last executing test programs: 4.182188234s ago: executing program 4 (id=3433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x178, 0x1, [@m_ctinfo={0x174, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.9542623s ago: executing program 4 (id=3438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) accept4$ax25(r4, 0x0, 0x0, 0x80800) (async) getsockname$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x20) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) r5 = socket(0x400000000010, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000340)={'ip_vti0\x00'}) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x810) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4000002, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 3.685044713s ago: executing program 4 (id=3442): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x13012, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2e, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x65c, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf}, @generic={0xc, 0xd, 0xe, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ldst={0xa39f3f15aa68e5ef, 0x1, 0x1, 0x7, 0x9, 0xffffffffffffffc0, 0xefde0a1f5acc43d2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xfffffffc}, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000500)={'sit0\x00', r4, 0x8080, 0x8000, 0x5, 0x800, {{0xc, 0x4, 0x2, 0x1f, 0x30, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x10, 0xa5, 0x0, 0x5, [0x6, 0x7605, 0xc]}, @lsrr={0x83, 0xb, 0x60, [@multicast2, @local]}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x840a, 0x0, 0x0, 0xa208, r2, 0xab7, '\x00', r9, r5, 0x3, 0x0, 0x1, 0x9, @value=r2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000200)="41c4655a82aadba56475dd6359df332c686f735fe3405cf63764dfab59dd693d78eb2ef98e9e6d4fd338662e51dcdec1aa756de63aed85db4b6c64b0d020104f471e133efa8af91e82a00655c5c9d2208cb8397bbaa9e8e57efae566a0cede1afa41ec810d21d40c722d40a5005b5777200b4536759c84e079e0b7a4f9f121a7b9bd96b02ad121a07cc4c53a633a856516be1b19362141bf08a0a780e8fb6ba7e970ee474900276012cb0f17136b12a3ea7e13baf2f80fb4a5a5f86a2749cef8d08dfa8e66ec9e20b63d"}, {&(0x7f00000000c0)="0bc3dc1890182d00cea037ee7dd94b"}], 0x1000000000000015) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0, 0x80}}, 0x2000c001) getsockopt$inet6_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000020000000000000000000000850dd5280af6ba0607423c963a61107300f1ffffff94000000000000008360e772e726abe2ca1977b479a74227186286e992b186e8d4fff4c9100e3e3e469d59b348241fdc9588d0611218ddfe26fc53d0a626136772d1010e79ffe82705b25da32f01000000173cf4ef842c9db6d2b311a550d93981d7f38d6ddec90c81b4fd2d1a610f8d8d6b69ded2d9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.562881813s ago: executing program 4 (id=3445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r7) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) 3.021687964s ago: executing program 0 (id=3453): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES8=r0, @ANYRES32=r0], 0x48}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) getsockopt$nfc_llcp(r4, 0x118, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @random="f39301dff678"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x64, r6, 0xb7e5447e0989cb8f, 0x200000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xffffffffffffffc6, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "d6194520f30321e14e448efad8d526ba82ba79c1ca5400652ae7faf54d5f5439a01c1cf9c9b31a4c767d74b02804f1741c5d892aa7"}]}]}, 0x64}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x50}, 0x800) (async, rerun: 64) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x8) (rerun: 64) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8c}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[{0x18, 0x101, 0x1, 'j '}], 0x18}}], 0x1, 0x40000084) (rerun: 32) 2.873797664s ago: executing program 3 (id=3454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x880) r3 = socket(0x2b, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x400, 0x7ff, 0x9, 0x401, 0x7}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000400)={r5, 0x6a6}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c", 0x1e}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4a15a52c1ab9b8b4db3945d1032005eded55fcb47659cbbce502772abe97b4dc33a479c5e9a0e998456d30026b43318e38b723b3fdde792526c532b66a710486f53cde22978d922b4a53a0ff6e0c3085a3e5bffcaa96c68f92d4ecfe317399ebdc2f8f84587f6b5bdcbf4abdfbc8ae4b938a375fd0766bb99e2f8b7a5455963e52222717ac48156ead70f0313ed44f789c8a8d74d17eb4a", 0xb0}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x130}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x121) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xffe) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r11) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000340012800b00010067656e65766500002400028005000c000000000005000c0001000000050009000100000005000a000100000008000a00", @ANYRES32=r10, @ANYBLOB="6cdb0e06398082aec48238ade6699118cb555558919f06bab8993e984776bb28c6193e53746b2860b3b1ffb42b35dfc590c7a9bd5909604d1b8a2b7627afbdcd3b9408a5c0dbe3926b6b3517c3c9087eedffd1a8d119d197151b39aa9f26909bba6e79b368e44eecf061e2649de4890a7478a03a45be1e4ab06643f0b9400d0343ffc0c332e3ba9766fa88dc81a980037c47310ae9345afc09ed37831dc744e35046d3681dcc024974c86243e87d0b8ab6c481e5a596564ffc2c820d159a696652c73b56c5cc9f8fb9e0afd6aaea9b4bb7ff27f3cb2477dd50afdf993b4c7a94bdd105a6bd3cfc3257d3bfe36035c3b4bbe7cbd57b23d5601a41"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.795169394s ago: executing program 2 (id=3456): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x82, 0x0, 0x1}, 0x28) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfe33) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.629780836s ago: executing program 2 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 2.629326218s ago: executing program 0 (id=3459): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x8, 0x3a, 0xff, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd, 0x120}}}}}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64) recvfrom(r5, 0x0, 0x0, 0x141, 0x0, 0x0) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x4002000) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}]]}, 0x30}, 0x1, 0x0, 0x0, 0x44891}, 0x8060040) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x44000) 2.592612967s ago: executing program 1 (id=3460): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x15, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000040), 0xc0800) 2.473628358s ago: executing program 0 (id=3461): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000628000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="d27a21fff5d487c0eb85d12e49c6e55c1a6d9cd8e8cd25490f89fe8eb4060b53bcc35f1c5d9c1f25d2c08d5f6a6cc49b4bfdc88e4adb949a8f31d430a5a23d2705f3eeabebc6c86c9e162279edf3769899f987f236b1c9b253913efb7e2c7067d2a1783ab0d18cfcf3acfc", 0x6b}], 0x1, &(0x7f0000004c40)=[{0x138, 0x119, 0x80000000, "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"}, {0x88, 0x109, 0xa, "f6217ec3762fb83b3364f1c1492addc2a98a301b7d6b110c4a2940162aac379219fe604a494e712af52380f76a52c39b47e1901de91318e5abbb43b75cb4086ea740ed7afc1fecb80ad45fe2bd3c1db82eef412ff36e9aba8da6cd3afae6f590979a79507f7d1ba219f262964dd429cf84f7aa95e600eb"}, {0xb0, 0x108, 0x800, "c0cb4819dba3f7e7540152e8535f448496dd3cc42f972484265232914a8ff2f407585e45b5021d6b600eca098530302c568e6d1524311dd1af9d63e5bda9db8311be5f51ae5b007a0090dd378f7534143224e8a39b2c47ffe441801e0f9afe4c4db0aa3c217807e9b844aaf53f4590a648bacd00d6efd5d0df1ffa817056fc97842289037497c1edc8fe53195aa465872904fe6c977687c92defcf51"}, {0x18, 0x10c, 0x9f, "58d013f897e7f0"}, {0x88, 0x101, 0x7, "67d887e70e6473b4ab863bb07e3d10fef9ab5f666912a6ad5b2cb4ec7bca41f90ee41094960315e96d41dbb1a0ddc92be7764b616b1606d92faf0b9aebe4ddd8d368ed943228e20ba756094efa2339d13c594837f1795851ec16fc2c75680952f3aa16ad6e4703ca6906543e52ea25584fb7"}, {0x1010, 0x11, 0x0, "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"}, {0x50, 0x118, 0xfff, "e3245c51340eb12fd654b830ec99b656104992d61676c4304a7a97a33b636f0bd777aa45ceabf06d58c59c67307aa271453c35e0c9f73cdbe82630"}, {0x40, 0x10e, 0xc44a, "0d72605af73200ae6b49bc6c894ec91d5a96c58b7a14184be091808f8d853f2f557d8c1cf79724e1a0e0"}, {0x88, 0x109, 0x3, "35c71523511db75fe7d50bf7e7ac96454868fd0e78334db06e0ebd59f2830ee9c669915d5bc2822fbd613fbd84e05b487fd5dd866a4346837316e8788f289e28ea2ac512d1be07dc0346d9512cb1f942dcb9b2cdd53c756d20e6811d8d9e5991f170858d29ad1b2372bcc1244aee26652a363b3bb5f73df6"}], 0x1438}}, {{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)="bcefc3192b8560657f58e88e2029abdecc5e90a303dba1ac4a7f0043e13e8c5d852d6bd34f5e6223c829c2134fbbef3be4da14ac6a01cf88862e6dc0a0c991dcbee373614f854e0835101b91085d898165389a", 0x53}], 0x1, &(0x7f00000004c0)}}], 0x2, 0x0) 1.041791076s ago: executing program 2 (id=3462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x15, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r6 = socket(0x14, 0x2, 0x4) ioctl$SIOCGIFMTU(r6, 0x61e5, 0x0) sendmsg$sock(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xdb, "1eb478fdd2d257bf8f45a82874af9889410389577ec3ebfc3def1202f52293a3ad00aa64ebd69afc1ec3ae7a9821cf0ff2ccb21e459177298e1676dbbc214a2917ed0f64230ec3ee0eb8c85507e9fb32515bd7814b6209079c1107b3a6b9ee6e06723150d978891da981cae0cede8685657d4554eac5f329166c44eac9bcea72af72390816e33d95f7d273af7b34eff5f9a28a86684c2e701238b62ac06e8f119bf9ae13cfbc6c8423947e7635335a2c97aa5162ac08827180d83acebe668b64eb0ca67e98c5e1726a41bece8535cd197723e469f0a0f1656f1420"}, &(0x7f0000000000)=0xe3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r7, 0xa0, &(0x7f0000000180)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xa}, @in={0x2, 0x8e22, @remote}, @in6={0xa, 0x4e20, 0x101, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xb, @remote}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x750280a8}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000280)=0x10) 1.038718438s ago: executing program 4 (id=3463): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r3, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c010000", @ANYRES32=r0, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="18010380140103801800018008000100030000000600020025000000040003003c000180080001000100000008000100520000000400030004000300060002002e00000008000100060000000400030004000300080001000100000010000180080001000800000004000300280001800a00020047504c89af00000004000300060002002b00000004000300040003000400030030000180130002006272696467655f736c6176655f3000000800010022000000040003000b0002006e732f6e657400001c00affed5dc6be07ec7a79901800800010007000000040003000400032008000100040000003800018004000300040003000c00020069705f76746930000800010000000000040003000400030008000100050000000800010001040000c934c71c3b1d78c39e8b8e78bf5b40725c63461c4d3708f3dc2a7a821f132c72df1be6e5201fa81f53dc93e8eaa0210e76535f1c4e4234a6135726f7f1c93ce7b5e723c956fe1151bf3c40274756f4342f992d422c7c5e8b53d8f64a2cf1a48f3bcb2382973b38c8d56aa1e9bd4b3e5e22ac66e3ed1e2509690b150c4f31c9f2c3c83af7c3f2f756b906f3939b886da25f47fbd44278c691e14d17707d12592c86880e0952cca92af2ef0a38ad134ec8ef0f2d2598519b633d1dc486fca7bd7162d6640ec49184e3df5bcc33edfaf24377a47bde2e473b3cade71e6989e9f305923a9752dfeffce9fbe0c4e216cc742d7f0d87d7121289bffccac1bb37f90bd13c0baa72cd6e3b0ba6c1a4f976b11049895f8e4d4b91b2c3f89c4d1dc4aae7de9e676390271212daeca0adf8f27911ec429d11e269f44a33519e3cd9f9b4c916c48445564c7e26e95ca77bbccc97ae44092441acf1c4e08897190f269d90d174d640d338a68feba234cd9975f81aebc38c"], 0x14c}, 0x1, 0x0, 0x0, 0x28000098}, 0x24000041) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fffffffffffffff500000000000000000000000008e844f23c9b45e8f64d1ecb6cc7783a811740f6ea121903ad2f60850600d1d472be5cf0cc7cda9ae30ad788658defe1a7fa31ecdc2182b9c4520ac12011eefafb49696f7461c971a8375a15c2a17d18dd97fd1084f2dd5f1ed65c7454d46a7cd1ba8f1dbb2f8efdfc1c686baef9d14354b07fec83bd61b00ca5750e4b1561569cbf63157b7020ed431404567985fa6c409862f448860d59edbadd2d571f9bdfa0fd0dd0f100"/208], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000680)="4664fbef72192a84813fcd41c3284e6dfdddd6a89e86815f2f985969e82d91a7406c5d90561f2dffb87ba9ae32cc67170f4561f81a458c8411872ca51efeae33000000501528e29fcb2b6a27c0c2ba3fdeda80c31528c0ab67460701f452bdf8c4e8381d2b48553f150b107f153c682b7e000000000000", &(0x7f00000000c0)=""/101}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r7, &(0x7f00000002c0)="a030c27d334b162d24c0f180ffb63b7e229c33e69f87356f91784b14c151c7ee1ede40790f70fb03435d04af7c2fb3e883a497edabc365237e3a56ab7b16d6e5e51842a1d79d7211d32f4e29a2ce7464a2b26406dbc387d47a3e75820953bb3c00"/109, &(0x7f0000000440)=@buf="280abd956220551b70910b4c1b1145cc5235c854ae3f136d59c94f5565a13c49e8d08eae33bef90e982a0ffef83e1bf4913312430578591bcd08f71b22edb27a79c700133e20ee77db7fdd3996b7eec000d062a6421cdd52fd74a426cd5e56c7f01d7bc25e6b7a1393fdead1", 0x4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r7, &(0x7f00000002c0)="a030c27d334b162d24c0f180ffb63b7e229c33e69f87356f91784b14c151c7ee1ede40790f70fb03435d04af7c2fb3e883a497edabc365237e3a56ab7b16d6e5e51842a1d79d7211d32f4e29a2ce7464a2b26406dbc387d47a3e75820953bb3c00"/109, &(0x7f0000000440)=@buf="280abd956220551b70910b4c1b1145cc5235c854ae3f136d59c94f5565a13c49e8d08eae33bef90e982a0ffef83e1bf4913312430578591bcd08f71b22edb27a79c700133e20ee77db7fdd3996b7eec000d062a6421cdd52fd74a426cd5e56c7f01d7bc25e6b7a1393fdead1", 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r9], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES64=r4], 0x0, 0x3e, 0x0, 0x0, 0x8}, 0x28) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031080003400000000114000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r13, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x1, @local}, 0x5, {0x2, 0x4e21, @local}, 'veth0_to_bridge\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x84, 0x20, 0x0, 0x0) 970.965657ms ago: executing program 0 (id=3464): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40010102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 967.11352ms ago: executing program 1 (id=3465): r0 = socket(0x2a, 0x5, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e00, @private=0xa010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 945.893862ms ago: executing program 3 (id=3466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090e000000000000000000000005000600000000000a00000000000000fc00000000000000000000000000000000000000000000000200010000000000130002020000000005000500000000000a00000000000000ff0100000000000000000000000000010000ffe900000000"], 0x70}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r6, 0x0, 0x47, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@int=0x8, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="e4a6e938525a7d79aa6ceb4533", @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d000100b564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f8010800", @ANYRES16=r8, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x40c0810}, 0x10008081) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x7, 0x0, 0x0, 0x745}, {0xfffd}, {}, {0x7}, {0xfffd, 0x80}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r6], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="0000000000080003400000000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r11) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000100000005169cef47a4d68d5057204ba214ca92a05545147756ee9655cfc3c6f0b33ee2b185f901c1a8324499b8901290bf94f7bda64221e1147c9d207457f45e1c5ac611e4f1616757996dc8c27f73c84f45c252f7f95698b5f048ca2f426e203f52f2009bfdd37c9d3e25bb83a9043102993278ae6ac01c27a4da84f1c4c46232f982bb367e4d6b0d3e8848898a88f9d072a6930a8aedb77a08eb7", @ANYRES16=r12, @ANYBLOB="010002000000f9dbdf25200000000c000600010000000100000004002d80"], 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 825.770346ms ago: executing program 4 (id=3467): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xb, 0xfff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0xfffffffffffffcf7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r3, 0x346}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) 824.860769ms ago: executing program 1 (id=3468): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="e8a51b48480bfda000", 0x9) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r4, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) writev(r3, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 755.666725ms ago: executing program 0 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x787, 0xfffffff8, 0x2, {{0x3a, 0x4, 0x2, 0x7, 0xe8, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x1c, 0x0, [{0x2, 0x6, "76f53db9"}, {0x7, 0xc, "3ffba515b39d612f3e4f"}, {0x0, 0x4, "daa9"}]}, @cipso={0x86, 0x11, 0x3, [{0x0, 0xb, "3714006a739156ae33"}]}, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0xa, [0xa, 0x80, 0xfffffff7, 0xd, 0x8, 0x5]}, @timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0x0, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x2, [{@multicast1, 0x6}]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xb, "492016c3e17ba16dbd"}, {0x2, 0xb, "f5cdfa1ae1702c3c5d"}, {0x2, 0x10, "38621c5923626a3f3ef1a28ecd26"}, {0x6, 0x8, "1507595b3d54"}]}, @lsrr={0x83, 0x1b, 0x23, [@multicast1, @local, @rand_addr=0x64010102, @empty, @private=0xa010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0xe0, 0x3, 0x9, [{@empty, 0xfffffffc}, {@loopback, 0x40}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x74, 0x4, 0xfff}, {0x0, 0x1, 0xe, 0x2}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2c008081}, 0x4000020) r4 = socket(0xf, 0x6, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x808, 0x21}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x4004000) epoll_create(0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xa9, 0x7, 0x1, 0x0, "d52334f1a890f4b0ab4d5a45f30ce983dc2673be27b0b6133c005fe9e2586fee35e7cfd84389328488ff00082d9e30ee955d1e4697e78af982e43ee81a8db6b313e88b9d9ae7205cca2fe42d66c7ba882ad48a9fc6df4e610b1d661181eedc448ff35634c102f27a41923c3357110aa125438e72067fe24c05dc78ab084d1a6fce4bd4f1a76fe91e5594fc976950775facc56599e8620957637e7a10183869d159775238b0"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x364, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x210, 0x4, 0x0, 0x1, [{0x1c4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1b4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DATA={0x1a8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "89db7951cdeaa7ea3f683f87be1ee39e549bcc26b81d8dfcb92905a040ec2ce65e090c15b30f5e24ae39768fc4e51dea10be91927b925c5ade9272ba73026c60778df72082732fc1f0a20c6ef501a0ccd7b3c77a5a29de0fca5ebd23d04d1f80b0227171600cdcd7cb2520da6bf88a7df46c2ebc6a0c3d798873a2acd4050d0d4a3004e64bece7f332d91b7b9489f5670af5ba66485567d2eff8334b1f5a3dd378f899c74f3d9f50175c5365fd50b4ff494a6685111aee211cd2583d586252ac3931c91ab68a66213db0318d46924da2a9ba758070a93fc494e32130f6b7fdb622d99258c7"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6c, 0x1, "0fd599db5a6f64e3e7ec04c8bf6c596ca716a382c1e5b222ee1ab179d858421271790dc47b3ba87e7cc388e078123cc300c05accc0e06f45de86223dbc49f097e907ca99e709f446ea0ebc0583a3d466642e13bf39ecec57c366c739f9f8da2b3f4a2a3c04784ae4"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "8d62b9343efb894646c1dd9661d7279d026069aaf1ffa1c45eb101be282c47b1da0337920f7309dedbd5c6c3cc8df3a44bbb7eef7875f7bfe26f8e0404eb39a4326109d8e245604c65c0015ede8ae5a147cfe3db8ae20f235227a5db347a19df084e637fa2a7b70a297e51d133d6057361ff8188d368bc3e2e19fdd4aed9e25e454f89445d2476f048028127befc3b367532372eac70c3030bfec5eae94e42abebb8b33c49c614f487b384f22d7f058fed3f1830ad63f23a9cbc"}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x718}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "539c873eabbad80023"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4b0}, 0x1, 0x0, 0x0, 0x11}, 0x20008050) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'tproxy\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x40d4) r12 = socket$inet(0x2, 0xa, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r13, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r14, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x8040) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x2}}, @enum64={0xc, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x1, 0x4, 0x7}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @struct={0x0, 0x3, 0x0, 0x4, 0x1, 0x79, [{0x1, 0x0, 0x9}, {0xd, 0x2, 0x4}, {0x8, 0x0, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x0]}}, &(0x7f0000001000)=""/93, 0x96, 0x5d, 0x1, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x6, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @generic={0x2, 0x6, 0x2, 0x200, 0x8}]}, &(0x7f0000000ec0)='syzkaller\x00', 0xfffffff6, 0x22, &(0x7f0000000f00)=""/34, 0x41100, 0x1, '\x00', r2, 0x25, r15, 0x8, &(0x7f00000010c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001140)=[{0x0, 0x5, 0xb, 0x4}, {0x2, 0x2, 0x8, 0x2}, {0x4, 0x5, 0x3, 0x4}, {0x5, 0x4, 0x2, 0x6}], 0x10, 0x2}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001280)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r4) r17 = accept$phonet_pipe(r4, &(0x7f0000001340), &(0x7f0000001380)=0x10) ioctl$sock_inet_SIOCGIFNETMASK(r17, 0x891b, &(0x7f00000013c0)={'gretap0\x00', {0x2, 0x0, @empty}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@cgroup=r12, 0x15, 0x1, 0x9, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000001540)) 702.781908ms ago: executing program 1 (id=3470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB="a4c2c71b8f913007731867e272b0cdb1a80fd46e5dcc80007b918bb07b2906b6c56e7fb85a054ac76acb25b76cbb562dd3d4c2bdc997635d98b75ee1c70f7dad48085e9773e74e9967d803b06dc67136e7384632627bbe5e3010d4533072d9a85453e7540f22b9460aacb69ef3c752d09b00804c89270f8a4efc9152fcf177c4a349d2725d244153eac098785009b2126f0d9134d0d00add7d6f9d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 617.723707ms ago: executing program 3 (id=3471): r0 = socket(0x25, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x19, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}]}, 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept$alg(r11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000140)={r14, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000180)={r14, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) write(r12, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 601.974054ms ago: executing program 0 (id=3472): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xb, 0x1e93, 0x1a, @local, @loopback, 0x1, 0x20, 0xdbdc, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@bridge_setlink={0x3c, 0x13, 0xa2f, 0x70bd2b, 0x44000000, {0x7, 0x0, 0x68, r7, 0xf0e6dcc87d51e0e6, 0x32245}, [@IFLA_LINKINFO={0x1c, 0x1a, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @dev, @private}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r14) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r16, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)=@delchain={0x3c8, 0x65, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {0x0, 0x5}, {0xffff, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x65}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x358, 0x2, [@TCA_CGROUP_ACT={0x354, 0x1, [@m_mirred={0x18c, 0x17, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x5, 0x9f17, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x0, 0x5b8, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1e1, 0xeb, 0x10000000, 0xff9000, 0x6}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x2, 0x3, 0x9}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x7, 0x401}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x1, 0x8, 0xd, 0x7}, 0x7, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2ee, 0x9, 0x5, 0xfffffffd, 0x3}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x10000000, 0x1, 0x5}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x245e, 0x0, 0x4, 0x82e}, 0x3, r16}}]}, {0x3f, 0x6, "358a83578d762cba6727f6f0d555d3c966f7bde695f154be9ad23ebab1838d7f33709d1a06de02580140f40baaa32531f28e87b2683ccc69b434d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xf8, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x426a4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xb9, 0x6, "a55d268be2495561914585c880adc51f3c5cae829f7cb64663c728489fa24407a418f09ff16e304426ab76f20634cf2a834f06a5bdc32ac63d5955bc0c653288cd8057e6258c69588691c8621a9a0a7cce2ea5df9dbc2f7960fe7813eed0cbe1f246125a3d3efa4ea80552d5436b8c1b5f5a3a26468754bb5021f3d5c659e459315ebe57aa381da664f4a9de838ea299efab65b262d438d00fa59249061925e7a957894ede7b3079cb04d0b044a04d542d3205e3ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xcc, 0x15, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5e59f390, 0xfffffffb, 0x4, 0x8, 0x3}, @loopback, @private=0xa010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x2, 0x0, 0x5}, @empty, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xa, 0x20000000, 0x4}, @empty, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x2, 0x0, 0x2, 0x4}, @empty, @multicast2, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c8}}, 0x4000805) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x400c, r17}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 445.605915ms ago: executing program 1 (id=3473): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r4, 0x29, 0xc8, &(0x7f0000000080), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x3b8, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_IE={0x2a4, 0x2a, [@random={0x3, 0xf9, "e006284ff7f0ec9699f11484bb0662d66ad937a5bfb09c4105763169d8e74b025f3fea48ec323538242a79b0f9ac04c4aedab6336768f5f87776f7cc5978a67b754adf8f27793e826be23ab40cf340710b029d66b85f1c9920260ad1014bc83d3a6f21402d94e27eb18f2af8f0e5250dbd05acadddd4be47aabca6688a170842415ff08ee24f2b9f6996ccc678dd2ac7ac82961a0535a3ed67a3fbeea55786a0404625c8b221ac806f69293fa246c99d026ebe656a19ddfb89f4838c972069dc5db24745b05f49cca41719ec1aee4bd733d9c4befb7820720ff4f85d47f075444f49281b17022e0122ba550396cdc5f2ec7cd1232a92637439"}, @random={0xa0, 0xa7, "9c30d0cbad2ded5e298a3fae21c5982938f20e1b3c2e49ece192317970d02b6f03d5ddc4709faba31857b434f1b33de1d5b6b7af6442d9a0da6f097748ac2ebf80d30b55e5266806a20d481251a05fc40b866e9e690de82d2c41d28b17a467d934c47c19c73d1a880d093933bba849fd18f32e3a93b7de94816bfbd7167504af587b854bc4ea1ac6b82c48c94140743ddf01701bc1b459486ec6fb3c88e136ea17d73ae40fafc7"}, @random_vendor={0xdd, 0xfa, "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"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0xdc, 0x2a, [@perr={0x84, 0xce, {0x26, 0xc, [{{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x16}, {{0x0, 0x1}, @broadcast, 0x72, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_b, 0xa21f, @value=@broadcast, 0x2f}, {{}, @device_a, 0x2, @void, 0x19}, {{}, @device_b, 0x3, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0xfffffffb, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_b, 0x8c, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x14}, {{}, @device_a, 0x5, @void, 0x22}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x31}, {{}, @broadcast, 0xea53, @void, 0x10}]}}, @mesh_chsw={0x76, 0x6, {0x1, 0x4, 0x3f, 0x8}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x1814}, 0x4040010) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRESHEX, @ANYBLOB="e3e21a04ecab13ec24d0100f8bd80e5df1f82a28302d2deb2fd83d1378c0bcb0b421ddeac6e760902d6c7d0ae1cf6d17d0765b4cb4870c7399039a68a7794deab9b77ec71351d32b7bc0e4b3a707af273945a2e3a6158a31592485901b71dd0d03017baa3386c44785c9f42207ad8a17"], 0x1c}}, 0x8004) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="414601", @ANYBLOB="b2"], 0x4) 245.428334ms ago: executing program 2 (id=3474): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) (async) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x20000000, @remote, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="5bf26fda", 0x4}], 0x1}}], 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) shutdown(r0, 0x1) (async) r3 = socket$packet(0x11, 0x3, 0x300) accept$packet(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x14) 244.221499ms ago: executing program 3 (id=3475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4011) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x434, 0x3f4, 0x1, 0x70bd2c, 0x25dfdbfd, {0x6, 0x0, 0x2c, [0x10001, 0x1, 0x707c2e7d, 0x5, 0x2, 0x80000001, 0x101, 0x8001, 0xa0a, 0x61e3, 0x8001, 0x1, 0x0, 0x3, 0x2ba8, 0x7fffffff, 0x7fffffff, 0x4, 0x9, 0xfffffffd, 0x7, 0x0, 0x8000, 0xffffffff, 0x8, 0x5, 0x4, 0x401, 0x0, 0x1, 0xf363, 0x9, 0x6, 0x5, 0x8, 0x1, 0x4, 0x0, 0xad, 0x9, 0x1, 0x0, 0xf9e, 0x8, 0x2, 0x4, 0x5, 0x0, 0xff, 0x100, 0x3, 0x6, 0xffffffc0, 0x0, 0x1, 0x4, 0xfffffffe, 0x8001, 0x7, 0x5, 0x0, 0x5, 0x400000], [0x2000000, 0x3, 0x8, 0x5, 0x8, 0x0, 0x1, 0x3, 0x4, 0x7ff, 0x80, 0x6, 0x80000001, 0x3, 0xc, 0x3, 0x5, 0xd11, 0x10001, 0x22d4, 0xb3, 0x10001, 0xbe1, 0xfffffffb, 0x9, 0x6, 0xc, 0x5, 0x5, 0x7fffffff, 0x1, 0x7, 0x4, 0xcfbb, 0x4, 0x7, 0x0, 0x8, 0x2, 0xfffffff8, 0xfffffffd, 0x3, 0xfffffffe, 0x1b0, 0x81, 0x5, 0x9, 0xfffff4cb, 0x4, 0x120, 0x1, 0x5, 0x4, 0x2, 0xc, 0x8, 0x1000, 0x7fff, 0x4, 0x1, 0x6, 0x81, 0x4476, 0x401], [0xdeb, 0x100, 0x2, 0x10, 0x80, 0x6, 0x3ff, 0x9, 0x94b, 0x6, 0x3d, 0x0, 0x9, 0xd6, 0x8, 0x22d8, 0x4, 0x9, 0x3, 0x7, 0x8000, 0x7fffffff, 0x2, 0x7, 0x3ff, 0x9, 0x7ff, 0x5, 0x39e, 0xd9d, 0x9, 0x7f, 0x2, 0x6, 0x10000, 0x2, 0x3, 0x3, 0xffffffff, 0x6, 0x0, 0x10000, 0x1ff, 0x9, 0x1, 0x80, 0x7, 0x2, 0x7, 0x8, 0x7, 0x2, 0x2, 0x5, 0x10, 0x1, 0x3, 0x5, 0x0, 0xafe, 0xd, 0xffffffff, 0x72f8bb3e, 0x1], [0x4000000, 0x2, 0x9, 0xfffffffa, 0x23, 0x5, 0x75, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x8, 0x7, 0x1, 0x0, 0x0, 0x9c3, 0xa, 0x100, 0x7fff, 0x0, 0x3, 0x3, 0x4, 0x7800, 0xb, 0x6a, 0x401, 0x2, 0x2, 0x8, 0xfffffff8, 0x2, 0x4, 0x8, 0x8, 0x8, 0x52, 0x9, 0x1, 0xea9, 0x4, 0x9, 0x6, 0x8, 0xffffffff, 0x180b, 0x80000001, 0x8, 0x2, 0x4, 0x3ff, 0xffff, 0x4, 0x3, 0x0, 0x6, 0x1, 0x6, 0xbe, 0x7000000], 0x13, ['syz0\x00', 'syz0\x00', '\x00', '\x00', '\'\x00', '*]%&\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x1}, 0x40042) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4011) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x434, 0x3f4, 0x1, 0x70bd2c, 0x25dfdbfd, {0x6, 0x0, 0x2c, [0x10001, 0x1, 0x707c2e7d, 0x5, 0x2, 0x80000001, 0x101, 0x8001, 0xa0a, 0x61e3, 0x8001, 0x1, 0x0, 0x3, 0x2ba8, 0x7fffffff, 0x7fffffff, 0x4, 0x9, 0xfffffffd, 0x7, 0x0, 0x8000, 0xffffffff, 0x8, 0x5, 0x4, 0x401, 0x0, 0x1, 0xf363, 0x9, 0x6, 0x5, 0x8, 0x1, 0x4, 0x0, 0xad, 0x9, 0x1, 0x0, 0xf9e, 0x8, 0x2, 0x4, 0x5, 0x0, 0xff, 0x100, 0x3, 0x6, 0xffffffc0, 0x0, 0x1, 0x4, 0xfffffffe, 0x8001, 0x7, 0x5, 0x0, 0x5, 0x400000], [0x2000000, 0x3, 0x8, 0x5, 0x8, 0x0, 0x1, 0x3, 0x4, 0x7ff, 0x80, 0x6, 0x80000001, 0x3, 0xc, 0x3, 0x5, 0xd11, 0x10001, 0x22d4, 0xb3, 0x10001, 0xbe1, 0xfffffffb, 0x9, 0x6, 0xc, 0x5, 0x5, 0x7fffffff, 0x1, 0x7, 0x4, 0xcfbb, 0x4, 0x7, 0x0, 0x8, 0x2, 0xfffffff8, 0xfffffffd, 0x3, 0xfffffffe, 0x1b0, 0x81, 0x5, 0x9, 0xfffff4cb, 0x4, 0x120, 0x1, 0x5, 0x4, 0x2, 0xc, 0x8, 0x1000, 0x7fff, 0x4, 0x1, 0x6, 0x81, 0x4476, 0x401], [0xdeb, 0x100, 0x2, 0x10, 0x80, 0x6, 0x3ff, 0x9, 0x94b, 0x6, 0x3d, 0x0, 0x9, 0xd6, 0x8, 0x22d8, 0x4, 0x9, 0x3, 0x7, 0x8000, 0x7fffffff, 0x2, 0x7, 0x3ff, 0x9, 0x7ff, 0x5, 0x39e, 0xd9d, 0x9, 0x7f, 0x2, 0x6, 0x10000, 0x2, 0x3, 0x3, 0xffffffff, 0x6, 0x0, 0x10000, 0x1ff, 0x9, 0x1, 0x80, 0x7, 0x2, 0x7, 0x8, 0x7, 0x2, 0x2, 0x5, 0x10, 0x1, 0x3, 0x5, 0x0, 0xafe, 0xd, 0xffffffff, 0x72f8bb3e, 0x1], [0x4000000, 0x2, 0x9, 0xfffffffa, 0x23, 0x5, 0x75, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x200, 0x8, 0x7, 0x1, 0x0, 0x0, 0x9c3, 0xa, 0x100, 0x7fff, 0x0, 0x3, 0x3, 0x4, 0x7800, 0xb, 0x6a, 0x401, 0x2, 0x2, 0x8, 0xfffffff8, 0x2, 0x4, 0x8, 0x8, 0x8, 0x52, 0x9, 0x1, 0xea9, 0x4, 0x9, 0x6, 0x8, 0xffffffff, 0x180b, 0x80000001, 0x8, 0x2, 0x4, 0x3ff, 0xffff, 0x4, 0x3, 0x0, 0x6, 0x1, 0x6, 0xbe, 0x7000000], 0x13, ['syz0\x00', 'syz0\x00', '\x00', '\x00', '\'\x00', '*]%&\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x1}, 0x40042) (async) 240.347268ms ago: executing program 1 (id=3476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x9, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {}, {0xa, 0xd}}, [{0x8, 0xb, 0x10b60046}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x404c8a5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x8d, 0xffffffff, 0x6, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0xd271a5ca1ecc3739, 0x7, 0x9}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bc01000008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x0, 0x40, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x6, 0x7}}) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r18, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x190, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x190}}, 0x20000085) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) 225.606704ms ago: executing program 2 (id=3477): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'macsec0\x00', @random="c87bcfded0d4"}) (async, rerun: 32) write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x2a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x2a}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac9"}}}}}}}, 0x50) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={r5}, &(0x7f0000000340)=0x8) (async) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x100, 0x70bd28, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 93.104483ms ago: executing program 3 (id=3478): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 51.029283ms ago: executing program 3 (id=3479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070800000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000140003801000008008000340000001"], 0xc4}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x8000, 0x3, 0x1, 0x236, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xa7, 0xa, 0x9, 0x0, 0x7, 0x9, 0x8}}, {0x14, 0x2, [0x6, 0x1, 0x1, 0x1, 0x9, 0x7ff, 0xb4, 0x3]}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x440cc}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf25060000000800050004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100fcfffffffcdbdf2500bf8ca3bd0000000000000000000000fe8000000000000000000000000000bb000000004e2000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000080000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 0s ago: executing program 2 (id=3480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}]}}}]}, 0x3c}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x128, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}]}]}, 0x128}}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 113110][T11096] ? __asan_memcpy+0x40/0x70 [ 196.113128][T11096] ? __pfx_ref_tracker_free+0x10/0x10 [ 196.113170][T11096] ? skb_clone+0x246/0x3a0 [ 196.113192][T11096] ? __netlink_deliver_tap+0x807/0x850 [ 196.113220][T11096] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.113264][T11096] netlink_unicast+0x82c/0x9e0 [ 196.113294][T11096] ? __pfx_netlink_unicast+0x10/0x10 [ 196.113317][T11096] ? netlink_sendmsg+0x642/0xb30 [ 196.113331][T11096] ? skb_put+0x11b/0x210 [ 196.113351][T11096] netlink_sendmsg+0x805/0xb30 [ 196.113376][T11096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.113396][T11096] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.113413][T11096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.113431][T11096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.113447][T11096] __sock_sendmsg+0x21c/0x270 [ 196.113469][T11096] ____sys_sendmsg+0x505/0x830 [ 196.113493][T11096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.113520][T11096] ? import_iovec+0x74/0xa0 [ 196.113541][T11096] ___sys_sendmsg+0x21f/0x2a0 [ 196.113560][T11096] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.113612][T11096] ? __fget_files+0x2a/0x420 [ 196.113626][T11096] ? __fget_files+0x3a0/0x420 [ 196.113655][T11096] __x64_sys_sendmsg+0x19b/0x260 [ 196.113676][T11096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.113704][T11096] ? __pfx_ksys_write+0x10/0x10 [ 196.113721][T11096] ? rcu_is_watching+0x15/0xb0 [ 196.113744][T11096] ? do_syscall_64+0xbe/0x3b0 [ 196.113764][T11096] do_syscall_64+0xfa/0x3b0 [ 196.113778][T11096] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.113798][T11096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.113814][T11096] ? clear_bhb_loop+0x60/0xb0 [ 196.113833][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.113849][T11096] RIP: 0033:0x7f22c778ebe9 [ 196.113864][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.113877][T11096] RSP: 002b:00007f22c8688038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.113894][T11096] RAX: ffffffffffffffda RBX: 00007f22c79c5fa0 RCX: 00007f22c778ebe9 [ 196.113906][T11096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.113917][T11096] RBP: 00007f22c8688090 R08: 0000000000000000 R09: 0000000000000000 [ 196.113927][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.113936][T11096] R13: 00007f22c79c6038 R14: 00007f22c79c5fa0 R15: 00007ffde71a1398 [ 196.113964][T11096] [ 196.842582][T11111] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 196.867791][T11116] netlink: 'syz.2.1486': attribute type 2 has an invalid length. [ 196.875988][T11116] nbd: must specify at least one socket [ 197.031210][T11132] xt_l2tp: missing protocol rule (udp|l2tpip) [ 197.288318][T11146] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 197.362455][T11152] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 197.389158][T11152] __nla_validate_parse: 16 callbacks suppressed [ 197.389172][T11152] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1500'. [ 197.421212][T11152] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 197.432298][T11153] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 197.470048][T11153] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1500'. [ 197.504189][T11153] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 197.653982][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 197.845231][T11175] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 197.865192][T11176] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 197.867025][T11180] : renamed from hsr0 (while UP) [ 197.880047][T11181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1510'. [ 197.883896][T11183] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1512'. [ 197.986875][T11180] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.029547][T11179] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.048197][T11179] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 198.069840][T11192] nbd: couldn't find a device at index -373156329 [ 198.152203][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 198.450429][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 198.715109][T11232] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1524'. [ 198.724243][T11232] xt_policy: neither incoming nor outgoing policy selected [ 198.737462][ T24] IPVS: starting estimator thread 0... [ 198.739262][T11232] netlink: 'syz.4.1524': attribute type 11 has an invalid length. [ 198.760130][T11232] netlink: 'syz.4.1524': attribute type 11 has an invalid length. [ 198.773092][T11232] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1524'. [ 198.820359][T11237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.841534][T11234] IPVS: using max 29 ests per chain, 69600 per kthread [ 198.902813][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'. [ 199.043228][T11248] sctp: [Deprecated]: syz.1.1527 (pid 11248) Use of int in max_burst socket option. [ 199.043228][T11248] Use struct sctp_assoc_value instead [ 199.158453][T11261] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 199.220508][T11261] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 199.268489][T11259] team0: Device gtp0 is of different type [ 199.392824][T11271] team0: Device ip6gre2 is of different type [ 199.515620][T11286] FAULT_INJECTION: forcing a failure. [ 199.515620][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.526901][T11289] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 199.535308][T11286] CPU: 0 UID: 0 PID: 11286 Comm: syz.1.1538 Not tainted syzkaller #0 PREEMPT(full) [ 199.535329][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.535339][T11286] Call Trace: [ 199.535346][T11286] [ 199.535353][T11286] dump_stack_lvl+0x189/0x250 [ 199.535377][T11286] ? __pfx____ratelimit+0x10/0x10 [ 199.535400][T11286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.535419][T11286] ? __pfx__printk+0x10/0x10 [ 199.535439][T11286] ? __might_fault+0xb0/0x130 [ 199.535471][T11286] should_fail_ex+0x414/0x560 [ 199.535496][T11286] _copy_from_user+0x2d/0xb0 [ 199.535516][T11286] ___sys_sendmsg+0x158/0x2a0 [ 199.535537][T11286] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.535590][T11286] ? __fget_files+0x2a/0x420 [ 199.535604][T11286] ? __fget_files+0x3a0/0x420 [ 199.535628][T11286] __x64_sys_sendmsg+0x19b/0x260 [ 199.535648][T11286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.535676][T11286] ? __pfx_ksys_write+0x10/0x10 [ 199.535701][T11286] ? do_syscall_64+0xbe/0x3b0 [ 199.535720][T11286] do_syscall_64+0xfa/0x3b0 [ 199.535736][T11286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.535751][T11286] ? asm_sysvec_call_function_single+0x1a/0x20 [ 199.535766][T11286] ? clear_bhb_loop+0x60/0xb0 [ 199.535786][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.535801][T11286] RIP: 0033:0x7f5d8c18ebe9 [ 199.535815][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.535828][T11286] RSP: 002b:00007f5d8d01a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.535845][T11286] RAX: ffffffffffffffda RBX: 00007f5d8c3c5fa0 RCX: 00007f5d8c18ebe9 [ 199.535857][T11286] RDX: 0000000000000800 RSI: 0000200000002e80 RDI: 0000000000000003 [ 199.535867][T11286] RBP: 00007f5d8d01a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.535877][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.535886][T11286] R13: 00007f5d8c3c6038 R14: 00007f5d8c3c5fa0 R15: 00007ffe6896c9d8 [ 199.535913][T11286] [ 199.782524][T11273] team0: Device ip6gre2 is of different type [ 200.206274][T11320] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 200.210757][T11321] tipc: New replicast peer: 255.255.255.255 [ 200.229589][T11321] tipc: Enabled bearer , priority 10 [ 200.285189][T11320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.346225][T11328] FAULT_INJECTION: forcing a failure. [ 200.346225][T11328] name failslab, interval 1, probability 0, space 0, times 0 [ 200.372814][T11328] CPU: 1 UID: 0 PID: 11328 Comm: syz.3.1550 Not tainted syzkaller #0 PREEMPT(full) [ 200.372835][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.372844][T11328] Call Trace: [ 200.372851][T11328] [ 200.372859][T11328] dump_stack_lvl+0x189/0x250 [ 200.372883][T11328] ? __pfx____ratelimit+0x10/0x10 [ 200.372905][T11328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.372923][T11328] ? __pfx__printk+0x10/0x10 [ 200.372949][T11328] ? __pfx___might_resched+0x10/0x10 [ 200.372969][T11328] should_fail_ex+0x414/0x560 [ 200.372994][T11328] should_failslab+0xa8/0x100 [ 200.373016][T11328] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.373037][T11328] ? __alloc_skb+0x112/0x2d0 [ 200.373062][T11328] __alloc_skb+0x112/0x2d0 [ 200.373082][T11328] netlink_sendmsg+0x5c6/0xb30 [ 200.373106][T11328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.373124][T11328] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.373142][T11328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.373158][T11328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.373175][T11328] __sock_sendmsg+0x21c/0x270 [ 200.373204][T11328] ____sys_sendmsg+0x505/0x830 [ 200.373228][T11328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.373254][T11328] ? import_iovec+0x74/0xa0 [ 200.373275][T11328] ___sys_sendmsg+0x21f/0x2a0 [ 200.373294][T11328] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.373347][T11328] ? __fget_files+0x2a/0x420 [ 200.373362][T11328] ? __fget_files+0x3a0/0x420 [ 200.373386][T11328] __x64_sys_sendmsg+0x19b/0x260 [ 200.373407][T11328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.373435][T11328] ? __pfx_ksys_write+0x10/0x10 [ 200.373454][T11328] ? rcu_is_watching+0x15/0xb0 [ 200.373476][T11328] ? do_syscall_64+0xbe/0x3b0 [ 200.373496][T11328] do_syscall_64+0xfa/0x3b0 [ 200.373510][T11328] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.373531][T11328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.373547][T11328] ? clear_bhb_loop+0x60/0xb0 [ 200.373567][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.373582][T11328] RIP: 0033:0x7f4d5118ebe9 [ 200.373601][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.373614][T11328] RSP: 002b:00007f4d51f5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.373632][T11328] RAX: ffffffffffffffda RBX: 00007f4d513c5fa0 RCX: 00007f4d5118ebe9 [ 200.373644][T11328] RDX: 0000000000000800 RSI: 0000200000002e80 RDI: 0000000000000003 [ 200.373654][T11328] RBP: 00007f4d51f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.373664][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.373674][T11328] R13: 00007f4d513c6038 R14: 00007f4d513c5fa0 R15: 00007ffe6a2dc698 [ 200.373703][T11328] [ 200.376898][T11326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.660939][T11326] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.688729][T11326] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 201.236614][T11360] tipc: Invalid UDP bearer configuration [ 201.236668][T11360] tipc: Enabling of bearer rejected, failed to enable media [ 201.356933][ T5915] tipc: Node number set to 4292429956 [ 201.491239][T11370] gre0: entered promiscuous mode [ 201.643358][T11377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.800995][T11383] tipc: Enabled bearer , priority 0 [ 201.810941][T11383] syzkaller0: entered promiscuous mode [ 201.819914][T11383] syzkaller0: entered allmulticast mode [ 201.876004][T11383] tipc: Resetting bearer [ 201.907249][T11382] tipc: Resetting bearer [ 201.957939][T11382] tipc: Disabling bearer [ 202.053228][T11391] vlan3: entered allmulticast mode [ 202.084872][T11391] hsr0: entered allmulticast mode [ 202.100361][T11391] hsr_slave_0: entered allmulticast mode [ 202.129011][T11391] hsr_slave_1: entered allmulticast mode [ 202.220922][T11399] netlink: 'syz.4.1578': attribute type 5 has an invalid length. [ 202.427915][T11411] __nla_validate_parse: 13 callbacks suppressed [ 202.427932][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 202.816434][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 202.846819][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1592'. [ 202.858398][T11447] gre4: entered promiscuous mode [ 202.863358][T11447] gre4: entered allmulticast mode [ 202.968735][T11447] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 203.026827][T11458] netlink: 'syz.4.1594': attribute type 16 has an invalid length. [ 203.035090][T11458] netlink: 'syz.4.1594': attribute type 27 has an invalid length. [ 203.121621][ T5184] Bluetooth: hci4: link tx timeout [ 203.130491][ T5184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.159788][T11460] vlan2: entered promiscuous mode [ 203.173478][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 203.208982][T11465] netlink: 'syz.4.1597': attribute type 3 has an invalid length. [ 203.217378][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 203.369198][T11480] geneve2: entered promiscuous mode [ 203.374410][T11480] geneve2: entered allmulticast mode [ 203.441697][T11483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.251129][T11501] syz.3.1607 uses old SIOCAX25GETINFO [ 204.263300][T11506] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1604'. [ 205.149226][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1618'. [ 205.205349][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 205.242413][T11548] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 205.286269][T11548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.322893][T11548] bond4: (slave gretap0): making interface the new active one [ 205.332039][T11548] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 205.413935][T11563] unsupported nla_type 52263 [ 205.592566][T11575] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 205.608041][T11575] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 205.628198][T11575] tipc: Resetting bearer [ 205.660786][T11582] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 205.672893][T11582] netlink: 'syz.4.1630': attribute type 2 has an invalid length. [ 205.694239][T11584] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1629'. [ 205.814135][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 205.872556][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 206.037661][T11602] xt_l2tp: missing protocol rule (udp|l2tpip) [ 206.206501][T11605] block nbd0: not configured, cannot reconfigure [ 206.216568][T11607] netlink: 'syz.2.1638': attribute type 21 has an invalid length. [ 206.352813][T11611] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.538279][T11592] team0 (unregistering): Port device team_slave_0 removed [ 206.571465][T11592] team0 (unregistering): Port device team_slave_1 removed [ 206.632679][T11607] netlink: 'syz.2.1638': attribute type 5 has an invalid length. [ 207.692399][T11688] netlink: 'syz.3.1662': attribute type 2 has an invalid length. [ 207.702309][T11688] __nla_validate_parse: 7 callbacks suppressed [ 207.702322][T11688] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1662'. [ 207.749541][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 207.774616][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 207.804665][ T7003] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.824179][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 207.833150][ T7003] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.854806][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 207.858181][ T7003] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.872868][ T7003] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.398538][T11717] macsec1: entered promiscuous mode [ 208.404187][T11717] macsec1: entered allmulticast mode [ 208.641056][T11734] tipc: Enabled bearer , priority 0 [ 208.653003][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 208.658457][T11734] syzkaller0: entered promiscuous mode [ 208.662556][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1679'. [ 208.670229][T11734] syzkaller0: entered allmulticast mode [ 208.719331][T11734] tipc: Resetting bearer [ 208.729515][T11734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.737828][T11734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.755701][T11733] tipc: Resetting bearer [ 208.780971][T11733] tipc: Disabling bearer [ 208.940844][T11745] netlink: 'syz.0.1683': attribute type 21 has an invalid length. [ 208.949557][T11745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1683'. [ 208.962658][T11747] netlink: 'syz.0.1683': attribute type 21 has an invalid length. [ 208.971405][T11747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1683'. [ 209.184179][T11763] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1687'. [ 209.336456][T11775] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 209.398878][T11778] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 209.407874][T11778] 0ªî{X¹¦: entered allmulticast mode [ 209.413535][T11778] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 209.726316][T11794] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 210.212999][T11822] netlink: 'syz.1.1704': attribute type 4 has an invalid length. [ 210.234428][T11770] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.708700][T11855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 211.001813][T11875] xt_l2tp: missing protocol rule (udp|l2tpip) [ 211.743106][T11925] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.985378][T11940] erspan0: entered promiscuous mode [ 212.020692][T11940] erspan0: entered allmulticast mode [ 212.459418][T11968] tipc: Enabled bearer , priority 0 [ 212.468279][T11968] syzkaller0: entered promiscuous mode [ 212.473831][T11968] syzkaller0: entered allmulticast mode [ 212.514870][T11968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 212.625407][T11968] tipc: Resetting bearer [ 212.662494][T11967] tipc: Resetting bearer [ 212.789226][T11967] tipc: Disabling bearer [ 212.874648][T11994] sctp: [Deprecated]: syz.3.1757 (pid 11994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.874648][T11994] Use struct sctp_sack_info instead [ 212.983705][T12005] __nla_validate_parse: 14 callbacks suppressed [ 212.983722][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 213.013129][T12005] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 213.114033][T12005] gretap0: entered promiscuous mode [ 213.123329][T12005] bond3: (slave gretap0): making interface the new active one [ 213.132130][T12005] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 213.151080][T12012] bond0: entered promiscuous mode [ 213.278894][T12018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1764'. [ 213.412562][T12025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1767'. [ 213.668498][T12043] bond3: (slave veth0_to_bond): Releasing active interface [ 213.688291][T12043] bond0: (slave bond_slave_0): Releasing backup interface [ 213.703573][T12043] bond0: (slave bond_slave_1): Releasing backup interface [ 213.760282][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 213.778918][T12047] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 213.782186][T12043] team0: Port device team_slave_0 removed [ 213.788677][T12048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 213.797628][T12047] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1774'. [ 213.825464][T12043] team0: Port device team_slave_1 removed [ 213.851297][T12043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.862758][T12043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.874012][T12043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.894717][T12043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.927132][T12043] bond0: (slave wlan1): Releasing backup interface [ 213.965075][T12043] tipc: Resetting bearer [ 213.974061][T12043] bond3: (slave veth3): Releasing active interface [ 214.022776][T12045] tipc: Resetting bearer [ 214.037740][T12055] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 214.335352][T12074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1781'. [ 214.378053][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1781'. [ 214.392094][T12080] netlink: 'syz.0.1783': attribute type 13 has an invalid length. [ 214.457723][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 214.557188][T12092] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1787'. [ 214.571963][T12092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.628264][T12096] tipc: Resetting bearer [ 215.887759][T12143] tipc: Enabled bearer , priority 0 [ 215.902037][T12141] xfrm0: entered allmulticast mode [ 215.940618][T12141] tipc: Resetting bearer [ 216.055284][T12138] tipc: Disabling bearer [ 216.069320][T12160] tipc: Enabled bearer , priority 0 [ 216.207148][T12174] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 216.965490][T12216] veth0_to_bridge: entered promiscuous mode [ 216.975454][T12215] veth0_to_bridge: left promiscuous mode [ 217.089868][T12227] sctp: [Deprecated]: syz.0.1822 (pid 12227) Use of int in maxseg socket option. [ 217.089868][T12227] Use struct sctp_assoc_value instead [ 217.181095][T12227] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 217.194697][ T10] tipc: Node number set to 4269801514 [ 217.338966][T12234] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 217.363789][T12234] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 217.397288][T12234] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 217.917638][T12263] netlink: 'syz.3.1833': attribute type 5 has an invalid length. [ 217.996954][T12262] netlink: 'syz.2.1834': attribute type 27 has an invalid length. [ 218.020168][T12265] syzkaller1: entered promiscuous mode [ 218.042062][T12265] syzkaller1: entered allmulticast mode [ 218.081875][T12273] __nla_validate_parse: 11 callbacks suppressed [ 218.081891][T12273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1838'. [ 218.233682][T12280] tipc: Resetting bearer [ 218.297468][T12280] tipc: Resetting bearer [ 218.389280][T12286] syzkaller0: entered promiscuous mode [ 218.391476][T12289] netlink: 'syz.4.1844': attribute type 2 has an invalid length. [ 218.399602][T12286] syzkaller0: entered allmulticast mode [ 218.402665][T12289] netlink: 'syz.4.1844': attribute type 8 has an invalid length. [ 218.432471][T12289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1844'. [ 218.505979][T12290] tipc: Enabled bearer , priority 0 [ 218.552521][T12286] tipc: Resetting bearer [ 218.587173][T12285] tipc: Resetting bearer [ 218.677920][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 219.054195][T12314] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1850'. [ 219.576585][ T24] tipc: Node number set to 3769511461 [ 220.062131][T12285] tipc: Disabling bearer [ 220.081905][T12308] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 220.182187][T12323] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.206781][T12304] syzkaller0: entered promiscuous mode [ 220.218338][T12304] syzkaller0: entered allmulticast mode [ 221.651371][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 221.673072][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 221.690682][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'. [ 221.718977][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1859'. [ 221.780104][T12349] pimreg: entered allmulticast mode [ 221.863675][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'. [ 221.982973][T12358] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.032720][T12360] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1865'. [ 222.327971][T12377] pim6reg: entered allmulticast mode [ 222.338249][T12377] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 222.350439][T12377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.790179][T12408] tipc: Enabled bearer , priority 0 [ 222.844929][T12407] syzkaller0: entered promiscuous mode [ 222.850431][T12407] syzkaller0: entered allmulticast mode [ 222.919351][T12407] tipc: Resetting bearer [ 222.958460][T12416] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.971086][T12406] tipc: Resetting bearer [ 223.026558][T12406] tipc: Disabling bearer [ 223.109234][T12422] erspan0: entered promiscuous mode [ 223.114479][T12422] erspan0: entered allmulticast mode [ 223.674905][T12450] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 223.720362][T12450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.773106][T12418] netlink: 'syz.1.1884': attribute type 13 has an invalid length. [ 223.780406][T12450] vlan4: entered promiscuous mode [ 223.786969][T12450] bond4: entered promiscuous mode [ 223.792196][T12450] vlan4: entered allmulticast mode [ 223.799814][T12450] bond4: entered allmulticast mode [ 223.800734][T12418] netlink: 'syz.1.1884': attribute type 17 has an invalid length. [ 223.873496][T12418] lo: left promiscuous mode [ 223.913720][T12418] lo: left allmulticast mode [ 223.952073][T12418] tunl0: left promiscuous mode [ 223.959113][T12418] gre0: left promiscuous mode [ 223.972822][T12418] 0ªî{X¹¦: left promiscuous mode [ 223.988452][T12418] erspan0: left promiscuous mode [ 223.999012][T12418] ip_vti0: left promiscuous mode [ 224.012083][T12418] bond0: left promiscuous mode [ 224.020970][T12472] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 224.082398][T12418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.101350][T12472] veth1_macvtap: left promiscuous mode [ 224.382851][T12483] __nla_validate_parse: 2 callbacks suppressed [ 224.382870][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 224.422504][ T5923] IPVS: starting estimator thread 0... [ 224.479532][T12486] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1902'. [ 224.499619][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1903'. [ 224.534828][T12487] IPVS: using max 29 ests per chain, 69600 per kthread [ 224.558361][T12491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1904'. [ 224.571429][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1904'. [ 224.618495][T12494] ip6gre2: entered allmulticast mode [ 225.179978][T12528] sock: sock_set_timeout: `syz.3.1917' (pid 12528) tries to set negative timeout [ 225.540984][T12548] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 225.775154][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1925'. [ 225.854090][T12564] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 225.895530][T12564] netlink: 'syz.1.1927': attribute type 4 has an invalid length. [ 225.903285][T12564] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1927'. [ 225.956905][T12564] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1927'. [ 225.966466][T12564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1927'. [ 225.974341][T12571] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1930'. [ 225.983821][T12566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 226.004887][T12570] ipvlan0: entered promiscuous mode [ 226.214696][T12583] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 226.254361][T12591] netlink: 'syz.4.1935': attribute type 83 has an invalid length. [ 226.413513][T12593] sock: sock_set_timeout: `syz.3.1936' (pid 12593) tries to set negative timeout [ 227.153479][T12640] netlink: 'syz.2.1948': attribute type 29 has an invalid length. [ 227.352669][T12656] sock: sock_set_timeout: `syz.0.1952' (pid 12656) tries to set negative timeout [ 227.581877][T12668] batadv_slave_0: entered promiscuous mode [ 227.590088][T12668] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 227.597981][T12668] netlink: 'syz.3.1957': attribute type 4 has an invalid length. [ 227.614151][T12668] NCSI netlink: No device for ifindex 458760 [ 227.745493][T12683] netlink: 'syz.4.1962': attribute type 7 has an invalid length. [ 227.853333][T12683] : entered promiscuous mode [ 227.878306][T12685] veth0: entered promiscuous mode [ 227.929032][T12666] batadv_slave_0: left promiscuous mode [ 227.960600][T12685] veth0: left promiscuous mode [ 228.301216][T12720] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 228.359107][T12728] veth1_to_bond: entered promiscuous mode [ 228.482445][T12728] veth1_to_bond: left promiscuous mode [ 228.523298][T12739] team0: Device gtp0 is of different type [ 228.618729][T12746] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 228.733440][T12746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.796954][T12753] netlink: 'syz.1.1981': attribute type 10 has an invalid length. [ 228.815070][T12755] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 228.971506][T12765] : renamed from bridge_slave_0 (while UP) [ 229.082510][T12768] netlink: 'syz.4.1986': attribute type 1 has an invalid length. [ 229.172859][T12768] bond9: entered promiscuous mode [ 229.178803][T12768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.374040][T12768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 229.386893][T12768] bond9: (slave bond10): making interface the new active one [ 229.394443][T12768] bond10: entered promiscuous mode [ 229.405656][T12768] bond9: (slave bond10): Enslaving as an active interface with an up link [ 229.557506][T12796] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 229.711745][T12801] syzkaller1: entered promiscuous mode [ 229.719000][T12801] syzkaller1: entered allmulticast mode [ 229.799943][T12807] bond0: option mode: unable to set because the bond device has slaves [ 229.859168][T12809] syzkaller0: entered promiscuous mode [ 229.864874][T12809] syzkaller0: entered allmulticast mode [ 230.041263][T12829] __nla_validate_parse: 77 callbacks suppressed [ 230.041281][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2002'. [ 230.303199][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 231.615970][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 231.725222][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 232.118391][T12883] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.131537][T12883] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 232.139421][T12883] tipc: Resetting bearer [ 232.147715][T12883] tipc: Resetting bearer [ 232.176748][T12887] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 232.329153][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 232.376074][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 232.659244][T12909] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.2026'. [ 232.762528][T12911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2027'. [ 232.790249][T12916] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2029'. [ 232.800370][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 232.864159][T12920] bond0: entered promiscuous mode [ 232.901276][T12920] bond_slave_1: entered promiscuous mode [ 232.920447][T12920] hsr1: entered promiscuous mode [ 233.856353][T12978] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 233.869601][T12977] IPVS: stopping backup sync thread 12978 ... [ 234.188947][T12994] netlink: 'syz.0.2052': attribute type 7 has an invalid length. [ 234.252318][T12994] : entered promiscuous mode [ 234.828425][T13040] delete_channel: no stack [ 235.054294][T13048] bond6: entered promiscuous mode [ 235.060567][T13048] bond6: entered allmulticast mode [ 235.066147][T13048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.237145][T13066] tipc: Enabled bearer , priority 10 [ 235.267889][T13075] __nla_validate_parse: 5 callbacks suppressed [ 235.267906][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 235.537943][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2079'. [ 235.570567][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2079'. [ 235.669133][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 235.680244][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'. [ 235.696032][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'. [ 235.906247][T13111] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 235.962433][T13114] netlink: 211032 bytes leftover after parsing attributes in process `syz.1.2084'. [ 236.082976][T13122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.193452][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 236.371239][T13127] hsr_slave_1 (unregistering): left promiscuous mode [ 236.614127][T13159] tipc: Enabling of bearer rejected, failed to enable media [ 236.634459][T13153] tipc: Enabled bearer , priority 0 [ 236.662737][T13158] batadv_slave_0: entered allmulticast mode [ 236.670307][T13158] ieee802154 phy1 wpan1: encryption failed: -90 [ 236.677618][T13157] batadv_slave_0: left allmulticast mode [ 236.695987][T13153] syzkaller0: entered promiscuous mode [ 236.737445][T13153] syzkaller0: entered allmulticast mode [ 236.800294][T13153] tipc: Resetting bearer [ 236.878924][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'. [ 236.893490][T13153] tipc: Disabling bearer [ 237.040596][T13195] xt_l2tp: missing protocol rule (udp|l2tpip) [ 237.246371][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 237.379258][T13217] netlink: 'syz.3.2111': attribute type 23 has an invalid length. [ 237.612814][T13232] IPv6: sit1: Disabled Multicast RS [ 237.776432][T13244] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 237.790861][T13244] openvswitch: netlink: Message has 6332 unknown bytes. [ 238.890841][T13312] netlink: 'syz.2.2142': attribute type 83 has an invalid length. [ 239.201824][T13330] veth0: entered promiscuous mode [ 239.319839][T13326] veth0: left promiscuous mode [ 239.346932][T13323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.673623][T13352] netlink: 'syz.4.2155': attribute type 3 has an invalid length. [ 239.708960][T13352] netlink: 'syz.4.2155': attribute type 2 has an invalid length. [ 240.062028][T13366] bridge6: entered promiscuous mode [ 240.083339][T13366] bridge6: entered allmulticast mode [ 240.163209][T13381] openvswitch: netlink: IP tunnel TTL not specified. [ 240.237688][T13381] netlink: 'syz.0.2166': attribute type 18 has an invalid length. [ 240.437466][T13395] __nla_validate_parse: 23 callbacks suppressed [ 240.437483][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'. [ 240.499119][T13407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2173'. [ 240.527518][T13400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2171'. [ 240.627321][T13407] veth7: entered promiscuous mode [ 240.634970][T13407] veth7: entered allmulticast mode [ 240.741618][T13411] syzkaller0: entered promiscuous mode [ 240.767264][T13411] syzkaller0: entered allmulticast mode [ 240.779413][T13428] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 240.850042][T13434] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 240.857896][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2181'. [ 240.998872][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 241.390281][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2184'. [ 241.401087][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 241.803728][T13478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.819918][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 241.914431][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.984764][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.053254][T13484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.113326][T13495] bond0: option ad_select: unable to set because the bond device is up [ 242.734875][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 242.852644][T13528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.880287][T13528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.064438][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2212'. [ 243.217704][T13549] xt_l2tp: missing protocol rule (udp|l2tpip) [ 243.564293][T13565] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 243.671052][T13571] delete_channel: no stack [ 243.682519][T13574] delete_channel: no stack [ 243.766191][T13578] xt_l2tp: missing protocol rule (udp|l2tpip) [ 243.898736][T13582] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 243.953656][T13582] tipc: Can't bind to reserved service type 0 [ 244.067525][T13589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.464000][T13617] netlink: 'syz.4.2240': attribute type 13 has an invalid length. [ 244.472402][T13613] netlink: 'syz.2.2242': attribute type 4 has an invalid length. [ 244.485389][T13619] netlink: 'syz.2.2242': attribute type 4 has an invalid length. [ 244.519243][T13613] netlink: 'syz.2.2242': attribute type 83 has an invalid length. [ 244.713261][T13633] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 245.364678][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.717389][T13680] __nla_validate_parse: 11 callbacks suppressed [ 245.717407][T13680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2260'. [ 245.776814][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 245.838052][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 246.015248][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 246.189053][T13694] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 246.215231][T13687] bond5: entered promiscuous mode [ 246.220297][T13687] bond5: entered allmulticast mode [ 246.242745][T13687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.246001][T13694] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 246.302166][T13692] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2265'. [ 246.508009][T13706] veth7: entered promiscuous mode [ 246.514073][T13706] veth7: entered allmulticast mode [ 246.579945][T13712] bond11: entered promiscuous mode [ 246.596289][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'. [ 246.622379][T13712] bond11: entered allmulticast mode [ 246.622567][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2272'. [ 246.628155][T13712] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.807968][T13731] xt_l2tp: missing protocol rule (udp|l2tpip) [ 247.090860][T13712] bond11 (unregistering): Released all slaves [ 247.269334][T13749] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 247.385059][T13761] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 247.399369][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 247.592532][T13774] netlink: 'syz.1.2281': attribute type 75 has an invalid length. [ 247.882902][T13788] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2289'. [ 248.602963][T13794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2290'. [ 248.676259][T13801] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 248.843797][T13812] netlink: 'syz.2.2293': attribute type 4 has an invalid length. [ 248.917950][T13816] netlink: 'syz.2.2293': attribute type 4 has an invalid length. [ 250.190137][T13827] netlink: 'syz.0.2299': attribute type 2 has an invalid length. [ 250.283318][T13831] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 250.358340][T13839] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 250.444102][T13847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.681309][T13861] tipc: Enabling of bearer rejected, failed to enable media [ 250.863503][T13869] netem: incorrect ge model size [ 250.874696][T13869] netem: change failed [ 250.885090][T13869] __nla_validate_parse: 3 callbacks suppressed [ 250.885107][T13869] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2313'. [ 251.168324][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 251.187024][T13895] wg2: entered promiscuous mode [ 251.192349][T13895] wg2: entered allmulticast mode [ 251.279577][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 251.589440][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2329'. [ 251.641068][T13922] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20001 [ 251.718191][T13933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.801429][T13940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.824697][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 251.877975][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2336'. [ 251.887475][T13938] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 251.972085][T13950] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2341'. [ 252.273531][T13974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.352447][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'. [ 252.363427][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'. [ 252.371619][T13984] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2348'. [ 252.809992][T14013] tipc: Enabling of bearer rejected, already enabled [ 252.829815][T14013] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 252.880872][T14013] tipc: Resetting bearer [ 252.923638][T14013] tipc: Resetting bearer [ 253.230658][T14041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.422234][T14062] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 253.632005][T14077] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 253.641606][T14077] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 253.730636][T14083] ip6gre2: entered allmulticast mode [ 253.862142][T14093] syzkaller1: entered promiscuous mode [ 253.867866][T14093] syzkaller1: entered allmulticast mode [ 253.980975][T14100] openvswitch: netlink: Missing key (keys=40, expected=80) [ 254.141029][T14105] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 254.282140][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.331817][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.347563][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.359954][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.370463][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.383570][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.391609][T14117] netlink: 'syz.0.2390': attribute type 4 has an invalid length. [ 254.572137][T14132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.275717][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.634909][T14204] netlink: zone id is out of range [ 255.641870][T14204] netlink: get zone limit has 8 unknown bytes [ 256.080326][T14231] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 256.093482][T14231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.187534][T14245] __nla_validate_parse: 21 callbacks suppressed [ 256.187554][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2429'. [ 256.300746][T14254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2433'. [ 256.420207][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 256.473177][T14264] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2436'. [ 256.673069][T14280] : entered promiscuous mode [ 256.786220][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 256.977553][T14306] smc: net device bond0 applied user defined pnetid SYZ2 [ 256.991040][T14306] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2448'. [ 257.019220][T14306] smc: removing net device bond0 with user defined pnetid SYZ2 [ 257.030937][T14306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.050466][T14306] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 257.061811][T14306] bond0 (unregistering): Released all slaves [ 257.390603][T14322] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'. [ 257.529766][T14321] syzkaller1: entered promiscuous mode [ 257.536208][T14321] syzkaller1: entered allmulticast mode [ 257.546616][T14328] syzkaller0: entered promiscuous mode [ 257.557949][T14328] syzkaller0: entered allmulticast mode [ 257.601791][T14327] tipc: Enabled bearer , priority 0 [ 257.643278][T14327] tipc: Resetting bearer [ 257.699740][T14327] tipc: Disabling bearer [ 257.711132][T14334] IPVS: set_ctl: invalid protocol: 50 172.20.20.49:20004 [ 257.919326][T14351] xt_l2tp: missing protocol rule (udp|l2tpip) [ 257.943422][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2463'. [ 258.114283][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2469'. [ 258.550618][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'. [ 258.601452][T14404] vlan5: entered promiscuous mode [ 258.624428][T14404] erspan0: entered promiscuous mode [ 259.431652][T14458] validate_nla: 59 callbacks suppressed [ 259.431669][T14458] netlink: 'syz.2.2498': attribute type 6 has an invalid length. [ 259.708842][T14474] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 259.783658][T14488] netlink: 'syz.3.2508': attribute type 2 has an invalid length. [ 259.844036][T14487] bond7 (unregistering): Released all slaves [ 259.911385][T14492] pimreg: entered allmulticast mode [ 260.291920][T14520] openvswitch: netlink: IP tunnel dst address not specified [ 260.307478][T14520] tipc: Enabling of bearer rejected, already enabled [ 260.451195][T14522] tipc: Resetting bearer [ 260.758076][T14542] netlink: 'syz.4.2526': attribute type 20 has an invalid length. [ 260.810584][ T6997] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.810739][T14542] netlink: 'syz.4.2526': attribute type 20 has an invalid length. [ 260.866210][ T6997] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.911298][ T6997] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.942649][ T6997] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.059470][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.174211][T14574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.181502][T14574] IPv6: NLM_F_CREATE should be set when creating new route [ 261.188766][T14574] IPv6: NLM_F_CREATE should be set when creating new route [ 261.196016][T14574] IPv6: NLM_F_CREATE should be set when creating new route [ 261.237555][T14580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.268754][T14574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.385023][T14590] __nla_validate_parse: 16 callbacks suppressed [ 261.385040][T14590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2544'. [ 261.502638][T14588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.540445][T14600] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2546'. [ 261.565087][T14603] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2548'. [ 261.592935][T14607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.664838][T14588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.782851][T14621] bond0: (slave bond_slave_0): Releasing backup interface [ 261.811101][T14621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.820047][T14621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.831857][T14621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.839856][T14621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.859910][T14621] bond0: (slave geneve1): Releasing backup interface [ 261.929812][T14632] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2558'. [ 262.232050][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 262.256657][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2562'. [ 262.349712][T14648] : left promiscuous mode [ 262.402807][T14653] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2565'. [ 262.510850][T14662] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2568'. [ 262.545831][T14662] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 262.756688][T14676] vlan1: entered promiscuous mode [ 262.771549][T14676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2574'. [ 262.783872][T14679] wg1: entered promiscuous mode [ 262.789090][T14679] wg1: entered allmulticast mode [ 262.945613][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'. [ 263.128784][T14702] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 263.329887][T14713] netlink: 'syz.2.2582': attribute type 3 has an invalid length. [ 263.356939][T14715] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.768059][T14758] netlink: 'syz.3.2598': attribute type 10 has an invalid length. [ 263.795531][T14756] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 263.826948][T14756] openvswitch: netlink: Message has 6332 unknown bytes. [ 264.233815][T14790] netlink: 'syz.2.2605': attribute type 24 has an invalid length. [ 264.846030][T14831] sctp: [Deprecated]: syz.2.2618 (pid 14831) Use of int in maxseg socket option. [ 264.846030][T14831] Use struct sctp_assoc_value instead [ 264.906568][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.357319][T14857] netlink: 'syz.0.2625': attribute type 23 has an invalid length. [ 265.372040][T14858] netlink: 'syz.0.2625': attribute type 23 has an invalid length. [ 265.386403][T14856] tipc: Enabling of bearer rejected, already enabled [ 265.397334][T14856] netem: change failed [ 265.444929][T14857] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 265.528659][T14857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.582641][T14869] xt_l2tp: wrong L2TP version: 0 [ 265.591536][T14858] bond7: (slave veth9): Enslaving as an active interface with a down link [ 265.600336][T14828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.644224][T14858] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 265.707988][T14857] bond7: (slave veth11): Enslaving as an active interface with a down link [ 266.156203][T14904] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.186313][T14905] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 266.319137][T14913] netlink: 'syz.2.2645': attribute type 12 has an invalid length. [ 266.554471][T14923] __nla_validate_parse: 15 callbacks suppressed [ 266.554488][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2650'. [ 266.767446][T14937] xt_l2tp: unknown flags: 10 [ 266.789252][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 266.866807][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 266.899367][T14943] sctp: [Deprecated]: syz.3.2656 (pid 14943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.899367][T14943] Use struct sctp_sack_info instead [ 266.929128][T14943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2656'. [ 266.959896][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 267.004239][T14947] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 267.038809][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 267.067850][T14953] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 267.078752][T14953] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.088476][T14953] gretap1: entered promiscuous mode [ 267.093696][T14953] gretap1: entered allmulticast mode [ 267.112279][T14953] netlink: 'syz.4.2661': attribute type 10 has an invalid length. [ 267.121469][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.194742][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 267.207576][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 267.300240][T14970] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 267.374037][T14976] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 267.409725][T14979] xt_l2tp: missing protocol rule (udp|l2tpip) [ 267.430943][T14976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.444150][T14976] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2666'. [ 267.465354][T14976] gretap2: entered promiscuous mode [ 267.513153][T14985] netlink: 'syz.4.2669': attribute type 3 has an invalid length. [ 267.554097][T14985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.686438][T14996] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2670'. [ 268.140534][T15023] xt_l2tp: missing protocol rule (udp|l2tpip) [ 268.236373][T15027] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 268.255619][T15027] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 269.041914][T15067] macvtap1: entered promiscuous mode [ 269.042785][T15079] xt_l2tp: missing protocol rule (udp|l2tpip) [ 269.055342][T15067] vlan0: entered promiscuous mode [ 269.061370][T15067] macvtap1: entered allmulticast mode [ 269.099709][T15067] vlan0: entered allmulticast mode [ 269.117587][T15067] veth0_vlan: entered allmulticast mode [ 269.154318][T15085] tipc: Enabling of bearer rejected, failed to enable media [ 269.259425][T15086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.329286][ T5973] IPVS: starting estimator thread 0... [ 269.409749][T15104] openvswitch: netlink: IP tunnel TTL not specified. [ 269.424659][T15100] IPVS: using max 26 ests per chain, 62400 per kthread [ 269.772751][T15130] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 270.098858][T15153] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 270.659235][T15180] tipc: Enabled bearer , priority 0 [ 270.670290][T15180] syzkaller0: entered promiscuous mode [ 270.678405][T15180] syzkaller0: entered allmulticast mode [ 270.742545][T15180] tipc: Resetting bearer [ 270.797712][T15178] tipc: Resetting bearer [ 270.824885][T15178] tipc: Disabling bearer [ 270.878334][T15182] xfrm1: entered promiscuous mode [ 270.903738][T15182] xfrm1: entered allmulticast mode [ 270.989801][T15197] validate_nla: 1 callbacks suppressed [ 270.989819][T15197] netlink: 'syz.4.2729': attribute type 3 has an invalid length. [ 271.010557][T15197] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 271.080385][T15204] openvswitch: netlink: IP tunnel dst address not specified [ 271.713904][T15251] nbd: device at index 1 is going down [ 271.768428][T15255] netlink: 'syz.4.2744': attribute type 13 has an invalid length. [ 271.794096][T15255] netlink: 'syz.4.2744': attribute type 58 has an invalid length. [ 271.803540][T15255] __nla_validate_parse: 143 callbacks suppressed [ 271.803559][T15255] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2744'. [ 271.879681][T15260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2747'. [ 272.012309][T15270] netlink: 'syz.4.2749': attribute type 21 has an invalid length. [ 272.036525][T15275] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 272.037826][T15270] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2749'. [ 272.054624][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 272.093908][T15274] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 272.114970][T15274] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 272.323826][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 272.482625][T15293] netlink: 'syz.4.2757': attribute type 11 has an invalid length. [ 272.503304][T15305] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 272.520420][T15305] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2759'. [ 272.531784][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 272.893359][T15333] sctp: [Deprecated]: syz.2.2766 (pid 15333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.893359][T15333] Use struct sctp_sack_info instead [ 272.940578][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 272.953419][T15331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.982236][ T7001] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.994682][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 273.009078][ T7001] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.029442][ T7001] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.054926][ T6991] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.093983][T15345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2771'. [ 273.377860][T15363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.385428][T15361] pim6reg1: entered promiscuous mode [ 273.390828][T15361] pim6reg1: entered allmulticast mode [ 273.438680][T15363] bond8: (slave veth13): Enslaving as an active interface with a down link [ 273.483223][T15363] veth15: entered promiscuous mode [ 273.491319][T15363] bond8: (slave veth15): Enslaving as an active interface with a down link [ 273.509229][T15363] vlan6: entered allmulticast mode [ 273.516637][T15363] bond8: entered allmulticast mode [ 273.523370][T15363] bond8: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 273.573532][T15370] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 273.582894][T15370] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 273.920720][T15391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.053723][T15398] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 274.261667][ T6963] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 274.845935][T15458] nbd2: detected capacity change from 0 to 63 [ 274.879974][T15466] xt_l2tp: missing protocol rule (udp|l2tpip) [ 274.933857][ T5866] block nbd2: Receive control failed (result -32) [ 275.070950][T15475] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 275.340416][T15500] xt_l2tp: missing protocol rule (udp|l2tpip) [ 275.469183][T15506] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 275.914100][T15541] xt_l2tp: missing protocol rule (udp|l2tpip) [ 276.491294][T15571] netlink: 'syz.3.2836': attribute type 11 has an invalid length. [ 276.570355][T15584] validate_nla: 7 callbacks suppressed [ 276.570372][T15584] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 276.681150][T15591] xt_l2tp: wrong L2TP version: 0 [ 276.742730][T15592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.756756][T15592] bond6: (slave bond7): making interface the new active one [ 276.769684][T15592] bond6: (slave bond7): Enslaving as an active interface with an up link [ 276.796351][T15597] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 276.836095][T15597] team0: Device hsr_slave_0 failed to register rx_handler [ 276.896947][T15608] __nla_validate_parse: 14 callbacks suppressed [ 276.896965][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2848'. [ 276.933055][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 276.948887][T15609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2848'. [ 277.139833][T15631] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 277.226297][T15639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.299292][T15642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2859'. [ 277.321001][T15639] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 277.331182][T15639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.460385][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2863'. [ 277.554141][T15657] tipc: Enabled bearer , priority 0 [ 277.572052][T15657] syzkaller0: entered promiscuous mode [ 277.581093][T15657] syzkaller0: entered allmulticast mode [ 277.626270][T15659] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 277.692689][T15659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.762900][T15660] tipc: Resetting bearer [ 277.871626][T15660] tipc: Disabling bearer [ 277.990274][T15688] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2874'. [ 278.182493][T15701] syzkaller1: entered promiscuous mode [ 278.189260][T15701] syzkaller1: entered allmulticast mode [ 278.202990][T15706] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2880'. [ 278.209098][T15700] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 278.227186][T15701] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 278.240822][T15700] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2879'. [ 278.252389][T15701] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2879'. [ 278.402421][T15716] netlink: 'syz.1.2885': attribute type 16 has an invalid length. [ 278.419172][T15716] netlink: 'syz.1.2885': attribute type 3 has an invalid length. [ 278.427420][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2885'. [ 278.761429][T15738] tipc: Enabled bearer , priority 0 [ 278.818540][T15738] syzkaller0: entered promiscuous mode [ 278.839299][T15738] syzkaller0: entered allmulticast mode [ 278.947733][T15738] tipc: Resetting bearer [ 279.012203][T15738] tipc: Disabling bearer [ 279.362475][T15783] netlink: 'syz.3.2903': attribute type 21 has an invalid length. [ 279.373941][T15782] netlink: 'syz.3.2903': attribute type 21 has an invalid length. [ 279.383138][T15783] netlink: 'syz.3.2903': attribute type 4 has an invalid length. [ 279.391596][T15783] netlink: 'syz.3.2903': attribute type 5 has an invalid length. [ 279.438756][T15788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.460597][T15789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.950083][T15814] netem: change failed [ 280.434482][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.446030][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.453849][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.469667][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.485773][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.011883][T15840] chnl_net:caif_netlink_parms(): no params data found [ 281.333273][T15886] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.361677][T15901] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 281.383966][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.416092][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.423322][T15840] bridge_slave_0: entered allmulticast mode [ 281.437591][T15840] bridge_slave_0: entered promiscuous mode [ 281.457102][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.464238][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.471589][T15840] bridge_slave_1: entered allmulticast mode [ 281.479544][T15840] bridge_slave_1: entered promiscuous mode [ 281.513238][T15904] vlan0: entered promiscuous mode [ 281.525341][T15904] bridge0: entered promiscuous mode [ 281.673836][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.711900][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.883770][T15840] team0: Port device team_slave_0 added [ 281.992646][T15932] hsr_slave_1 (unregistering): left promiscuous mode [ 282.006782][T15840] team0: Port device team_slave_1 added [ 282.104347][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.112543][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.153696][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.166914][T15940] __nla_validate_parse: 16 callbacks suppressed [ 282.166930][T15940] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.2951'. [ 282.173061][T15938] validate_nla: 9 callbacks suppressed [ 282.173081][T15938] netlink: 'syz.4.2950': attribute type 1 has an invalid length. [ 282.189451][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.203235][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.207863][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2950'. [ 282.230116][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.246663][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2950'. [ 282.282322][T15936] netlink: 'syz.0.2949': attribute type 3 has an invalid length. [ 282.299841][T15936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2949'. [ 282.319338][T15943] batadv_slave_1: entered promiscuous mode [ 282.327221][T15943] debugfs: 'hsr1' already exists in 'hsr' [ 282.333012][T15943] Cannot create hsr debugfs directory [ 282.341828][T15943] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 282.392436][T15840] hsr_slave_0: entered promiscuous mode [ 282.392459][T15946] netlink: 'syz.2.2953': attribute type 1 has an invalid length. [ 282.403574][T15840] hsr_slave_1: entered promiscuous mode [ 282.437398][T15840] debugfs: 'hsr0' already exists in 'hsr' [ 282.443449][T15840] Cannot create hsr debugfs directory [ 282.443487][T15952] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2953'. [ 282.569183][ T5866] Bluetooth: hci5: command tx timeout [ 282.649554][T15963] 8021q: VLANs not supported on gre0 [ 282.733786][T15963] vxlan0: entered promiscuous mode [ 282.743186][T15963] vxlan0: entered allmulticast mode [ 282.973810][T15840] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.985598][T15840] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.126849][T15840] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.147620][T16003] xt_socket: unknown flags 0xe4 [ 283.148043][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2966'. [ 283.152530][T15840] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.278652][T15840] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.287383][T16015] openvswitch: netlink: Missing key (keys=40, expected=80) [ 283.313894][T15840] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.442994][T15840] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.466676][T15840] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.670936][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2978'. [ 283.764206][T15840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.794447][T15840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.819034][T16045] veth1_macvtap: left promiscuous mode [ 283.864278][T15840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.910908][T15840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.183814][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.207377][T16071] netlink: 'syz.4.2986': attribute type 10 has an invalid length. [ 284.244194][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.276923][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.284109][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.344587][T16082] 8021q: VLANs not supported on ipvlan1 [ 284.363198][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.370371][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.383146][T16086] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 284.394673][T16086] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 284.422409][T16086] netlink: 'syz.0.2987': attribute type 2 has an invalid length. [ 284.430755][T16086] netlink: 'syz.0.2987': attribute type 2 has an invalid length. [ 284.455074][T16086] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 284.503485][T16086] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 284.647501][ T5866] Bluetooth: hci5: command tx timeout [ 284.857466][T16114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2992'. [ 284.893996][T16109] 8021q: adding VLAN 0 to HW filter on device bond10 [ 284.979593][T16109] bond10: (slave gretap3): making interface the new active one [ 285.000514][T16109] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 285.242449][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.369695][T15840] veth0_vlan: entered promiscuous mode [ 285.401960][T15840] veth1_vlan: entered promiscuous mode [ 285.402948][T16137] can: request_module (can-proto-0) failed. [ 285.472067][T15840] veth0_macvtap: entered promiscuous mode [ 285.489941][T15840] veth1_macvtap: entered promiscuous mode [ 285.512833][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.531102][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.560669][ T6997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.570369][ T6964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.594157][ T6964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.603484][ T6964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.721141][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.735711][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.783684][ T7003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.792897][ T7003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.801355][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 286.310092][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 286.565821][T16186] bond1 (unregistering): Released all slaves [ 286.714681][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.723768][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.732454][T10824] Bluetooth: hci5: command tx timeout [ 286.740251][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.748539][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.806497][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.850334][T16202] xt_l2tp: missing protocol rule (udp|l2tpip) [ 286.964452][T16204] nbd: must specify at least one socket [ 287.399739][T16223] validate_nla: 5 callbacks suppressed [ 287.399757][T16223] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 287.520251][T16197] chnl_net:caif_netlink_parms(): no params data found [ 287.562001][T16232] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 287.587648][T16232] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 287.623411][T16240] __nla_validate_parse: 2 callbacks suppressed [ 287.623425][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 287.663580][T16239] gretap2: entered promiscuous mode [ 287.684402][T16239] bond9: (slave gretap2): making interface the new active one [ 287.694199][T16239] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 287.718999][T16223] macvlan3: entered promiscuous mode [ 287.724361][T16223] macvlan3: entered allmulticast mode [ 287.730942][T16223] bond9: entered promiscuous mode [ 287.737709][T16223] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 287.749393][T16223] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 287.774029][T16223] bond9: left promiscuous mode [ 287.920156][T16255] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.019970][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.049719][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.058936][T16197] bridge_slave_0: entered allmulticast mode [ 288.064414][T16260] netlink: 'syz.0.3036': attribute type 3 has an invalid length. [ 288.075301][T16260] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3036'. [ 288.077187][T16197] bridge_slave_0: entered promiscuous mode [ 288.095699][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.103106][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.111202][T16197] bridge_slave_1: entered allmulticast mode [ 288.119443][T16197] bridge_slave_1: entered promiscuous mode [ 288.215753][T16265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.226756][T16265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.253989][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.317735][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.386457][T16197] team0: Port device team_slave_0 added [ 288.464095][T16265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.485575][T16265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.512462][T16197] team0: Port device team_slave_1 added [ 288.552574][T16284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.627892][T16265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.661670][T16265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.688077][T16292] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.779858][T16265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.803453][T16265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.816222][ T5184] Bluetooth: hci5: command tx timeout [ 288.833886][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.842311][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.871424][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.885172][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.886758][ T5184] Bluetooth: hci1: command tx timeout [ 288.892241][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.926211][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.013484][T16197] hsr_slave_0: entered promiscuous mode [ 289.020914][T16197] hsr_slave_1: entered promiscuous mode [ 289.027853][T16197] debugfs: 'hsr0' already exists in 'hsr' [ 289.033649][T16197] Cannot create hsr debugfs directory [ 289.057967][T16302] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 289.092086][T16302] bond8: entered promiscuous mode [ 289.097497][T16302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.105210][ T7003] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.113443][ T7003] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.157715][T16302] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.167680][T16302] bond8: (slave bond9): making interface the new active one [ 289.175788][T16302] bond9: entered promiscuous mode [ 289.181254][T16302] bond8: (slave bond9): Enslaving as an active interface with an up link [ 289.189818][ T6966] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.205317][ T6966] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.250855][ T6966] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.259407][ T6966] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.278224][ T7003] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.291096][ T7003] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.560412][T16197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.589330][T16197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.620764][T16320] smc: net device erspan0 applied user defined pnetid SYZ0 [ 289.723571][T16197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.741184][T16197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.747475][T16327] xt_l2tp: missing protocol rule (udp|l2tpip) [ 289.843329][T16197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.879650][T16197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.903861][T16335] ip6gre1: entered allmulticast mode [ 289.977271][T16197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.992994][T16197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.067364][T16341] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 290.092877][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 290.107139][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'. [ 290.256631][T16197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.295689][T16197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.327036][T16197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.411769][T16197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.521194][T16370] xt_l2tp: missing protocol rule (udp|l2tpip) [ 290.726982][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.753977][ T6966] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.758201][T16382] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.798513][T16197] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.845972][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.853120][ T6991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.872852][T16388] netlink: 'syz.1.3074': attribute type 11 has an invalid length. [ 290.890568][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.897752][ T6991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.906921][T16388] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3074'. [ 290.965451][ T5184] Bluetooth: hci1: command tx timeout [ 291.010330][T16396] tipc: Enabling of bearer rejected, media not registered [ 291.069734][T16396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.586237][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 291.773421][T16197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.963415][T16444] syzkaller0: entered promiscuous mode [ 291.983175][T16444] syzkaller0: entered allmulticast mode [ 292.242188][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'. [ 292.523328][T16481] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3096'. [ 292.685101][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 292.745909][T16197] veth0_vlan: entered promiscuous mode [ 292.810943][T16197] veth1_vlan: entered promiscuous mode [ 292.959056][T16197] veth0_macvtap: entered promiscuous mode [ 292.981104][T16197] veth1_macvtap: entered promiscuous mode [ 293.045156][ T5184] Bluetooth: hci1: command tx timeout [ 293.050059][T16197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.080763][T16197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.082605][T16494] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3100'. [ 293.109047][ T6966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.136598][ T6966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.155905][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3100'. [ 293.170765][ T6966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.183074][ T6966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.194338][T16497] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 293.357730][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.394363][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.460852][T16510] dvmrp1: entered allmulticast mode [ 293.533830][T16514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3105'. [ 293.544008][ T7006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.563001][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3105'. [ 293.573236][ T7006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.584455][T16514] lo speed is unknown, defaulting to 1000 [ 293.602041][T16514] lo speed is unknown, defaulting to 1000 [ 293.622735][T16514] lo speed is unknown, defaulting to 1000 [ 293.683517][T16514] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 293.703607][T16526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3108'. [ 293.766897][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 293.775695][T16514] lo speed is unknown, defaulting to 1000 [ 293.877721][T16514] lo speed is unknown, defaulting to 1000 [ 293.909484][T16514] lo speed is unknown, defaulting to 1000 [ 293.948708][T16514] lo speed is unknown, defaulting to 1000 [ 293.997664][T16514] lo speed is unknown, defaulting to 1000 [ 294.046202][T16514] lo speed is unknown, defaulting to 1000 [ 294.095700][T16514] lo speed is unknown, defaulting to 1000 [ 294.319678][T16550] xt_l2tp: missing protocol rule (udp|l2tpip) [ 294.572689][T16559] ipvlan5: entered promiscuous mode [ 294.644924][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.765364][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.774733][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.783210][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.793098][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.801858][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.829529][T16569] syzkaller0: entered promiscuous mode [ 294.852288][T16569] syzkaller0: entered allmulticast mode [ 295.124840][ T5866] Bluetooth: hci1: command tx timeout [ 296.337879][T16587] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 296.346705][T16580] lo speed is unknown, defaulting to 1000 [ 296.447542][T16602] xt_l2tp: missing protocol rule (udp|l2tpip) [ 296.522684][T16605] netlink: 'syz.3.3128': attribute type 29 has an invalid length. [ 296.547139][T16605] netlink: 'syz.3.3128': attribute type 29 has an invalid length. [ 296.557550][T16605] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3128'. [ 296.568011][T16609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3127'. [ 296.599447][T16608] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 296.778838][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3133'. [ 296.884914][ T5866] Bluetooth: hci2: command tx timeout [ 296.962153][T16580] chnl_net:caif_netlink_parms(): no params data found [ 297.030777][T16640] tipc: Enabled bearer , priority 0 [ 297.124291][T16640] tipc: Resetting bearer [ 297.186590][T16639] tipc: Disabling bearer [ 297.215479][T16580] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.232809][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.249759][T16580] bridge_slave_0: entered allmulticast mode [ 297.261381][T16654] netlink: 'syz.1.3140': attribute type 27 has an invalid length. [ 297.265105][T16580] bridge_slave_0: entered promiscuous mode [ 297.314130][T16580] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.348948][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.384241][T16580] bridge_slave_1: entered allmulticast mode [ 297.394236][T16580] bridge_slave_1: entered promiscuous mode [ 297.560981][T16580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.596195][T16580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.749947][T16580] team0: Port device team_slave_0 added [ 297.787370][T16580] team0: Port device team_slave_1 added [ 297.802395][T16688] __nla_validate_parse: 4 callbacks suppressed [ 297.802420][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 297.839238][T16688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3153'. [ 297.852146][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 297.879209][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 297.912725][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 297.927992][T16580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.944196][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.970956][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 297.991014][T16580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.019584][T16580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.058875][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.143514][T16580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.145081][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 298.177620][T16710] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.186966][T16701] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 298.207011][T16702] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 298.340233][T16580] hsr_slave_0: entered promiscuous mode [ 298.347558][T16580] hsr_slave_1: entered promiscuous mode [ 298.353885][T16580] debugfs: 'hsr0' already exists in 'hsr' [ 298.363129][T16580] Cannot create hsr debugfs directory [ 298.375729][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 298.385317][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3162'. [ 298.422364][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 298.468148][ T7001] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.477710][ T7001] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.517176][ T6963] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.543640][ T7001] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 298.612952][T16732] netlink: 'syz.3.3164': attribute type 1 has an invalid length. [ 298.622349][T16732] netlink: 'syz.3.3164': attribute type 1 has an invalid length. [ 298.631288][T16732] netlink: 'syz.3.3164': attribute type 2 has an invalid length. [ 298.665686][T16728] netlink: 'syz.3.3164': attribute type 10 has an invalid length. [ 298.683206][T16580] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.693877][T16580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.713126][T16728] veth0_vlan: entered allmulticast mode [ 298.752150][T16728] veth0_vlan: left promiscuous mode [ 298.765229][T16728] veth0_vlan: entered promiscuous mode [ 298.782690][T16728] team0: Device veth0_vlan failed to register rx_handler [ 298.864386][T16580] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.875425][T16580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.924437][T16580] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.936301][T16580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.965462][ T5866] Bluetooth: hci2: command tx timeout [ 299.016402][T16580] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.046958][T16580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.252480][T16751] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 299.342988][T16580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.465622][T16580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.496944][T16580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.534735][T16580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.582258][T16775] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 299.671994][T16791] netlink: 'syz.1.3179': attribute type 6 has an invalid length. [ 299.759321][T16793] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 299.787742][T16793] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 299.977954][T16580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.021268][T16580] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.052868][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.060102][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.103067][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.110289][ T7003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.442122][T16580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.519359][T16580] veth0_vlan: entered promiscuous mode [ 300.554149][T16580] veth1_vlan: entered promiscuous mode [ 300.559481][T16831] netlink: 'syz.0.3190': attribute type 21 has an invalid length. [ 300.609361][T16580] veth0_macvtap: entered promiscuous mode [ 300.633862][T16580] veth1_macvtap: entered promiscuous mode [ 300.674297][T16580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.715497][T16580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.750310][ T6963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.762985][ T6963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.781131][ T6963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.791219][ T6963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.812727][T16839] tipc: Enabled bearer , priority 0 [ 300.858485][T16839] syzkaller0: entered promiscuous mode [ 300.863968][T16839] syzkaller0: entered allmulticast mode [ 300.901318][T16839] tipc: Resetting bearer [ 301.045304][ T5866] Bluetooth: hci2: command tx timeout [ 301.051685][T16838] tipc: Resetting bearer [ 302.327207][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 302.450395][T16838] tipc: Disabling bearer [ 302.534999][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.553101][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.642048][T16858] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 302.666427][T16863] sctp: [Deprecated]: syz.4.3203 (pid 16863) Use of int in maxseg socket option. [ 302.666427][T16863] Use struct sctp_assoc_value instead [ 302.761541][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.814646][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.912400][T16877] veth0: entered promiscuous mode [ 302.924415][T16876] veth0: left promiscuous mode [ 302.952130][T16871] __nla_validate_parse: 14 callbacks suppressed [ 302.952147][T16871] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3205'. [ 302.978196][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 302.987204][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 303.124961][ T5866] Bluetooth: hci2: command tx timeout [ 303.215992][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 303.276926][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'. [ 303.622329][T16905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3217'. [ 303.642514][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3219'. [ 303.791148][T16910] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 303.872838][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.892918][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.901804][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.909859][T16913] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 303.926844][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.935609][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.109268][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3226'. [ 304.121158][T16912] lo speed is unknown, defaulting to 1000 [ 304.181462][T16930] tipc: Started in network mode [ 304.186555][T16930] tipc: Node identity 07, cluster identity 512 [ 304.265928][T16936] netlink: 'syz.4.3228': attribute type 1 has an invalid length. [ 304.284654][T16934] tipc: Enabled bearer , priority 0 [ 304.329064][T16934] syzkaller0: entered promiscuous mode [ 304.343714][T16934] syzkaller0: entered allmulticast mode [ 304.423905][T16936] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3228'. [ 304.453697][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 304.520538][T16947] tipc: Resetting bearer [ 304.573832][T16933] tipc: Resetting bearer [ 304.601444][T16933] tipc: Disabling bearer [ 305.117208][T16912] chnl_net:caif_netlink_parms(): no params data found [ 305.133107][T16971] pim6reg1: entered promiscuous mode [ 305.138831][T16971] pim6reg1: entered allmulticast mode [ 305.425619][T16988] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.450648][T16990] netlink: 'syz.3.3243': attribute type 15 has an invalid length. [ 305.743027][T17007] erspan0: entered allmulticast mode [ 305.763445][T16912] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.788221][T16912] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.810383][T16912] bridge_slave_0: entered allmulticast mode [ 305.842247][T16912] bridge_slave_0: entered promiscuous mode [ 305.864331][T16912] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.892804][T16912] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.904813][T16912] bridge_slave_1: entered allmulticast mode [ 305.943128][T16912] bridge_slave_1: entered promiscuous mode [ 306.005053][ T5866] Bluetooth: hci3: command tx timeout [ 306.032597][T16912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.066113][T16912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.095110][T17021] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 306.257915][T17021] batman_adv: batadv0: Adding interface: wlan1 [ 306.258713][T17035] xt_l2tp: missing protocol rule (udp|l2tpip) [ 306.264134][T17021] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.264162][T17021] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 306.289074][T16912] team0: Port device team_slave_0 added [ 306.341718][T16912] team0: Port device team_slave_1 added [ 306.432172][T16912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.446982][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.474198][T16912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.528797][T16912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.540267][T16912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.568475][T16912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.673051][T16912] hsr_slave_0: entered promiscuous mode [ 306.699930][T16912] hsr_slave_1: entered promiscuous mode [ 306.713809][T16912] debugfs: 'hsr0' already exists in 'hsr' [ 306.721341][T16912] Cannot create hsr debugfs directory [ 306.905953][T17057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.034794][T17066] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.043742][T17062] tipc: Started in network mode [ 307.056368][T17062] tipc: Node identity 82b175f0a7e1, cluster identity 4711 [ 307.064281][T17062] tipc: Enabled bearer , priority 0 [ 307.149649][T17068] syzkaller0: entered promiscuous mode [ 307.156484][T17068] syzkaller0: entered allmulticast mode [ 307.233942][T17077] netlink: 'syz.1.3270': attribute type 19 has an invalid length. [ 307.265809][T17078] team0: Device gtp0 is of different type [ 307.316366][T17062] tipc: Resetting bearer [ 307.341988][T16912] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.353534][T16912] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.481100][T16912] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.508102][T16912] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.665756][T16912] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.677019][T16912] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.743259][T16912] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.760295][T16912] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.798650][T17061] tipc: Resetting bearer [ 307.819638][T17061] tipc: Disabling bearer [ 307.840504][T17106] syzkaller1: entered promiscuous mode [ 307.848059][T17106] syzkaller1: entered allmulticast mode [ 308.068258][T17118] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 308.086005][ T5866] Bluetooth: hci3: command tx timeout [ 308.170304][T17130] netlink: 'syz.3.3285': attribute type 3 has an invalid length. [ 308.177325][T16912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.204997][T17132] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 308.243779][T16912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.266737][T17134] netlink: 'syz.1.3288': attribute type 16 has an invalid length. [ 308.269367][T17136] __nla_validate_parse: 16 callbacks suppressed [ 308.269383][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 308.284654][T17134] netlink: 'syz.1.3288': attribute type 3 has an invalid length. [ 308.301354][T17134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3288'. [ 308.304028][T16912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.360224][T16912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.360810][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'. [ 308.405347][ T6991] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.423511][ T6991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.474405][ T6991] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.498979][T17151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3292'. [ 308.531725][ T6991] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.598814][T17157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3293'. [ 308.776766][T17163] nbd4: detected capacity change from 0 to 63 [ 308.780806][T16912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.802382][ T5866] block nbd4: Receive control failed (result -32) [ 308.842575][T16912] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.859165][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.866351][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.902993][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.910240][ T7003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.953208][T17178] vxlan1: entered promiscuous mode [ 308.958414][T17178] vxlan1: entered allmulticast mode [ 309.027293][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 309.099064][T17184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3301'. [ 309.190105][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3302'. [ 309.353083][T16912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.479031][T16912] veth0_vlan: entered promiscuous mode [ 309.502862][T16912] veth1_vlan: entered promiscuous mode [ 309.638488][T16912] veth0_macvtap: entered promiscuous mode [ 309.653585][T17208] netlink: 'syz.3.3306': attribute type 29 has an invalid length. [ 309.670150][T16912] veth1_macvtap: entered promiscuous mode [ 309.762728][T16912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.772149][T17217] delete_channel: no stack [ 309.812864][T16912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.834862][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 309.849657][ T7006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.900825][ T7006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.932041][ T7001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.990595][ T7001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.116586][T17232] tipc: Started in network mode [ 310.132538][T17232] tipc: Node identity 2e85ea3db98e, cluster identity 4711 [ 310.148878][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 310.162190][T17232] tipc: Enabled bearer , priority 0 [ 310.165741][ T5866] Bluetooth: hci3: command tx timeout [ 310.200155][T17240] syzkaller0: entered promiscuous mode [ 310.206171][T17240] syzkaller0: entered allmulticast mode [ 310.337611][ T7001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.359750][ T7001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.376768][T17232] tipc: Resetting bearer [ 310.396629][T17231] tipc: Resetting bearer [ 310.413903][T17231] tipc: Disabling bearer [ 310.423970][T17246] lo speed is unknown, defaulting to 1000 [ 310.442036][ T6963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.452710][ T6963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.761873][T17264] xt_l2tp: missing protocol rule (udp|l2tpip) [ 310.823890][T17266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.318182][T17290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.324643][T17290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 311.392161][T17290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.398635][T17290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 311.596565][T17296] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 311.604310][T17296] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 312.004203][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.013698][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.026423][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.035795][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.043887][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.167198][T17309] lo speed is unknown, defaulting to 1000 [ 312.245186][ T5184] Bluetooth: hci3: command tx timeout [ 312.540999][T17309] chnl_net:caif_netlink_parms(): no params data found [ 312.681905][T17350] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.699797][T17350] netlink: 'syz.0.3349': attribute type 10 has an invalid length. [ 312.743681][T17350] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.797357][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.805219][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.812488][T17309] bridge_slave_0: entered allmulticast mode [ 312.821336][T17309] bridge_slave_0: entered promiscuous mode [ 312.830186][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.837475][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.845057][T17309] bridge_slave_1: entered allmulticast mode [ 312.853356][T17309] bridge_slave_1: entered promiscuous mode [ 312.935833][T17309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.960461][T17309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.052816][T17309] team0: Port device team_slave_0 added [ 313.069273][T17309] team0: Port device team_slave_1 added [ 313.138212][T17309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.165157][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.194919][T17309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.213452][T17309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.228918][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.262869][T17309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.352304][T17378] __nla_validate_parse: 4 callbacks suppressed [ 313.352319][T17378] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3358'. [ 313.369509][T17378] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3358'. [ 313.389729][T17309] hsr_slave_0: entered promiscuous mode [ 313.399132][T17309] hsr_slave_1: entered promiscuous mode [ 313.406235][T17309] debugfs: 'hsr0' already exists in 'hsr' [ 313.412052][T17309] Cannot create hsr debugfs directory [ 313.418384][T17378] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3358'. [ 313.430344][T17378] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3358'. [ 313.437153][T17382] netlink: 'syz.2.3359': attribute type 8 has an invalid length. [ 313.569739][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 313.786289][T17309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 313.798727][T17309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 313.810359][T17309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.882654][T17309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 313.894058][T17309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 313.906499][T17309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.007836][T17309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 314.018683][T17309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 314.029343][T17309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.091968][ T5866] Bluetooth: hci0: command tx timeout [ 314.131013][T17309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 314.141918][T17309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 314.153764][T17309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.266273][T17410] xt_l2tp: missing protocol rule (udp|l2tpip) [ 314.353902][T17309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.364129][T17309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.375315][T17309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.385408][T17309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.528641][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.584493][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.606808][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.613978][ T6963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.649815][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.657015][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.806061][ T6991] wlan1: Trigger new scan to find an IBSS to join [ 314.953385][T17447] xt_l2tp: missing protocol rule (udp|l2tpip) [ 315.278572][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 315.290119][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 315.299553][T17454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3385'. [ 315.308748][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 315.340095][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 315.746282][T17478] xt_l2tp: missing protocol rule (udp|l2tpip) [ 315.771379][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.864262][T17309] veth0_vlan: entered promiscuous mode [ 315.898636][T17309] veth1_vlan: entered promiscuous mode [ 315.991890][T17309] veth0_macvtap: entered promiscuous mode [ 316.002643][T17309] veth1_macvtap: entered promiscuous mode [ 316.025879][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.038462][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.053159][ T6991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.080427][ T6991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.170908][ T5866] Bluetooth: hci0: command tx timeout [ 316.178302][ T6991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.201952][ T6997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.527835][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.549197][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.561257][T17516] xt_l2tp: missing protocol rule (udp|l2tpip) [ 316.625971][ T6991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.669563][ T6991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.777320][T17522] nbd: socks must be embedded in a SOCK_ITEM attr [ 316.829106][T17522] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 316.916935][T17522] bridge0: port 3(vlan2) entered blocking state [ 316.942640][T17537] netlink: 'syz.1.3327': attribute type 23 has an invalid length. [ 316.956789][T17522] bridge0: port 3(vlan2) entered disabled state [ 317.010081][T17522] vlan2: entered allmulticast mode [ 317.060732][T17522] bridge0: entered allmulticast mode [ 317.084467][T17522] vlan2: left allmulticast mode [ 317.110203][T17522] bridge0: left allmulticast mode [ 317.471480][T17550] syz.4.3413 (17550) used obsolete PPPIOCDETACH ioctl [ 317.522674][T17557] netlink: 'syz.3.3416': attribute type 2 has an invalid length. [ 317.644484][T17559] Bluetooth: MGMT ver 1.23 [ 317.708324][T17562] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.775712][ T7003] wlan1: Trigger new scan to find an IBSS to join [ 317.817892][T17565] tipc: Enabled bearer , priority 0 [ 317.825465][T17565] syzkaller0: entered promiscuous mode [ 317.832282][T17565] syzkaller0: entered allmulticast mode [ 317.848091][T17565] syzkaller0: mtu less than device minimum [ 317.883690][T17563] tipc: Resetting bearer [ 317.913495][T17571] netlink: 'syz.4.3422': attribute type 13 has an invalid length. [ 317.923099][T17563] tipc: Disabling bearer [ 317.929699][T17571] netlink: 'syz.4.3422': attribute type 58 has an invalid length. [ 317.942301][T17574] netlink: 'syz.1.3424': attribute type 39 has an invalid length. [ 317.960879][T17573] team_slave_0: entered promiscuous mode [ 317.966721][T17573] team_slave_1: entered promiscuous mode [ 317.984017][T17573] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 317.992599][T17573] team0: Device macvtap1 is already an upper device of the team interface [ 318.023804][T17573] team_slave_0: left promiscuous mode [ 318.029395][T17573] team_slave_1: left promiscuous mode [ 318.135078][T17582] openvswitch: netlink: VXLAN extension 13229 out of range max 1 [ 318.170127][T13409] IPVS: starting estimator thread 0... [ 318.176160][T17583] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 318.184474][T17582] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 318.245171][ T5866] Bluetooth: hci0: command tx timeout [ 318.284930][T17584] IPVS: using max 37 ests per chain, 88800 per kthread [ 318.326935][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.428178][T17602] __nla_validate_parse: 9 callbacks suppressed [ 318.428196][T17602] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3430'. [ 318.461805][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 318.500281][T17602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3430'. [ 318.527210][T17604] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3430'. [ 318.586802][T17609] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.594541][T17609] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.755813][T17618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3437'. [ 318.770990][T17618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3437'. [ 318.940840][T17628] netlink: 'syz.1.3439': attribute type 10 has an invalid length. [ 318.960237][T17628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3439'. [ 319.030299][T17628] team0: Port device geneve0 added [ 319.099496][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 319.103725][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 319.117737][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 319.144332][ T6997] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.161763][ T6997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.209327][ T6997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.236035][ T6997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.275780][T17642] tipc: Enabled bearer , priority 0 [ 319.431397][T17642] syzkaller0: entered promiscuous mode [ 319.444330][T17642] syzkaller0: entered allmulticast mode [ 319.462140][T17656] tipc: Resetting bearer [ 319.488132][T17642] batadv1: entered allmulticast mode [ 319.527653][T17667] netlink: 'syz.3.3451': attribute type 1 has an invalid length. [ 319.540707][T17667] netlink: 'syz.3.3451': attribute type 3 has an invalid length. [ 319.569210][T17661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.593797][T17667] netlink: 'syz.3.3451': attribute type 235 has an invalid length. [ 319.633328][T17659] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 319.852758][T17642] tipc: Resetting bearer [ 320.285626][T13408] tipc: Node number set to 626030064 [ 320.328919][ T5866] Bluetooth: hci0: command tx timeout [ 320.806978][ T6997] wlan1: Trigger new scan to find an IBSS to join [ 321.521904][T17642] tipc: Disabling bearer [ 321.562445][T17700] veth1_macvtap: left promiscuous mode [ 321.740442][ T6963] wlan1: Creating new IBSS network, BSSID 06:a1:e2:55:e8:20 [ 321.757707][T17712] nftables ruleset with unbound set [ 321.896791][T17727] validate_nla: 2 callbacks suppressed [ 321.896808][T17727] netlink: 'syz.3.3466': attribute type 5 has an invalid length. [ 322.029869][T17732] netlink: 'syz.1.3470': attribute type 1 has an invalid length. [ 322.134873][T17734] tipc: Enabled bearer , priority 0 [ 322.142520][T17734] syzkaller0: entered promiscuous mode [ 322.149759][T17734] syzkaller0: entered allmulticast mode [ 322.250564][T17734] tipc: Resetting bearer [ 322.268367][T17734] batadv_slave_1: entered promiscuous mode [ 322.275324][T17733] batadv_slave_1: left promiscuous mode [ 322.283160][T17733] tipc: Resetting bearer [ 322.323110][T17733] tipc: Disabling bearer [ 322.548175][T17755] macvtap1: entered promiscuous mode [ 322.554009][T17755] vlan0: entered promiscuous mode [ 322.561656][T17755] team0: Device macvtap1 failed to register rx_handler [ 322.572316][T17755] vlan0: left promiscuous mode [ 322.730255][T17764] ------------[ cut here ]------------ [ 322.736001][T17764] WARNING: CPU: 0 PID: 17764 at net/ipv4/route.c:1269 ip_rt_bug+0x2c/0x110 [ 322.744651][T17764] Modules linked in: [ 322.748740][T17764] CPU: 0 UID: 0 PID: 17764 Comm: syz.3.3479 Not tainted syzkaller #0 PREEMPT(full) [ 322.758146][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.768238][T17764] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 322.773191][T17764] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 322.792895][T17764] RSP: 0018:ffffc9000bbdf180 EFLAGS: 00010286 [ 322.799014][T17764] RAX: 7b1f04e5b29f3600 RBX: ffff888058c30780 RCX: 7b1f04e5b29f3600 [ 322.807019][T17764] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 322.815031][T17764] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 322.823007][T17764] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 322.831019][T17764] R13: dffffc0000000000 R14: ffff888058c30780 R15: ffff8881466a1c00 [ 322.839036][T17764] FS: 00007fd1d06e96c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 322.848009][T17764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.854634][T17764] CR2: 000000110c2b97f8 CR3: 000000007f68c000 CR4: 00000000003526f0 [ 322.862612][T17764] Call Trace: [ 322.865936][T17764] [ 322.868880][T17764] ip_push_pending_frames+0xbe/0x150 [ 322.874191][T17764] __icmp_send+0xf87/0x12d0 [ 322.878754][T17764] ? __icmp_send+0x1b9/0x12d0 [ 322.883460][T17764] ? __pfx___icmp_send+0x10/0x10 [ 322.888469][T17764] ? ip_route_input_noref+0x98/0x250 [ 322.893778][T17764] ? __pfx_ip_route_input_noref+0x10/0x10 [ 322.899986][T17764] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 322.905233][T17764] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 322.910443][T17764] ip_options_compile+0x80/0xb0 [ 322.915334][T17764] ip_rcv_finish_core+0xaa2/0x1c00 [ 322.920471][T17764] ip_rcv_finish+0x14c/0x2f0 [ 322.925106][T17764] NF_HOOK+0x309/0x3a0 [ 322.929194][T17764] ? __pfx_ip_rcv_finish+0x10/0x10 [ 322.934313][T17764] ? NF_HOOK+0x9a/0x3a0 [ 322.938508][T17764] ? __pfx_NF_HOOK+0x10/0x10 [ 322.943112][T17764] ? ip_rcv_core+0x7f7/0xd00 [ 322.947750][T17764] ? __pfx_ip_rcv_finish+0x10/0x10 [ 322.952880][T17764] ? __pfx_ip_rcv+0x10/0x10 [ 322.957439][T17764] __netif_receive_skb+0x143/0x380 [ 322.962569][T17764] ? netif_receive_skb+0x115/0x790 [ 322.967721][T17764] netif_receive_skb+0x1cb/0x790 [ 322.972687][T17764] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 322.978532][T17764] ? __pfx_netif_receive_skb+0x10/0x10 [ 322.983602][T17773] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 322.984033][T17764] ? tun_rx_batched+0x160/0x730 [ 322.996931][T17764] tun_rx_batched+0x1b9/0x730 [ 323.001624][T17764] ? __lock_acquire+0xab9/0xd20 [ 323.006523][T17764] ? __pfx_tun_rx_batched+0x10/0x10 [ 323.011738][T17764] ? tun_get_user+0x266c/0x3e20 [ 323.013423][T17774] bridge0: port 3(batadv1) entered blocking state [ 323.016641][T17764] tun_get_user+0x2aa2/0x3e20 [ 323.016674][T17764] ? tun_get_user+0x6f6/0x3e20 [ 323.016697][T17764] ? tun_get_user+0x266c/0x3e20 [ 323.016723][T17764] ? aa_file_perm+0x44d/0x1550 [ 323.016744][T17764] ? __pfx_tun_get_user+0x10/0x10 [ 323.016789][T17764] ? ref_tracker_alloc+0x318/0x460 [ 323.016813][T17764] ? __lock_acquire+0xab9/0xd20 [ 323.016841][T17764] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 323.016876][T17764] ? tun_get+0x1c/0x2f0 [ 323.016903][T17764] ? tun_get+0x1c/0x2f0 [ 323.016929][T17764] ? tun_get+0x1c/0x2f0 [ 323.016955][T17764] tun_chr_write_iter+0x113/0x200 [ 323.016980][T17764] vfs_write+0x5c6/0xb30 [ 323.017012][T17764] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 323.017034][T17764] ? __pfx_vfs_write+0x10/0x10 [ 323.017073][T17764] ? __fget_files+0x2a/0x420 [ 323.017103][T17764] ksys_write+0x145/0x250 [ 323.017132][T17764] ? __pfx_ksys_write+0x10/0x10 [ 323.017152][T17764] ? rcu_is_watching+0x15/0xb0 [ 323.017177][T17764] ? do_syscall_64+0xbe/0x3b0 [ 323.017201][T17764] do_syscall_64+0xfa/0x3b0 [ 323.017217][T17764] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.017243][T17764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.017263][T17764] ? clear_bhb_loop+0x60/0xb0 [ 323.017287][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.017307][T17764] RIP: 0033:0x7fd1cf78d69f [ 323.033618][T17774] bridge0: port 3(batadv1) entered disabled state [ 323.037993][T17764] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 323.038014][T17764] RSP: 002b:00007fd1d06e9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 323.038037][T17764] RAX: ffffffffffffffda RBX: 00007fd1cf9c5fa0 RCX: 00007fd1cf78d69f [ 323.038051][T17764] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 323.038064][T17764] RBP: 00007fd1cf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.038077][T17764] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 323.038089][T17764] R13: 00007fd1cf9c6038 R14: 00007fd1cf9c5fa0 R15: 00007ffe0149cda8 [ 323.038120][T17764] [ 323.043438][T17774] batadv1: entered allmulticast mode [ 323.047874][T17764] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.047890][T17764] CPU: 0 UID: 0 PID: 17764 Comm: syz.3.3479 Not tainted syzkaller #0 PREEMPT(full) [ 323.047909][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.047920][T17764] Call Trace: [ 323.047933][T17764] [ 323.047942][T17764] dump_stack_lvl+0x99/0x250 [ 323.047966][T17764] ? __asan_memcpy+0x40/0x70 [ 323.047989][T17764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.048011][T17764] ? __pfx__printk+0x10/0x10 [ 323.048051][T17764] vpanic+0x281/0x750 [ 323.048073][T17764] ? __pfx__printk+0x10/0x10 [ 323.048097][T17764] ? __pfx_vpanic+0x10/0x10 [ 323.048119][T17764] ? is_bpf_text_address+0x26/0x2b0 [ 323.048158][T17764] panic+0xb9/0xc0 [ 323.048177][T17764] ? __pfx_panic+0x10/0x10 [ 323.048216][T17764] __warn+0x31b/0x4b0 [ 323.048236][T17764] ? ip_rt_bug+0x2c/0x110 [ 323.048261][T17764] ? ip_rt_bug+0x2c/0x110 [ 323.048282][T17764] report_bug+0x2be/0x4f0 [ 323.048306][T17764] ? ip_rt_bug+0x2c/0x110 [ 323.048329][T17764] ? ip_rt_bug+0x2c/0x110 [ 323.048350][T17764] ? ip_rt_bug+0x2e/0x110 [ 323.048371][T17764] handle_bug+0x84/0x160 [ 323.048392][T17764] exc_invalid_op+0x1a/0x50 [ 323.048412][T17764] asm_exc_invalid_op+0x1a/0x20 [ 323.048430][T17764] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 323.048452][T17764] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 323.048468][T17764] RSP: 0018:ffffc9000bbdf180 EFLAGS: 00010286 [ 323.048487][T17764] RAX: 7b1f04e5b29f3600 RBX: ffff888058c30780 RCX: 7b1f04e5b29f3600 [ 323.048503][T17764] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 323.048517][T17764] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 323.048530][T17764] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 323.048544][T17764] R13: dffffc0000000000 R14: ffff888058c30780 R15: ffff8881466a1c00 [ 323.048579][T17764] ip_push_pending_frames+0xbe/0x150 [ 323.048604][T17764] __icmp_send+0xf87/0x12d0 [ 323.048640][T17764] ? __icmp_send+0x1b9/0x12d0 [ 323.048671][T17764] ? __pfx___icmp_send+0x10/0x10 [ 323.048717][T17764] ? ip_route_input_noref+0x98/0x250 [ 323.048746][T17764] ? __pfx_ip_route_input_noref+0x10/0x10 [ 323.048772][T17764] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 323.048789][T17764] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 323.048810][T17764] ip_options_compile+0x80/0xb0 [ 323.048833][T17764] ip_rcv_finish_core+0xaa2/0x1c00 [ 323.048863][T17764] ip_rcv_finish+0x14c/0x2f0 [ 323.048883][T17764] NF_HOOK+0x309/0x3a0 [ 323.048910][T17764] ? __pfx_ip_rcv_finish+0x10/0x10 [ 323.048931][T17764] ? NF_HOOK+0x9a/0x3a0 [ 323.048955][T17764] ? __pfx_NF_HOOK+0x10/0x10 [ 323.048978][T17764] ? ip_rcv_core+0x7f7/0xd00 [ 323.049004][T17764] ? __pfx_ip_rcv_finish+0x10/0x10 [ 323.049031][T17764] ? __pfx_ip_rcv+0x10/0x10 [ 323.049053][T17764] __netif_receive_skb+0x143/0x380 [ 323.049084][T17764] ? netif_receive_skb+0x115/0x790 [ 323.049107][T17764] netif_receive_skb+0x1cb/0x790 [ 323.049128][T17764] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 323.049148][T17764] ? __pfx_netif_receive_skb+0x10/0x10 [ 323.049177][T17764] ? tun_rx_batched+0x160/0x730 [ 323.049198][T17764] tun_rx_batched+0x1b9/0x730 [ 323.049215][T17764] ? __lock_acquire+0xab9/0xd20 [ 323.049244][T17764] ? __pfx_tun_rx_batched+0x10/0x10 [ 323.049267][T17764] ? tun_get_user+0x266c/0x3e20 [ 323.049301][T17764] tun_get_user+0x2aa2/0x3e20 [ 323.049327][T17764] ? tun_get_user+0x6f6/0x3e20 [ 323.049347][T17764] ? tun_get_user+0x266c/0x3e20 [ 323.049371][T17764] ? aa_file_perm+0x44d/0x1550 [ 323.049390][T17764] ? __pfx_tun_get_user+0x10/0x10 [ 323.049430][T17764] ? ref_tracker_alloc+0x318/0x460 [ 323.049452][T17764] ? __lock_acquire+0xab9/0xd20 [ 323.049478][T17764] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 323.049508][T17764] ? tun_get+0x1c/0x2f0 [ 323.049533][T17764] ? tun_get+0x1c/0x2f0 [ 323.049550][T17764] ? tun_get+0x1c/0x2f0 [ 323.049574][T17764] tun_chr_write_iter+0x113/0x200 [ 323.049596][T17764] vfs_write+0x5c6/0xb30 [ 323.049624][T17764] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 323.049644][T17764] ? __pfx_vfs_write+0x10/0x10 [ 323.049678][T17764] ? __fget_files+0x2a/0x420 [ 323.049704][T17764] ksys_write+0x145/0x250 [ 323.049731][T17764] ? __pfx_ksys_write+0x10/0x10 [ 323.049750][T17764] ? rcu_is_watching+0x15/0xb0 [ 323.049774][T17764] ? do_syscall_64+0xbe/0x3b0 [ 323.049797][T17764] do_syscall_64+0xfa/0x3b0 [ 323.049812][T17764] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.049836][T17764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.049854][T17764] ? clear_bhb_loop+0x60/0xb0 [ 323.049876][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.049893][T17764] RIP: 0033:0x7fd1cf78d69f [ 323.049909][T17764] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 323.049942][T17764] RSP: 002b:00007fd1d06e9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 323.049961][T17764] RAX: ffffffffffffffda RBX: 00007fd1cf9c5fa0 RCX: 00007fd1cf78d69f [ 323.049975][T17764] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 323.049987][T17764] RBP: 00007fd1cf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.049999][T17764] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 323.050010][T17764] R13: 00007fd1cf9c6038 R14: 00007fd1cf9c5fa0 R15: 00007ffe0149cda8 [ 323.050042][T17764] [ 323.053875][T17764] Kernel Offset: disabled