3.1968': attribute type 3 has an invalid length. [ 271.342684][T13170] __nla_validate_parse: 4 callbacks suppressed [ 271.342706][T13170] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1966'. [ 271.378260][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 271.604789][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 271.651556][T13192] netlink: 'syz.2.1970': attribute type 2 has an invalid length. [ 271.862580][T13195] gre1: entered promiscuous mode [ 271.899440][T13196] netlink: 'syz.1.1971': attribute type 29 has an invalid length. [ 272.078966][T13196] netlink: 'syz.1.1971': attribute type 29 has an invalid length. [ 272.106189][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 272.131477][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 272.142617][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 272.165829][T13216] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1976'. [ 272.517766][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1980'. [ 272.670930][T13205] lo speed is unknown, defaulting to 1000 [ 272.710739][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1982'. [ 272.738307][T13240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 272.748222][T13238] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 272.807799][T13238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.827420][T13240] bond3: (slave geneve2): making interface the new active one [ 272.843568][T13240] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 273.108718][T13263] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 273.202194][T13269] bridge_slave_1: default FDB implementation only supports local addresses [ 273.417253][T13280] netlink: 'syz.4.1996': attribute type 6 has an invalid length. [ 273.526979][T13280] bond4: Removing last arp target with arp_interval on [ 273.556074][T13287] tipc: Started in network mode [ 273.572705][T13287] tipc: Node identity babe3392f4ed, cluster identity 4711 [ 273.582237][T13287] tipc: Enabled bearer , priority 11 [ 273.689489][T13284] syzkaller0: entered promiscuous mode [ 273.718492][T13284] syzkaller0: entered allmulticast mode [ 273.866114][T13308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.906891][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.937954][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.068669][T13311] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 274.087978][T13311] netlink: 'syz.2.2007': attribute type 2 has an invalid length. [ 274.155692][ T7447] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.199221][ T7447] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.231759][ T7447] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.260677][ T7447] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.304582][T13323] unsupported nlmsg_type 40 [ 274.322794][T13323] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 275.735115][ T7447] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.744443][ T7447] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.762596][ T7750] tipc: Node number set to 1314075538 [ 275.813202][ T7447] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.838155][ T7447] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.986988][T13355] sctp: [Deprecated]: syz.0.2015 (pid 13355) Use of int in max_burst socket option deprecated. [ 275.986988][T13355] Use struct sctp_assoc_value instead [ 276.009288][T13354] bond6 (unregistering): Released all slaves [ 276.032259][ T7750] IPVS: starting estimator thread 0... [ 276.039761][T13360] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 276.124286][T13361] IPVS: using max 24 ests per chain, 57600 per kthread [ 276.359995][T13383] x_tables: unsorted entry at hook 3 [ 276.415799][T13387] __nla_validate_parse: 5 callbacks suppressed [ 276.415816][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 276.440094][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 276.450052][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 276.610904][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 276.846486][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.855753][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.880706][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.920606][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.928580][T13412] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 276.936045][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.951769][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'. [ 276.959862][T13414] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.999393][ T7457] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.008567][ T7457] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.022688][T13412] team0 (unregistering): Port device team_slave_0 removed [ 277.035642][T13417] xt_l2tp: v2 doesn't support IP mode [ 277.042664][T13412] team0 (unregistering): Port device team_slave_1 removed [ 277.068522][ T7457] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.104266][ T7457] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.097347][T13488] netlink: 'syz.1.2053': attribute type 20 has an invalid length. [ 278.114690][T13488] netlink: 'syz.1.2053': attribute type 20 has an invalid length. [ 278.132602][T13491] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 278.230748][T13491] macvlan2: entered promiscuous mode [ 278.240736][T13491] macvlan2: entered allmulticast mode [ 278.249869][T13491] bond5: entered promiscuous mode [ 278.276948][T13491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.464697][T13491] bond5: left promiscuous mode [ 278.680616][T13518] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 278.922432][T13536] macsec1: entered promiscuous mode [ 279.453764][T13566] xt_hashlimit: size too large, truncated to 1048576 [ 279.517746][T13566] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.278534][T13612] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 280.469593][T13623] netlink: 'syz.3.2094': attribute type 83 has an invalid length. [ 280.530271][T13620] bond6: (slave geneve3): Opening slave failed [ 280.947229][T13649] netlink: 'syz.4.2103': attribute type 25 has an invalid length. [ 280.965042][T13648] netlink: 'syz.4.2103': attribute type 25 has an invalid length. [ 280.994592][T13647] netlink: 'syz.4.2103': attribute type 11 has an invalid length. [ 281.019134][T13648] netlink: 'syz.4.2103': attribute type 11 has an invalid length. [ 281.020785][T13646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 281.433734][T13681] __nla_validate_parse: 20 callbacks suppressed [ 281.433757][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'. [ 281.907715][T13655] lo speed is unknown, defaulting to 1000 [ 281.936489][T13706] wg1: Caught tx_queue_len zero misconfig [ 281.942684][T13702] macvlan0: entered promiscuous mode [ 281.968249][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2121'. [ 281.980203][T13702] macvlan0: left allmulticast mode [ 282.009304][T13709] openvswitch: netlink: Flow key attr not present in new flow. [ 282.125302][T13712] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 282.175916][T13715] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 282.662212][T13750] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.790544][T13750] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.808702][T13761] netlink: 'syz.1.2135': attribute type 1 has an invalid length. [ 282.869929][T13764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2135'. [ 283.064321][T13761] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 283.065237][T13766] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2137'. [ 283.154094][T13750] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.230231][T13778] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2140'. [ 283.249912][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 283.295451][T13750] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.403442][ T7457] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.479725][T13785] syzkaller1: entered promiscuous mode [ 283.486675][T13785] syzkaller1: entered allmulticast mode [ 283.510493][ T7457] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.524269][T13785] tipc: Bearer : already 2 bearers with priority 10 [ 283.531844][T13785] tipc: Bearer : trying with adjusted priority [ 283.539591][T13794] netlink: 'syz.0.2146': attribute type 5 has an invalid length. [ 283.547760][T13794] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2146'. [ 283.557581][T13785] tipc: New replicast peer: 255.255.255.255 [ 283.558218][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 283.570939][T13785] tipc: Enabled bearer , priority 9 [ 283.573894][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'. [ 283.589866][T13792] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2145'. [ 283.595727][T13785] syzkaller1: left promiscuous mode [ 283.629713][T13785] syzkaller1: left allmulticast mode [ 283.672050][ T1014] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.877344][ T1014] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.188190][T13830] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 284.295294][T13842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.807502][T13882] netlink: 'syz.2.2170': attribute type 3 has an invalid length. [ 285.061474][T13891] x_tables: duplicate underflow at hook 1 [ 285.179527][T13897] netlink: 'syz.4.2175': attribute type 5 has an invalid length. [ 285.204371][T13897] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.216546][T13897] bond0: (slave lo): Error: Device can not be enslaved while up [ 285.589774][T13922] syzkaller0: entered promiscuous mode [ 285.599479][T13922] syzkaller0: entered allmulticast mode [ 285.644235][T13921] tc action pedit 'at' offset -255 out of bounds [ 285.988522][T13943] sock: sock_timestamping_bind_phc: sock not bind to device [ 286.210054][T13931] lo speed is unknown, defaulting to 1000 [ 286.342977][T13957] netlink: 'syz.0.2193': attribute type 61 has an invalid length. [ 286.588234][T13974] netlink: 'syz.2.2201': attribute type 4 has an invalid length. [ 286.692121][T13979] geneve3: entered promiscuous mode [ 286.698940][T13979] geneve3: entered allmulticast mode [ 286.736189][ T7447] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.762912][ T7447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.792919][ T7447] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.813041][ T7447] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.873373][T13983] vlan0: entered allmulticast mode [ 286.954258][T13994] __nla_validate_parse: 11 callbacks suppressed [ 286.954280][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 286.980431][T13991] veth0_to_bridge: entered promiscuous mode [ 286.989153][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 286.998520][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 287.019504][T13997] openvswitch: netlink: IP tunnel dst address not specified [ 287.067342][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2205'. [ 287.187778][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 287.211385][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'. [ 287.224402][T14004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.240040][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 287.294322][T13990] veth0_to_bridge: left promiscuous mode [ 287.324619][ T7447] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.333491][ T7447] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.383039][ T7447] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.391457][ T7447] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.431987][T14013] veth0: entered promiscuous mode [ 287.481067][T14015] veth0: left promiscuous mode [ 287.521536][T14022] netlink: 'syz.3.2213': attribute type 4 has an invalid length. [ 287.707611][T14036] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2217'. [ 287.746847][T14036] bond6: entered promiscuous mode [ 287.753512][T14036] bond6: entered allmulticast mode [ 287.762409][T14036] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.770196][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 287.779479][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 287.864928][T14044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.960570][T14049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.488273][T14077] netlink: 'syz.3.2228': attribute type 4 has an invalid length. [ 288.541785][T14081] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 289.288468][T14123] netlink: 'syz.3.2244': attribute type 4 has an invalid length. [ 289.580480][T14143] IPVS: Unknown mcast interface: vcan0 [ 289.640890][T14143] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 290.109604][T14176] netlink: 'syz.3.2257': attribute type 4 has an invalid length. [ 291.135654][T14240] netlink: 'syz.4.2276': attribute type 4 has an invalid length. [ 291.177987][T14245] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 291.204084][T14246] set match dimension is over the limit! [ 291.213483][T14246] netlink: 'syz.3.2278': attribute type 3 has an invalid length. [ 291.297007][T14250] tipc: Resetting bearer [ 291.316076][T14250] tipc: Resetting bearer [ 291.365003][T14250] tipc: Resetting bearer [ 291.449866][T14250] tipc: Resetting bearer [ 291.639379][T14260] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 291.860257][T14277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.982308][T14280] __nla_validate_parse: 12 callbacks suppressed [ 291.982333][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 292.000476][T14282] netlink: 'syz.1.2290': attribute type 4 has an invalid length. [ 292.316215][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 292.338828][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 292.371322][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 292.392945][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 292.595831][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2301'. [ 292.794049][T14327] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 292.802171][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 292.969860][T14337] IPVS: Unknown mcast interface: vcan0 [ 293.014499][T14345] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2311'. [ 293.042486][T14345] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2311'. [ 293.082349][T14349] pim6reg1: entered promiscuous mode [ 293.088022][T14349] pim6reg1: entered allmulticast mode [ 293.137448][T14345] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2311'. [ 293.194709][T14349] ¾x9ÿ: renamed from bridge_slave_0 [ 293.591100][T14385] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 293.611618][T14389] sctp: [Deprecated]: syz.0.2320 (pid 14389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.611618][T14389] Use struct sctp_sack_info instead [ 293.657030][T14385] 8021q: adding VLAN 0 to HW filter on device bond7 [ 293.699352][T14390] vlan3: entered allmulticast mode [ 293.738753][T14390] bond7: entered allmulticast mode [ 293.744673][T14389] sctp: [Deprecated]: syz.0.2320 (pid 14389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.744673][T14389] Use struct sctp_sack_info instead [ 293.745995][T14393] H: renamed from dummy0 [ 293.865918][T14401] netlink: 'syz.0.2323': attribute type 3 has an invalid length. [ 293.955202][T14407] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 312.269294][T14418] __nla_validate_parse: 67 callbacks suppressed [ 312.269317][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 312.317215][T14425] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2329'. [ 312.355504][T14425] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 312.374776][T14418] bond8: entered promiscuous mode [ 312.443867][T14427] : entered promiscuous mode [ 312.499161][T14438] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 312.620186][T14443] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 312.688559][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2336'. [ 312.770976][T14451] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.792555][T14449] netlink: 'syz.1.2338': attribute type 3 has an invalid length. [ 312.804742][T14449] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2338'. [ 312.841437][T14469] FAULT_INJECTION: forcing a failure. [ 312.841437][T14469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.902261][T14469] CPU: 1 UID: 0 PID: 14469 Comm: syz.4.2341 Not tainted syzkaller #0 PREEMPT(full) [ 312.902291][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.902301][T14469] Call Trace: [ 312.902309][T14469] [ 312.902317][T14469] dump_stack_lvl+0xe8/0x150 [ 312.902352][T14469] should_fail_ex+0x412/0x560 [ 312.902387][T14469] _copy_from_user+0x2d/0xb0 [ 312.902413][T14469] get_timespec64+0x96/0x1b0 [ 312.902439][T14469] ? __pfx_get_timespec64+0x10/0x10 [ 312.902476][T14469] __x64_sys_recvmmsg+0x14b/0x250 [ 312.902510][T14469] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 312.902549][T14469] do_syscall_64+0x14d/0xf80 [ 312.902576][T14469] ? trace_irq_disable+0x3b/0x150 [ 312.902592][T14469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.902611][T14469] ? clear_bhb_loop+0x40/0x90 [ 312.902635][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.902655][T14469] RIP: 0033:0x7ff55279c819 [ 312.902675][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.902692][T14469] RSP: 002b:00007ff55361e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 312.902721][T14469] RAX: ffffffffffffffda RBX: 00007ff552a15fa0 RCX: 00007ff55279c819 [ 312.902736][T14469] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 312.902749][T14469] RBP: 00007ff55361e090 R08: 0000200000003700 R09: 0000000000000000 [ 312.902761][T14469] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 312.902773][T14469] R13: 00007ff552a16038 R14: 00007ff552a15fa0 R15: 00007ffc822346c8 [ 312.902806][T14469] [ 312.938190][T14455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.113190][T14473] syzkaller0: entered promiscuous mode [ 313.118729][T14473] syzkaller0: entered allmulticast mode [ 313.186323][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2344'. [ 313.243189][T14488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2346'. [ 313.321625][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 313.539608][T14507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.617557][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 313.652510][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 313.944849][T14535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.274181][T14552] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 314.374330][T14552] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.382899][T14556] veth0: entered promiscuous mode [ 314.433916][T14566] bond7: (slave gretap1): making interface the new active one [ 314.440877][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 314.449602][T14566] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 314.460470][T14555] veth0: left promiscuous mode [ 314.531686][T14584] netlink: 'syz.0.2370': attribute type 4 has an invalid length. [ 314.853281][T14606] syzkaller0: entered promiscuous mode [ 314.873102][T14606] syzkaller0: entered allmulticast mode [ 315.021412][T14614] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 315.069168][T14613] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 315.324325][T14633] netlink: 'syz.0.2383': attribute type 39 has an invalid length. [ 315.384382][T14635] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 315.488996][T14640] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 315.567014][T14640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.183598][T14684] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 316.325648][T14691] ipvlan0: entered allmulticast mode [ 316.347105][T14691] batman_adv: batadv0: Adding interface: ipvlan0 [ 316.359909][T14691] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.408717][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.413312][T14696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.420272][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.457335][T14691] batman_adv: batadv0: Interface activated: ipvlan0 [ 317.207006][T14742] netlink: 'syz.2.2415': attribute type 4 has an invalid length. [ 317.338575][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.013612][T14793] netlink: 'syz.0.2428': attribute type 4 has an invalid length. [ 318.505653][T14823] __nla_validate_parse: 8 callbacks suppressed [ 318.505676][T14823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2435'. [ 318.575721][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 318.804907][T14838] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 318.921045][T14845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 318.996752][T14845] : renamed from bond0 [ 319.155074][T14855] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2446'. [ 319.203795][T14865] sctp: [Deprecated]: syz.1.2447 (pid 14865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.203795][T14865] Use struct sctp_sack_info instead [ 319.739599][T14894] netlink: 'syz.1.2457': attribute type 4 has an invalid length. [ 319.751819][T14898] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20001 [ 319.771984][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 319.785978][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.932445][T14908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2463'. [ 319.954703][T14908] ip6erspan0: entered allmulticast mode [ 319.990107][T14903] netlink: 'syz.2.2460': attribute type 75 has an invalid length. [ 320.183043][T14920] x_tables: unsorted underflow at hook 3 [ 320.264277][T14920] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2466'. [ 320.361762][T14927] syzkaller0: entered promiscuous mode [ 320.367652][T14927] syzkaller0: entered allmulticast mode [ 320.815139][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2481'. [ 320.834259][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2481'. [ 320.864287][T14966] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2483'. [ 320.890481][T14966] sit0: entered promiscuous mode [ 320.903446][T14966] sit0: left allmulticast mode [ 321.094738][T14973] bond6: option mode: invalid value (133) [ 321.102553][T14973] bond6 (unregistering): Released all slaves [ 321.463369][T15000] openvswitch: netlink: IP tunnel dst address not specified [ 321.928527][T15024] No such timeout policy "syz0" [ 321.973341][T15028] netlink: 'syz.1.2501': attribute type 51 has an invalid length. [ 322.041266][T15024] ipvlan2: entered allmulticast mode [ 322.080854][T15024] batadv_slave_1: entered allmulticast mode [ 322.328542][T15044] bridge_slave_0 (unregistering): left allmulticast mode [ 322.340363][T15044] bridge_slave_0 (unregistering): left promiscuous mode [ 322.348083][T15044] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.949592][T15079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.956935][T15079] IPv6: NLM_F_CREATE should be set when creating new route [ 322.964259][T15079] IPv6: NLM_F_CREATE should be set when creating new route [ 322.971516][T15079] IPv6: NLM_F_CREATE should be set when creating new route [ 323.183153][T15079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.235395][T15079] tipc: Disabling bearer [ 324.057378][T15079] lo speed is unknown, defaulting to 1000 [ 324.359776][T15137] __nla_validate_parse: 8 callbacks suppressed [ 324.359798][T15137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2528'. [ 324.499956][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2531'. [ 324.520366][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 325.094105][ T141] wlan0: Trigger new scan to find an IBSS to join [ 325.261327][T15173] : left promiscuous mode [ 325.284568][T15175] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 325.294101][T15175] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 325.306428][T15184] tipc: Started in network mode [ 325.311349][T15184] tipc: Node identity 4217fcda6ef, cluster identity 4711 [ 325.321911][T15184] tipc: Enabled bearer , priority 0 [ 325.364875][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 325.380064][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 325.406117][T15176] syzkaller0: entered promiscuous mode [ 325.411835][T15176] syzkaller0: entered allmulticast mode [ 325.419304][T15176] tipc: Resetting bearer [ 325.551377][ T1014] tipc: Resetting bearer [ 325.576496][T15172] tipc: Resetting bearer [ 325.593172][T15195] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2546'. [ 326.977841][T15172] tipc: Disabling bearer [ 327.004949][T11287] tipc: Node number set to 753401050 [ 327.303166][T15217] x_tables: duplicate underflow at hook 1 [ 327.627005][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 327.627688][T15218] lo speed is unknown, defaulting to 1000 [ 327.646976][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 327.696643][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 327.905084][T15245] netlink: 'syz.2.2557': attribute type 4 has an invalid length. [ 328.056013][ T7459] wlan0: Trigger new scan to find an IBSS to join [ 328.070230][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 328.550027][T15268] bond11: entered promiscuous mode [ 328.569785][T15268] 8021q: adding VLAN 0 to HW filter on device bond11 [ 328.653501][T15277] bridge5: entered promiscuous mode [ 328.659357][T15277] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 328.731986][T15279] macvlan2: entered promiscuous mode [ 328.737589][T15279] macvlan2: entered allmulticast mode [ 328.743788][T15279] bond11: (slave macvlan2): Error -98 calling set_mac_address [ 328.820503][T15287] syzkaller0: entered promiscuous mode [ 328.898369][T15287] syzkaller0: entered allmulticast mode [ 328.973395][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.219841][T15323] xt_l2tp: invalid flags combination: 0 [ 329.521428][T15342] syz.0.2585 (15342) used obsolete PPPIOCDETACH ioctl [ 329.667860][T15351] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 329.758254][T15356] __nla_validate_parse: 8 callbacks suppressed [ 329.758277][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2592'. [ 329.807908][T15355] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2591'. [ 330.227634][T15382] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 330.249901][T15383] syzkaller1: entered promiscuous mode [ 330.260332][T15383] syzkaller1: entered allmulticast mode [ 330.322570][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'. [ 330.331779][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'. [ 330.371518][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'. [ 330.563478][T15398] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 330.626704][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'. [ 330.654898][T15398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.768209][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2604'. [ 330.868839][T15402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2604'. [ 331.110101][T15425] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 331.128326][T15424] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2610'. [ 331.142006][T15425] netlink: 'syz.2.2612': attribute type 4 has an invalid length. [ 331.154257][T15425] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.2612'. [ 331.163992][T15428] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 331.338367][T15438] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 331.601666][T15457] netlink: 'syz.1.2621': attribute type 10 has an invalid length. [ 331.735596][T15460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.753537][T15471] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 332.290499][T15510] netlink: 'syz.1.2636': attribute type 1 has an invalid length. [ 332.349531][T15513] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 332.384983][T15513] 8021q: adding VLAN 0 to HW filter on device bond12 [ 332.457334][T15513] macvlan2: entered promiscuous mode [ 332.462994][T15513] macvlan2: entered allmulticast mode [ 332.622109][T15519] xt_CT: No such helper "snmp_trap" [ 332.777168][T15541] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 333.304220][T15560] bond13: entered promiscuous mode [ 333.381746][T15564] macvlan3: entered promiscuous mode [ 333.391410][T15564] macvlan3: entered allmulticast mode [ 333.399012][T15564] bond13: (slave macvlan3): Opening slave failed [ 333.627391][T15576] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 333.636579][T15576] netlink: 'syz.2.2656': attribute type 2 has an invalid length. [ 334.237408][T15585] lo speed is unknown, defaulting to 1000 [ 334.490718][T15610] syzkaller1: entered promiscuous mode [ 334.501526][T15610] syzkaller1: entered allmulticast mode [ 334.878998][T15631] __nla_validate_parse: 9 callbacks suppressed [ 334.879019][T15631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2672'. [ 335.005808][T15641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.096300][T15644] netlink: 'syz.1.2675': attribute type 2 has an invalid length. [ 335.133917][T15647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2675'. [ 335.175364][T15649] 8021q: VLANs not supported on ip6gre0 [ 335.183230][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 335.194647][T15650] 8021q: VLANs not supported on ip6gre0 [ 335.313364][T15641] syzkaller1: entered promiscuous mode [ 335.319034][T15641] syzkaller1: entered allmulticast mode [ 335.907404][T15695] netlink: 'syz.2.2687': attribute type 5 has an invalid length. [ 335.951429][T15697] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 335.984647][T15697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.997235][T15702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2689'. [ 336.008472][T15697] batadv0: entered promiscuous mode [ 336.016998][T15697] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.096484][T15697] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 336.115307][T15697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2688'. [ 336.158909][T15697] batadv0: entered allmulticast mode [ 336.222576][T15697] bond0: (slave batadv0): Releasing backup interface [ 336.392218][T15697] bridge0: port 4(batadv0) entered blocking state [ 336.429977][T15697] bridge0: port 4(batadv0) entered disabled state [ 336.564774][T15730] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 336.694434][ T7815] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 336.704289][ T7815] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 336.758096][T15741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2697'. [ 336.812603][T15745] netlink: 'syz.0.2695': attribute type 3 has an invalid length. [ 336.841190][T15745] netlink: 'syz.0.2695': attribute type 3 has an invalid length. [ 336.948435][T15747] syzkaller0: entered promiscuous mode [ 336.954220][T15747] syzkaller0: entered allmulticast mode [ 336.984075][T15757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2700'. [ 337.098773][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 337.112902][T15760] sctp: [Deprecated]: syz.0.2702 (pid 15760) Use of int in maxseg socket option. [ 337.112902][T15760] Use struct sctp_assoc_value instead [ 337.409737][T15772] xt_hashlimit: size too large, truncated to 1048576 [ 337.966768][T15786] syzkaller0: entered promiscuous mode [ 337.972348][T15786] syzkaller0: entered allmulticast mode [ 338.069398][T15794] bridge_slave_0 (unregistering): left promiscuous mode [ 338.082346][T15796] netlink: 764 bytes leftover after parsing attributes in process `syz.4.2711'. [ 338.090070][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.134469][T15796] netlink: 204116 bytes leftover after parsing attributes in process `syz.4.2711'. [ 338.772442][T15825] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.983835][T15841] syz.0.2725: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 339.022953][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.0.2725 Not tainted syzkaller #0 PREEMPT(full) [ 339.022985][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.022997][T15841] Call Trace: [ 339.023006][T15841] [ 339.023015][T15841] dump_stack_lvl+0xe8/0x150 [ 339.023050][T15841] warn_alloc+0x249/0x340 [ 339.023079][T15841] ? stack_trace_save+0xa9/0x100 [ 339.023105][T15841] ? __pfx_warn_alloc+0x10/0x10 [ 339.023136][T15841] ? kasan_save_track+0x4f/0x80 [ 339.023158][T15841] ? kasan_save_track+0x3e/0x80 [ 339.023178][T15841] ? __kasan_kmalloc+0x93/0xb0 [ 339.023199][T15841] ? __kmalloc_cache_noprof+0x31c/0x660 [ 339.023221][T15841] ? xskq_create+0x56/0x170 [ 339.023252][T15841] ? xsk_setsockopt+0x54c/0x990 [ 339.023273][T15841] ? do_sock_setsockopt+0x17c/0x1b0 [ 339.023297][T15841] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 339.023322][T15841] ? do_syscall_64+0x14d/0xf80 [ 339.023354][T15841] __vmalloc_node_range_noprof+0x132/0x1730 [ 339.023412][T15841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.023443][T15841] ? __kasan_kmalloc+0x93/0xb0 [ 339.023474][T15841] vmalloc_user_noprof+0xad/0xe0 [ 339.023497][T15841] ? xskq_create+0xbf/0x170 [ 339.023524][T15841] xskq_create+0xbf/0x170 [ 339.023553][T15841] xsk_init_queue+0x8a/0xe0 [ 339.023580][T15841] xsk_setsockopt+0x54c/0x990 [ 339.023607][T15841] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.023631][T15841] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.023674][T15841] ? aa_sock_opt_perm+0xff/0x1a0 [ 339.023699][T15841] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 339.023722][T15841] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.023748][T15841] do_sock_setsockopt+0x17c/0x1b0 [ 339.023779][T15841] __x64_sys_setsockopt+0x13d/0x1b0 [ 339.023811][T15841] do_syscall_64+0x14d/0xf80 [ 339.023837][T15841] ? trace_irq_disable+0x3b/0x150 [ 339.023855][T15841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.023876][T15841] ? clear_bhb_loop+0x40/0x90 [ 339.023902][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.023922][T15841] RIP: 0033:0x7f7ee079c819 [ 339.023943][T15841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.023961][T15841] RSP: 002b:00007f7ee165a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.023984][T15841] RAX: ffffffffffffffda RBX: 00007f7ee0a15fa0 RCX: 00007f7ee079c819 [ 339.023999][T15841] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 339.024012][T15841] RBP: 00007f7ee0832c91 R08: 0000000000000004 R09: 0000000000000000 [ 339.024025][T15841] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.024038][T15841] R13: 00007f7ee0a16038 R14: 00007f7ee0a15fa0 R15: 00007ffccea9ce88 [ 339.024072][T15841] [ 339.025129][T15841] Mem-Info: [ 339.300355][T15841] active_anon:5782 inactive_anon:0 isolated_anon:0 [ 339.300355][T15841] active_file:3339 inactive_file:40029 isolated_file:0 [ 339.300355][T15841] unevictable:768 dirty:176 writeback:0 [ 339.300355][T15841] slab_reclaimable:12364 slab_unreclaimable:117797 [ 339.300355][T15841] mapped:29598 shmem:1366 pagetables:1308 [ 339.300355][T15841] sec_pagetables:0 bounce:0 [ 339.300355][T15841] kernel_misc_reclaimable:0 [ 339.300355][T15841] free:1309458 free_pcp:10153 free_cma:0 [ 339.347134][T15841] Node 0 active_anon:23128kB inactive_anon:0kB active_file:13356kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:704kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14456kB pagetables:5184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.379580][T15841] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.410170][T15841] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.440825][T15841] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 339.446744][T15841] Node 0 DMA32 free:1278524kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:13356kB inactive_file:159908kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:40992kB local_pcp:19956kB free_cma:0kB [ 339.506943][T15841] lowmem_reserve[]: 0 0 0 0 0 [ 339.520143][T15841] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 339.574874][T15841] lowmem_reserve[]: 0 0 0 0 0 [ 339.579656][T15841] Node 1 Normal free:3943504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.643345][T15841] lowmem_reserve[]: 0 0 0 0 0 [ 339.651787][T15841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.722900][T15841] Node 0 DMA32: 5177*4kB (UM) 3791*8kB (UM) 1881*16kB (UM) 471*32kB (UME) 404*64kB (UM) 324*128kB (UME) 282*256kB (UM) 245*512kB (UM) 183*1024kB (UME) 104*2048kB (UM) 122*4096kB (UM) = 1261260kB [ 339.763657][T15841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 339.775914][T15841] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 5*16kB (UM) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3943504kB [ 339.793652][T15841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.804154][T15841] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 339.816890][T15841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.820249][T15874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.827555][T15841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.837938][T15874] netlink: 'syz.1.2731': attribute type 2 has an invalid length. [ 339.879953][T15841] 44730 total pagecache pages [ 339.900483][T15841] 0 pages in swap cache [ 339.910621][T15841] Free swap = 124996kB [ 339.917741][T15841] Total swap = 124996kB [ 339.922017][T15841] 2097051 pages RAM [ 339.929463][T15841] 0 pages HighMem/MovableOnly [ 339.939193][T15879] __nla_validate_parse: 9 callbacks suppressed [ 339.939212][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 339.955951][T15841] 427077 pages reserved [ 339.960324][T15841] 0 pages cma reserved [ 339.996336][T15881] gre1: entered promiscuous mode [ 340.023030][T15881] gre1: entered allmulticast mode [ 340.052090][T15879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2734'. [ 340.061879][T15879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2734'. [ 340.084176][T15879] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2734'. [ 340.374111][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 340.492454][T15898] 8021q: adding VLAN 0 to HW filter on device  [ 340.530202][T15898] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.564324][T15898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.917381][T15919] caif0: entered allmulticast mode [ 341.078090][T15924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2750'. [ 341.089474][T15927] syzkaller0: entered promiscuous mode [ 341.104698][T15927] syzkaller0: entered allmulticast mode [ 341.240991][T15927] syzkaller0: tun_net_xmit 14 [ 341.246530][T15927] syzkaller0: tun_net_xmit 14 [ 341.259588][T15947] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 341.272604][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 341.652208][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 341.661635][T15977] netlink: 'syz.1.2763': attribute type 19 has an invalid length. [ 341.670161][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 341.680059][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 341.689204][T15977] netlink: 'syz.1.2763': attribute type 19 has an invalid length. [ 341.851357][T15989] netlink: 'syz.1.2767': attribute type 1 has an invalid length. [ 342.144445][T15950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.613695][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.631664][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.641988][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.651393][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.667169][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.120508][T16107] gretap0: entered promiscuous mode [ 344.127487][T16107] vlan4: entered promiscuous mode [ 344.178503][T16091] lo speed is unknown, defaulting to 1000 [ 344.806361][T16141] netlink: 'syz.0.2802': attribute type 61 has an invalid length. [ 344.826085][T16149] netlink: 'syz.4.2804': attribute type 1 has an invalid length. [ 344.835786][T16149] netlink: 'syz.4.2804': attribute type 7 has an invalid length. [ 344.856722][T16149] netlink: 'syz.4.2804': attribute type 8 has an invalid length. [ 344.971453][T16091] chnl_net:caif_netlink_parms(): no params data found [ 345.111340][T16159] __nla_validate_parse: 13 callbacks suppressed [ 345.111361][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 345.141936][T16091] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.149483][T16091] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.156900][T16091] bridge_slave_0: entered allmulticast mode [ 345.165051][T16091] bridge_slave_0: entered promiscuous mode [ 345.174310][T16091] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.181797][T16091] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.189468][T16091] bridge_slave_1: entered allmulticast mode [ 345.197518][T16091] bridge_slave_1: entered promiscuous mode [ 345.321328][T16091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.355557][T16091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.444130][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 345.453250][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'. [ 345.462144][T16178] netlink: 'syz.1.2812': attribute type 12 has an invalid length. [ 345.479958][T16178] netlink: 'syz.1.2812': attribute type 11 has an invalid length. [ 345.491468][T16091] team0: Port device team_slave_0 added [ 345.506884][T16091] team0: Port device team_slave_1 added [ 345.635794][T16091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.697586][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.734697][ T5146] Bluetooth: hci5: command tx timeout [ 345.746955][T16091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.768258][T16091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.784487][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.841588][T16091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.981411][T16216] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 346.023885][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 346.077348][T16091] hsr_slave_0: entered promiscuous mode [ 346.119471][T16091] hsr_slave_1: entered promiscuous mode [ 346.172573][T16091] debugfs: 'hsr0' already exists in 'hsr' [ 346.187522][T16091] Cannot create hsr debugfs directory [ 346.375418][T16235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 346.674620][ T7454] tipc: Subscription rejected, illegal request [ 346.847048][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2827'. [ 347.017044][T16223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.031381][T16241] netlink: 'syz.4.2823': attribute type 10 has an invalid length. [ 347.051485][T16241] netlink: 396 bytes leftover after parsing attributes in process `syz.4.2823'. [ 347.204614][T16091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.230322][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.273759][T16091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.300128][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.332646][T16091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.379923][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.406426][T16091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.437057][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.487170][T16283] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2832'. [ 347.541609][T16286] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2833'. [ 347.817270][ T5146] Bluetooth: hci5: command tx timeout [ 347.941750][T16091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.136588][T16091] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.189916][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.197156][ T7454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.248510][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.255803][ T7454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.646784][T16308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.874482][T16354] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 348.920623][T16356] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 348.953358][T16091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.138515][T16091] veth0_vlan: entered promiscuous mode [ 349.274455][T16091] veth1_vlan: entered promiscuous mode [ 349.371918][T16091] veth0_macvtap: entered promiscuous mode [ 349.405898][T16091] veth1_macvtap: entered promiscuous mode [ 349.489557][T16091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.548649][T16091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.611799][ T1014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.637732][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.669524][T16357] lo speed is unknown, defaulting to 1000 [ 349.671246][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.711226][ T1014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.898580][ T5146] Bluetooth: hci5: command tx timeout [ 349.998095][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.014344][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.127358][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.149282][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.245510][T16396] team_slave_1: Caught tx_queue_len zero misconfig [ 350.628132][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2863'. [ 350.674504][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 350.770226][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 351.016483][T16433] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 351.094002][T16436] sock: sock_set_timeout: `syz.2.2869' (pid 16436) tries to set negative timeout [ 351.115955][T16433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.194429][T16447] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2868'. [ 351.424930][T16462] netlink: 'syz.4.2872': attribute type 17 has an invalid length. [ 351.463046][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 351.473987][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 351.490711][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2872'. [ 351.527966][T16471] 8021q: VLANs not supported on gre0 [ 351.534104][T16468] 8021q: VLANs not supported on gre0 [ 351.548352][T16468] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2877'. [ 351.560328][T16468] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2877'. [ 351.975817][ T5146] Bluetooth: hci5: command tx timeout [ 354.041065][T16438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.233420][T16489] syzkaller1: entered promiscuous mode [ 354.238965][T16489] syzkaller1: entered allmulticast mode [ 354.300791][T16494] netlink: 'syz.1.2885': attribute type 11 has an invalid length. [ 354.319443][T16494] netlink: 'syz.1.2885': attribute type 4 has an invalid length. [ 354.344451][T16494] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.2885'. [ 354.588884][T16521] 8021q: VLANs not supported on bond0 [ 354.747149][T16531] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.882659][T16540] openvswitch: netlink: Missing valid actions attribute. [ 354.892219][T16540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.915558][T16536] syzkaller0: entered promiscuous mode [ 354.921541][T16536] syzkaller0: entered allmulticast mode [ 354.989358][T16541] ip6erspan1: entered allmulticast mode [ 355.548887][T16575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.779765][T16573] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 356.917022][T16589] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 357.048782][T16589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.187731][T16612] __nla_validate_parse: 5 callbacks suppressed [ 357.187753][T16612] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2909'. [ 357.229522][T16603] bond7: (slave veth3): Enslaving as an active interface with a down link [ 357.344346][T16615] xt_TCPMSS: Only works on TCP SYN packets [ 357.530678][T16631] netlink: 'syz.0.2922': attribute type 21 has an invalid length. [ 357.558125][T16631] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2922'. [ 357.575117][T16631] netlink: 'syz.0.2922': attribute type 4 has an invalid length. [ 357.673272][T16644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 357.685591][T16631] netlink: 'syz.0.2922': attribute type 5 has an invalid length. [ 357.735132][T16631] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2922'. [ 358.081618][T16659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'. [ 358.268299][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 358.928618][T16780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2939'. [ 358.969990][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2939'. [ 359.003401][T16780] tipc: Started in network mode [ 359.027585][T16780] tipc: Node identity , cluster identity 4711 [ 359.059313][T16780] tipc: Failed to set node id, please configure manually [ 359.121779][T16780] tipc: Enabling of bearer rejected, failed to enable media [ 359.579061][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 359.655300][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2943'. [ 359.680492][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 360.445378][T16672] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 360.936055][T16941] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 361.291143][T16879] lo speed is unknown, defaulting to 1000 [ 361.511242][ T7447] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.988132][T16986] xt_l2tp: v2 doesn't support IP mode [ 362.402137][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.420484][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.431688][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.449581][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.465535][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.482233][T17001] __nla_validate_parse: 13 callbacks suppressed [ 362.482255][T17001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 363.031203][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.066176][T17019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.080839][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.118020][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.140451][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.163458][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.178137][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.221586][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.241377][T17023] gretap3: entered promiscuous mode [ 363.259861][T17023] batman_adv: batadv0: Adding interface: gretap3 [ 363.260903][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 363.276669][T17023] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 363.313327][T17023] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 363.462953][T16994] lo speed is unknown, defaulting to 1000 [ 363.587795][ T1014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.779712][ T1014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.993609][ T1014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.047772][T17060] sctp: [Deprecated]: syz.4.2987 (pid 17060) Use of int in maxseg socket option. [ 364.047772][T17060] Use struct sctp_assoc_value instead [ 364.165325][ T1014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.279953][T17066] smc: net device team0 applied user defined pnetid SYZ2 [ 364.455841][ T7454] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.508820][ T7454] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.523852][T16994] chnl_net:caif_netlink_parms(): no params data found [ 364.534546][ T5838] Bluetooth: hci3: command tx timeout [ 364.686521][ T7818] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.694539][T17083] netlink: 'syz.4.2995': attribute type 83 has an invalid length. [ 364.986319][ T7815] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.018083][ T1014] bridge0: port 4(batadv0) entered disabled state [ 365.088654][ T1014] gretap0: left allmulticast mode [ 365.111167][ T1014] gretap0: left promiscuous mode [ 365.138394][ T1014] bridge0: port 3(gretap0) entered disabled state [ 365.184145][ T1014] bridge_slave_1: left allmulticast mode [ 365.189901][ T1014] bridge_slave_1: left promiscuous mode [ 365.209044][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.498295][T17141] netlink: 'syz.3.3000': attribute type 7 has an invalid length. [ 365.507298][T17141] netlink: 'syz.3.3000': attribute type 8 has an invalid length. [ 365.777278][ T1014] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 365.990317][ T7457] smc: removing ib device sy‡1 [ 365.990990][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.004934][ T1014] bond_slave_0: left promiscuous mode [ 366.011603][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.021163][ T1014] bond_slave_1: left promiscuous mode [ 366.027052][ T1014] bond0 (unregistering): Released all slaves [ 366.037639][ T1014] bond1 (unregistering): Released all slaves [ 366.051028][ T1014] bond2 (unregistering): Released all slaves [ 366.065933][ T1014] bond3 (unregistering): Released all slaves [ 366.081571][ T1014] bond4 (unregistering): Released all slaves [ 366.105845][ T1014] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 366.115503][ T1014] bond5 (unregistering): Released all slaves [ 366.128706][ T1014] bond6 (unregistering): Released all slaves [ 366.148875][ T1014] bond7 (unregistering): Released all slaves [ 366.161893][ T1014] bond8 (unregistering): Released all slaves [ 366.201916][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.209653][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.218135][T16994] bridge_slave_0: entered allmulticast mode [ 366.229886][T16994] bridge_slave_0: entered promiscuous mode [ 366.291877][T17121] kthread_run failed with err -4 [ 366.314061][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 366.345417][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.352610][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.392266][T16994] bridge_slave_1: entered allmulticast mode [ 366.425111][T16994] bridge_slave_1: entered promiscuous mode [ 366.553645][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.613712][ T5838] Bluetooth: hci3: command tx timeout [ 366.619602][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.796674][T17164] xfrm0: left allmulticast mode [ 366.918197][T16994] team0: Port device team_slave_0 added [ 367.016124][T16994] team0: Port device team_slave_1 added [ 367.178499][T17187] xt_addrtype: ipv6 does not support BROADCAST matching [ 367.339561][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.373228][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.447771][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.513526][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.536170][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.607613][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.891064][T17212] [ 367.893457][T17212] ====================================================== [ 367.900497][T17212] WARNING: possible circular locking dependency detected [ 367.907534][T17212] syzkaller #0 Not tainted [ 367.911969][T17212] ------------------------------------------------------ [ 367.919001][T17212] syz.2.3020/17212 is trying to acquire lock: [ 367.925085][T17212] ffffffff8fd4e138 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 367.934623][T17212] [ 367.934623][T17212] but task is already holding lock: [ 367.942005][T17212] ffffffff8fd4e0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 367.951633][T17212] [ 367.951633][T17212] which lock already depends on the new lock. [ 367.951633][T17212] [ 367.962051][T17212] [ 367.962051][T17212] the existing dependency chain (in reverse order) is: [ 367.971112][T17212] [ 367.971112][T17212] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 367.979032][T17212] _raw_spin_lock_bh+0x36/0x50 [ 367.984342][T17212] nr_rt_ioctl+0x40c/0xf90 [ 367.989292][T17212] sock_do_ioctl+0x101/0x320 [ 367.994404][T17212] sock_ioctl+0x5c6/0x7f0 [ 367.999266][T17212] __se_sys_ioctl+0xfc/0x170 [ 368.004388][T17212] do_syscall_64+0x14d/0xf80 [ 368.010028][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.016457][T17212] [ 368.016457][T17212] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 368.024504][T17212] _raw_spin_lock_bh+0x36/0x50 [ 368.029814][T17212] nr_rt_ioctl+0x215/0xf90 [ 368.034772][T17212] sock_do_ioctl+0x101/0x320 [ 368.039899][T17212] sock_ioctl+0x5c6/0x7f0 [ 368.044764][T17212] __se_sys_ioctl+0xfc/0x170 [ 368.049896][T17212] do_syscall_64+0x14d/0xf80 [ 368.055036][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.061470][T17212] [ 368.061470][T17212] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 368.069356][T17212] __lock_acquire+0x15a5/0x2cf0 [ 368.074752][T17212] lock_acquire+0xf0/0x2e0 [ 368.079703][T17212] _raw_spin_lock_bh+0x36/0x50 [ 368.084998][T17212] nr_rt_device_down+0xbe/0x860 [ 368.090382][T17212] nr_device_event+0x137/0x150 [ 368.095673][T17212] notifier_call_chain+0x1be/0x400 [ 368.101317][T17212] __dev_notify_flags+0x16d/0x310 [ 368.106975][T17212] netif_change_flags+0xe8/0x1a0 [ 368.112447][T17212] dev_change_flags+0x130/0x260 [ 368.117824][T17212] dev_ioctl+0x7b4/0x1150 [ 368.122723][T17212] sock_do_ioctl+0x23e/0x320 [ 368.127846][T17212] sock_ioctl+0x5c6/0x7f0 [ 368.132710][T17212] __se_sys_ioctl+0xfc/0x170 [ 368.137841][T17212] do_syscall_64+0x14d/0xf80 [ 368.142959][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.149375][T17212] [ 368.149375][T17212] other info that might help us debug this: [ 368.149375][T17212] [ 368.159623][T17212] Chain exists of: [ 368.159623][T17212] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 368.159623][T17212] [ 368.173481][T17212] Possible unsafe locking scenario: [ 368.173481][T17212] [ 368.180945][T17212] CPU0 CPU1 [ 368.186309][T17212] ---- ---- [ 368.191706][T17212] lock(nr_neigh_list_lock); [ 368.196407][T17212] lock(&nr_node->node_lock); [ 368.203787][T17212] lock(nr_neigh_list_lock); [ 368.211075][T17212] lock(nr_node_list_lock); [ 368.215667][T17212] [ 368.215667][T17212] *** DEADLOCK *** [ 368.215667][T17212] [ 368.223811][T17212] 2 locks held by syz.2.3020/17212: [ 368.229010][T17212] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 368.237826][T17212] #1: ffffffff8fd4e0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 368.247848][T17212] [ 368.247848][T17212] stack backtrace: [ 368.253741][T17212] CPU: 1 UID: 0 PID: 17212 Comm: syz.2.3020 Not tainted syzkaller #0 PREEMPT(full) [ 368.253762][T17212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.253772][T17212] Call Trace: [ 368.253779][T17212] [ 368.253787][T17212] dump_stack_lvl+0xe8/0x150 [ 368.253810][T17212] print_circular_bug+0x2e1/0x300 [ 368.253837][T17212] check_noncircular+0x12e/0x150 [ 368.253863][T17212] __lock_acquire+0x15a5/0x2cf0 [ 368.253886][T17212] ? __lock_acquire+0x6b5/0x2cf0 [ 368.253910][T17212] lock_acquire+0xf0/0x2e0 [ 368.253929][T17212] ? nr_rt_device_down+0xbe/0x860 [ 368.253953][T17212] ? nr_rt_device_down+0xbe/0x860 [ 368.253973][T17212] _raw_spin_lock_bh+0x36/0x50 [ 368.253993][T17212] ? nr_rt_device_down+0xbe/0x860 [ 368.254014][T17212] nr_rt_device_down+0xbe/0x860 [ 368.254035][T17212] ? nr_device_event+0x12f/0x150 [ 368.254057][T17212] nr_device_event+0x137/0x150 [ 368.254076][T17212] notifier_call_chain+0x1be/0x400 [ 368.254103][T17212] __dev_notify_flags+0x16d/0x310 [ 368.254125][T17212] ? __pfx___dev_notify_flags+0x10/0x10 [ 368.254144][T17212] ? __dev_change_flags+0x4c6/0x690 [ 368.254164][T17212] ? __pfx___dev_change_flags+0x10/0x10 [ 368.254184][T17212] ? full_name_hash+0x92/0xe0 [ 368.254208][T17212] netif_change_flags+0xe8/0x1a0 [ 368.254229][T17212] dev_change_flags+0x130/0x260 [ 368.254250][T17212] dev_ioctl+0x7b4/0x1150 [ 368.254268][T17212] sock_do_ioctl+0x23e/0x320 [ 368.254284][T17212] ? __pfx_sock_do_ioctl+0x10/0x10 [ 368.254297][T17212] ? do_futex+0x333/0x420 [ 368.254321][T17212] sock_ioctl+0x5c6/0x7f0 [ 368.254345][T17212] ? __pfx_sock_ioctl+0x10/0x10 [ 368.254369][T17212] ? __fget_files+0x2a/0x420 [ 368.254382][T17212] ? __fget_files+0x3a0/0x420 [ 368.254396][T17212] ? __fget_files+0x2a/0x420 [ 368.254410][T17212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.254430][T17212] ? __pfx_sock_ioctl+0x10/0x10 [ 368.254453][T17212] __se_sys_ioctl+0xfc/0x170 [ 368.254472][T17212] do_syscall_64+0x14d/0xf80 [ 368.254493][T17212] ? trace_irq_disable+0x3b/0x150 [ 368.254506][T17212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.254522][T17212] ? clear_bhb_loop+0x40/0x90 [ 368.254539][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.254555][T17212] RIP: 0033:0x7f6801d9c819 [ 368.254570][T17212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.254584][T17212] RSP: 002b:00007f6802cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.254601][T17212] RAX: ffffffffffffffda RBX: 00007f6802015fa0 RCX: 00007f6801d9c819 [ 368.254613][T17212] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 368.254623][T17212] RBP: 00007f6801e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 368.254634][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.254651][T17212] R13: 00007f6802016038 R14: 00007f6802015fa0 R15: 00007ffc066c5988 [ 368.254668][T17212] [ 368.613204][T17215] __nla_validate_parse: 66 callbacks suppressed [ 368.613226][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'. [ 368.693032][ T5838] Bluetooth: hci3: command tx timeout [ 368.731746][T17213] IPv6: sit1: Disabled Multicast RS [ 368.828403][T17215] dummy0: left allmulticast mode [ 368.837433][T17215] bridge0: port 3(dummy0) entered disabled state [ 368.928149][T17215] bridge_slave_1: left allmulticast mode [ 368.935811][T17215] bridge_slave_1: left promiscuous mode [ 368.942276][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.968302][T17215] ¾x9ÿ: left allmulticast mode [ 368.973342][T17215] ¾x9ÿ: left promiscuous mode [ 368.978328][T17215] bridge0: port 1(1¾x9ÿ) entered disabled state [ 369.027539][T16994] hsr_slave_0: entered promiscuous mode [ 369.042618][T16994] hsr_slave_1: entered promiscuous mode [ 369.062678][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 369.068547][T16994] Cannot create hsr debugfs directory [ 369.075396][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 369.082199][ T1014] : left promiscuous mode [ 369.140068][ T1014] tipc: Disabling bearer [ 369.146057][ T1014] tipc: Left network mode [ 369.184107][T16994] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.242422][T16994] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.309289][T16994] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.361254][T16994] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.455938][T16994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.469374][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.482504][T16994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.517050][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.533749][T16994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.542108][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.550468][T16994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.560182][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.741068][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.749715][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.880950][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 369.899110][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 370.053392][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.081649][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.093359][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.100499][ T7815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.140588][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.147850][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.379627][T16994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.435273][T16994] veth0_vlan: entered promiscuous mode [ 370.456053][T16994] veth1_vlan: entered promiscuous mode [ 370.506133][T16994] veth0_macvtap: entered promiscuous mode [ 370.515909][T16994] veth1_macvtap: entered promiscuous mode [ 370.536180][T16994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.550582][T16994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.572545][ T7818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.583691][ T7818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.592488][ T7818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.615500][ T7818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.627860][T16994] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 370.662863][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.672543][T16994] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 370.683693][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.723891][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.731800][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.773168][ T5838] Bluetooth: hci3: command tx timeout