last executing test programs: 48.014989031s ago: executing program 0 (id=988): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x3841b273) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x40800) socket$inet6(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) listen(r1, 0x3841b273) (async) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x40800) (async) 47.742466382s ago: executing program 0 (id=993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x634, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '!2'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xc, 0x1, '\r\'@*{@.('}]}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, '!^*&'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '+:'}, {0x7, 0x1, '\xb5^]'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '@^.!--*$'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '$'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '#}!%'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x174, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0xd, 0x1, ';(]\\:\\(-]'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, 'V'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x94, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '\'%!),'}, {0x6, 0x1, '%/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '.%%^\''}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x8, 0x1, '-\\*+'}, {0x4}, {0x6, 0x1, ':['}, {0x7, 0x1, '[]\xab'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xa, 0x1, 'F&:&)^'}, {0x8, 0x1, '\x88)%\\'}, {0xb, 0x1, '*\x17%{\\@-'}]}]}, @NFC_ATTR_LLC_SDP={0x134, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ':-'}, {0x8, 0x1, ']\\\'-'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x1e, 0x1, ']+^{.@!^@-\xa1!@*-\xbf]%{}{$%./['}, {0x4}, {0x14, 0x1, '!!}\x11u%\\,>{^$]%%('}, {0xb, 0x1, '[\x0e+&,\'+'}]}, {0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, '*\'/-q\xbd'}, {0x6, 0x1, '{{'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ',.'}, {0x5, 0x1, '@'}, {0x5, 0x1, ')'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '\\@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-:'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}, {0x4}, {0x8, 0x1, ')-(\''}, {0xa, 0x1, 'bond0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-:'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '9'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '%}\\.\'\\.-'}]}]}, @NFC_ATTR_LLC_SDP={0x1f8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '/+&*'}]}, {0x30, 0x0, 0x0, 0x1, [{0x12, 0x1, '{,%\\[]{\'\'$.#/['}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x6, 0x1, '\xb8}'}]}, {0x58, 0x0, 0x0, 0x1, [{0x7, 0x1, '+&^'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '#+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '$#'}, {0xa, 0x1, 'bond0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '+,&{-/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x10, 0x1, '},\\#@*,-\xd9]-&'}]}, {0x58, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '@'}, {0x7, 0x1, '(]^'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x7, 0x1, ']//'}, {0x7, 0x1, '-(-'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x5, 0x1, '['}, {0x9, 0x1, '{{#&}'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'p_//:-'}, {0x6, 0x1, '-\\'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '-['}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x634}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00', {0x43}, 0xff}) 39.541604619s ago: executing program 0 (id=993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x634, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '!2'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xc, 0x1, '\r\'@*{@.('}]}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, '!^*&'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '+:'}, {0x7, 0x1, '\xb5^]'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '@^.!--*$'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '$'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '#}!%'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x174, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0xd, 0x1, ';(]\\:\\(-]'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, 'V'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x94, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '\'%!),'}, {0x6, 0x1, '%/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '.%%^\''}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x8, 0x1, '-\\*+'}, {0x4}, {0x6, 0x1, ':['}, {0x7, 0x1, '[]\xab'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xa, 0x1, 'F&:&)^'}, {0x8, 0x1, '\x88)%\\'}, {0xb, 0x1, '*\x17%{\\@-'}]}]}, @NFC_ATTR_LLC_SDP={0x134, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ':-'}, {0x8, 0x1, ']\\\'-'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x1e, 0x1, ']+^{.@!^@-\xa1!@*-\xbf]%{}{$%./['}, {0x4}, {0x14, 0x1, '!!}\x11u%\\,>{^$]%%('}, {0xb, 0x1, '[\x0e+&,\'+'}]}, {0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, '*\'/-q\xbd'}, {0x6, 0x1, '{{'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ',.'}, {0x5, 0x1, '@'}, {0x5, 0x1, ')'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '\\@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-:'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}, {0x4}, {0x8, 0x1, ')-(\''}, {0xa, 0x1, 'bond0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-:'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '9'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '%}\\.\'\\.-'}]}]}, @NFC_ATTR_LLC_SDP={0x1f8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '/+&*'}]}, {0x30, 0x0, 0x0, 0x1, [{0x12, 0x1, '{,%\\[]{\'\'$.#/['}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x6, 0x1, '\xb8}'}]}, {0x58, 0x0, 0x0, 0x1, [{0x7, 0x1, '+&^'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '#+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '$#'}, {0xa, 0x1, 'bond0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '+,&{-/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x10, 0x1, '},\\#@*,-\xd9]-&'}]}, {0x58, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '@'}, {0x7, 0x1, '(]^'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x7, 0x1, ']//'}, {0x7, 0x1, '-(-'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x5, 0x1, '['}, {0x9, 0x1, '{{#&}'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'p_//:-'}, {0x6, 0x1, '-\\'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '-['}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x634}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00', {0x43}, 0xff}) 28.593673487s ago: executing program 0 (id=993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x634, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '!2'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xc, 0x1, '\r\'@*{@.('}]}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, '!^*&'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '+:'}, {0x7, 0x1, '\xb5^]'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '@^.!--*$'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '$'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '#}!%'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x174, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0xd, 0x1, ';(]\\:\\(-]'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, 'V'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x94, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '\'%!),'}, {0x6, 0x1, '%/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '.%%^\''}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x8, 0x1, '-\\*+'}, {0x4}, {0x6, 0x1, ':['}, {0x7, 0x1, '[]\xab'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xa, 0x1, 'F&:&)^'}, {0x8, 0x1, '\x88)%\\'}, {0xb, 0x1, '*\x17%{\\@-'}]}]}, @NFC_ATTR_LLC_SDP={0x134, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ':-'}, {0x8, 0x1, ']\\\'-'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x1e, 0x1, ']+^{.@!^@-\xa1!@*-\xbf]%{}{$%./['}, {0x4}, {0x14, 0x1, '!!}\x11u%\\,>{^$]%%('}, {0xb, 0x1, '[\x0e+&,\'+'}]}, {0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, '*\'/-q\xbd'}, {0x6, 0x1, '{{'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ',.'}, {0x5, 0x1, '@'}, {0x5, 0x1, ')'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '\\@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-:'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}, {0x4}, {0x8, 0x1, ')-(\''}, {0xa, 0x1, 'bond0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-:'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '9'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '%}\\.\'\\.-'}]}]}, @NFC_ATTR_LLC_SDP={0x1f8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '/+&*'}]}, {0x30, 0x0, 0x0, 0x1, [{0x12, 0x1, '{,%\\[]{\'\'$.#/['}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x6, 0x1, '\xb8}'}]}, {0x58, 0x0, 0x0, 0x1, [{0x7, 0x1, '+&^'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '#+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '$#'}, {0xa, 0x1, 'bond0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '+,&{-/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x10, 0x1, '},\\#@*,-\xd9]-&'}]}, {0x58, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '@'}, {0x7, 0x1, '(]^'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x7, 0x1, ']//'}, {0x7, 0x1, '-(-'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x5, 0x1, '['}, {0x9, 0x1, '{{#&}'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'p_//:-'}, {0x6, 0x1, '-\\'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '-['}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x634}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00', {0x43}, 0xff}) 17.086528868s ago: executing program 0 (id=993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x634, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '!2'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xc, 0x1, '\r\'@*{@.('}]}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, '!^*&'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '+:'}, {0x7, 0x1, '\xb5^]'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '@^.!--*$'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '$'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '#}!%'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x174, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0xd, 0x1, ';(]\\:\\(-]'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, 'V'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x94, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '\'%!),'}, {0x6, 0x1, '%/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '.%%^\''}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x8, 0x1, '-\\*+'}, {0x4}, {0x6, 0x1, ':['}, {0x7, 0x1, '[]\xab'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xa, 0x1, 'F&:&)^'}, {0x8, 0x1, '\x88)%\\'}, {0xb, 0x1, '*\x17%{\\@-'}]}]}, @NFC_ATTR_LLC_SDP={0x134, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ':-'}, {0x8, 0x1, ']\\\'-'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x1e, 0x1, ']+^{.@!^@-\xa1!@*-\xbf]%{}{$%./['}, {0x4}, {0x14, 0x1, '!!}\x11u%\\,>{^$]%%('}, {0xb, 0x1, '[\x0e+&,\'+'}]}, {0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, '*\'/-q\xbd'}, {0x6, 0x1, '{{'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ',.'}, {0x5, 0x1, '@'}, {0x5, 0x1, ')'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '\\@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-:'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}, {0x4}, {0x8, 0x1, ')-(\''}, {0xa, 0x1, 'bond0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-:'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '9'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '%}\\.\'\\.-'}]}]}, @NFC_ATTR_LLC_SDP={0x1f8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '/+&*'}]}, {0x30, 0x0, 0x0, 0x1, [{0x12, 0x1, '{,%\\[]{\'\'$.#/['}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x6, 0x1, '\xb8}'}]}, {0x58, 0x0, 0x0, 0x1, [{0x7, 0x1, '+&^'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '#+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '$#'}, {0xa, 0x1, 'bond0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '+,&{-/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x10, 0x1, '},\\#@*,-\xd9]-&'}]}, {0x58, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '@'}, {0x7, 0x1, '(]^'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x7, 0x1, ']//'}, {0x7, 0x1, '-(-'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x5, 0x1, '['}, {0x9, 0x1, '{{#&}'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'p_//:-'}, {0x6, 0x1, '-\\'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '-['}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x634}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00', {0x43}, 0xff}) 6.875494096s ago: executing program 0 (id=993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x634, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '!2'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xc, 0x1, '\r\'@*{@.('}]}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, '!^*&'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '+:'}, {0x7, 0x1, '\xb5^]'}]}, {0x70, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '@^.!--*$'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '$'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '#}!%'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x174, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0xd, 0x1, ';(]\\:\\(-]'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, 'V'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x94, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '\'%!),'}, {0x6, 0x1, '%/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x9, 0x1, '.%%^\''}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x8, 0x1, '-\\*+'}, {0x4}, {0x6, 0x1, ':['}, {0x7, 0x1, '[]\xab'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xa, 0x1, 'F&:&)^'}, {0x8, 0x1, '\x88)%\\'}, {0xb, 0x1, '*\x17%{\\@-'}]}]}, @NFC_ATTR_LLC_SDP={0x134, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ':-'}, {0x8, 0x1, ']\\\'-'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x1e, 0x1, ']+^{.@!^@-\xa1!@*-\xbf]%{}{$%./['}, {0x4}, {0x14, 0x1, '!!}\x11u%\\,>{^$]%%('}, {0xb, 0x1, '[\x0e+&,\'+'}]}, {0x44, 0x0, 0x0, 0x1, [{0xa, 0x1, '*\'/-q\xbd'}, {0x6, 0x1, '{{'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x6, 0x1, ',.'}, {0x5, 0x1, '@'}, {0x5, 0x1, ')'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '\\@'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-:'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x13, 0x1, 'bridge_slave_0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x54, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ':'}, {0x4}, {0x8, 0x1, ')-(\''}, {0xa, 0x1, 'bond0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '{,-:'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '9'}, {0xa, 0x1, 'bond0\x00'}, {0xc, 0x1, '%}\\.\'\\.-'}]}]}, @NFC_ATTR_LLC_SDP={0x1f8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '/+&*'}]}, {0x30, 0x0, 0x0, 0x1, [{0x12, 0x1, '{,%\\[]{\'\'$.#/['}, {0xa, 0x1, 'bond0\x00'}, {0x4}, {0x6, 0x1, '\xb8}'}]}, {0x58, 0x0, 0x0, 0x1, [{0x7, 0x1, '+&^'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '#+'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x6, 0x1, '$#'}, {0xa, 0x1, 'bond0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '+,&{-/'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x10, 0x1, '},\\#@*,-\xd9]-&'}]}, {0x58, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, '@'}, {0x7, 0x1, '(]^'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xa, 0x1, 'bond0\x00'}, {0x7, 0x1, ']//'}, {0x7, 0x1, '-(-'}, {0xa, 0x1, 'bond0\x00'}, {0xa, 0x1, 'bond0\x00'}, {0x5, 0x1, '['}, {0x9, 0x1, '{{#&}'}, {0x4}, {0xa, 0x1, 'bond0\x00'}, {0x13, 0x1, 'bridge_slave_0\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'p_//:-'}, {0x6, 0x1, '-\\'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0x5, 0x1, ':'}, {0x6, 0x1, '-['}, {0x13, 0x1, 'bridge_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x634}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00', {0x43}, 0xff}) 3.469672229s ago: executing program 2 (id=1393): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_ts_info}) r1 = socket(0x8, 0x80000, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) (async, rerun: 64) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x51, 0x5, 0x89, r6, 0x8ba, '\x00', 0x0, r7, 0x2, 0x1, 0x1, 0xf}, 0x50) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x54, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (rerun: 64) sendto$packet(r4, &(0x7f0000000240)="b23ff52220b41b7f29b9ac743b503e337f4087df12e336c5c23b0f1249bcc4d94a27b7ede391e583", 0x28, 0x4000, &(0x7f0000000580)={0x11, 0x3, r9, 0x1, 0x9b}, 0x14) (async) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r10, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xc, 0x42}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x11) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000007c0)="23d53dc180370a810d8484f407269fc91817ff15eec5b60550d0c935bd5760cefb5fe873b07be37f26e4035b4ededf535b7cfc35f885d7dccd2d6379e1cc0904a91cbc59efddab7b17f9172663e1e6266a2dc97bbfbf3fa50fe30283d66e9c3287c7ee98", 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r8, 0x58, &(0x7f0000000840)}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000980)={0xffffffffffffffff, 0x8, 0xed8, 0x978c}) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xdcf, 0x0, r8, 0x614, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x5, &(0x7f0000000900)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x2, &(0x7f0000000a40)=[r8, r8, r8, r8, r6, r8, r6, r13, r6, r2], &(0x7f0000000a80)=[{0x3, 0x4, 0xe, 0x2}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x8}, 0x94) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r14, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9ad}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x54) (async) ppoll(&(0x7f0000000c80)=[{r7, 0x20}, {r0, 0x2224}], 0x2, &(0x7f0000000cc0)={0x0, 0x3938700}, &(0x7f0000000d00)={[0x7fff]}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000d40)={'vcan0\x00'}) unshare(0x34020680) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000d80)=0x5, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44880}, 0x4010) 3.098724767s ago: executing program 2 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)={0x2016}) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_wait(r7, &(0x7f00000001c0)=[{}], 0x1, 0x7fffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xe4, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4f9eaf2b13bb27e706ed2ad7c586cf59475fdcb806d4e798"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9375972e5956e80a179dc02e0506eb3a98930b66228d842"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "18c20f716e0a54c6db0e87d3fe4f5603d3b24fcb7b27932e"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80840}, 0x0) 3.012994304s ago: executing program 3 (id=1398): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x80}, {0xbd1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0xff}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x12, &(0x7f0000003e40)=""/202, &(0x7f0000003f40)=0xca) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000b40)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x972f) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5d4d3ca243afa3a5fc65260cff0f00000000000061f2b19f41f223590780e60bbfa2108532b7d11423eda4f422f32aa72ad4a4f7b63e1f9ab08632b4c2f1a46903ad2d88ebc59f35", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf254b00000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) 2.934193575s ago: executing program 3 (id=1399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB=','], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000003100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x6}}, @func={0x6, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x392f7230ce20949d, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1, 0x7fff}, 0x28) sendmsg$inet6(r3, &(0x7f0000000280)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @mcast2, 0x3}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="289b0b68f43415f8c32a4f381cb9330e0ebab9392dc9f67c7816ea37f2ccce000ccabe60bbf58a26f1fcbfe02bb884233cb86e33d9d11b62954e4a71f8f7fbca0257c0a2b09e80d7e6e5b112de55a9d65be00900dbf6f6bdb5d0d8f397fc33f1e9b381744b102e4bf048e76f4ef12caaded612d8202f30648990b727d369f3a5768c7501241c568eac5ba9b95885e24964cea945dd0c0d9e02ee55404ad37cd0b9faab9898e6ad7975eee3c099c24d51da1198392f0dc046172ac17b27308cb6d3c552fede3a750e1db06f2a77dc0968b678bf58eea5652ccd06aac6eac573ffa61a2bb17b7455e0ca127910", 0xec}, {&(0x7f0000000100)="1769e43cae1e11331d3082bdf1221a606b7f5b3e24eb2590", 0x18}, {&(0x7f0000000140)="105f17a2807933", 0x7}, {&(0x7f00000005c0)="6308e5f5141ca6ee02efbdda59254cf1f1608c10e60799887620a0c1401f419398ac68cd86ae9c879c3b9f300ebbafe787aacda9b52e18dc392c8625db52daea7ade5b6236c02c2c8958b6b16db3da5e2bf9640405ef89fc1814349ed236ac9937c8930a7b2019715538ef7a0b92dd94b730cad6de9c27aae85fc1dfb7bd2156736d2c7c", 0x84}, {&(0x7f0000000680)="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", 0x1000}], 0x5, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x100000}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010100}, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x3b, 0x6, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x8289, [0x80000000, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x3, [0x3]}}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xff}]}}}], 0xf8}, 0x8008) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB='D\x00>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q\x00', @ANYRES32=0x0, @ANYBLOB="15e3000021000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="50b64e7d080379c1665da2876cff30336a7ba10802e3397d0762538e75ef6b3bdcd6cc0e18764d7611f43e68330d331eaeb46f7aa0e763109d7708a289c7ddb35f66b4950bf8f512d3b451a578409678"], 0x44}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x1e8, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), 0xffffffffffffffff) 2.602629369s ago: executing program 3 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x3, 0x0) unshare(0x480) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x480, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2}}], 0x1, 0x2040000, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004c0000440000000003059078ac1e00010a01010044140593e00000010000b9320a010101000040008903ce830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000907800000052bf06aa7bc3"], 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e24, @broadcast}}) 2.364579551s ago: executing program 3 (id=1403): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @generic={0x82, 0xa, "77dbc45c59845b03"}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @private=0xa010101]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) 2.184385225s ago: executing program 2 (id=1405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}]}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000"], 0x0, 0x6e, 0x0, 0x1}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4100, 0x1004}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000001f40)=""/223, 0xdf}], 0x2}, 0x80000000}], 0x2, 0x12002, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b0", 0x2000cc0, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00000100154770c8ffdbdf2501000099992fb400"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r13, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r13, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010025bd7000c9589221836a17e658cf059850000008"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 2.133516782s ago: executing program 1 (id=1406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000400000001005c70f3d436a32b627ca200000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r3}, 0x18) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async, rerun: 64) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) getsockname$packet(r7, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) (async, rerun: 64) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1.322772385s ago: executing program 1 (id=1408): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000b320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r6}, 0x8) ppoll(&(0x7f0000000700)=[{r1, 0x200}, {r0, 0x100}, {r6, 0x8018}, {r6, 0xd}, {r7, 0x44d0}, {r0, 0x8040}, {r1, 0x40}], 0x7, &(0x7f0000000740), &(0x7f0000000880)={[0x7]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000080f9ff0004000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000001400030069"], 0x64}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x4, 0x3, 0xfffffffa, 0x9, 0x8, 0xe783, 0x1ff}, 0x1c) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20018001) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x59}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bind$phonet(r10, &(0x7f0000000040)={0x23, 0x4}, 0x10) close(r10) recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000004c0)=""/257, 0x101}], 0x2}, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$tipc(r9, &(0x7f0000000340)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x3}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="cb709fe3991b1c7b21c636b34ce1380acb838354cb272f3d7738317c05cdae1ce030faf340339ae3e748e07fe593351b77f6dcd74172e9a44d294338124ab110590b2e74ccb2cd3c63facd15b930fbbe1d5eeb818e349b06b4a36ccdbea344e9993318381fa03ce70bed9f7b36", 0x6d}, {&(0x7f0000000600)="2727e04492dc8861108a11cbc393692cd441c7d08167aee836d59d05775521e68bea3c28ef502530e7bd9196a29a934eb2d58952bfedceac8cd6ce2e7fda95af48bd356fc6b72e09219a31e731965fa9e808f66f87eb467344d86c8c175de4926e57f6af7d0ee98c42a74d7c0e81230a23351f43f92c0d1501c5fbf9ae0e26f894df26ee9e329601c46c85f0927614c4fc031dac22da8333498a75c37df13b6217f9ede2af1510f8cf6337bfa6106ac25b2405d960dbb1e6406543b353cda22b82de91a257f2d86cd4132c16b7031c18ac7595589399c5e9a87e12b836deb4af4b", 0xe1}], 0x3, &(0x7f00000007c0)="5839ce8ba7820d396c8c7ba2a7620f0e65081ba99d06a64f82da1e82cf084a321f8fc9ad5d9d18e9db0b34939de9228f8d72d02a99b09ba74633f7948cfbd8cf57fcddf265655d0847ab559b335fdd55e27fff773d4e44905c4bc3700134bb47f5b0f72b205cb8b0a58e639f04faa1370b07a15c4dce10e9df79e4c1c957df9515d09d81adcad8", 0x87, 0x9699efaea708d1ad}, 0x40c8805) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.260294818s ago: executing program 4 (id=1409): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 1.083038391s ago: executing program 3 (id=1410): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0xfffffffd, 0x80008}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0) 1.010505696s ago: executing program 4 (id=1411): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x4a4, 0x2c, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0x0, 0x4}, {0xfff2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x470, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syzkaller0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x7804, 0xe6, 0xb, 0x3, 0xf, 0x4, 0x85, 0x7, 0xffffffff, 0x7, 0x100, 0x0, 0x228, 0x7, 0x68, 0x1ff, 0x7fff, 0x40, 0x0, 0x7, 0x3, 0x0, 0x81cb, 0x8, 0x6e, 0x981, 0x5, 0x1, 0x1, 0x9, 0xa116, 0x7143, 0xb, 0x5a, 0xa3, 0x0, 0xffff0001, 0x3, 0xffff, 0x98cb, 0x7, 0xfff, 0x280000, 0xffffff7f, 0xfffffff2, 0x7fffffff, 0x3, 0x0, 0x80000001, 0x5, 0x1998, 0x6, 0xff000000, 0xfffffff7, 0x6, 0x0, 0xfffffff9, 0x0, 0x8000, 0xa, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x80000000, 0x928, 0x3a, 0x10001, 0xc, 0x8ac, 0x34a0039, 0x66, 0x4, 0x0, 0x0, 0x7, 0x1, 0x7, 0x7, 0xc5, 0x0, 0x1000, 0x0, 0x8, 0x7, 0x200, 0x4, 0x7, 0x3, 0x8, 0x7f, 0x9, 0x6, 0x4, 0xeef4, 0x0, 0x7cf6, 0xc, 0x101, 0x1, 0x1000, 0x5, 0xb631, 0x1ff, 0x7, 0x7, 0x7, 0x4, 0x50a, 0x9, 0x5, 0xfffffffb, 0x6, 0xf, 0x6, 0x0, 0x9718, 0x2, 0xad, 0x6, 0x7, 0x0, 0x1, 0xed, 0x1, 0xc, 0x4, 0x7, 0x0, 0xe7, 0x587, 0x7, 0x0, 0x7fffffff, 0x2, 0x5, 0x39, 0x8, 0x3c3, 0x6, 0x4, 0x0, 0x6456, 0x3, 0x4, 0x7, 0x2, 0x0, 0x1, 0x2, 0xffffffff, 0x10, 0x6692, 0x208cece9, 0x3, 0x800, 0x7, 0x3, 0x12, 0xd, 0x2, 0x400, 0xffff, 0x2, 0xfffffffb, 0xffffc290, 0x40, 0x8000, 0x7ff, 0x6, 0x100, 0x8, 0x6, 0xf, 0x7fff, 0x10, 0x2, 0x1, 0x800, 0x5, 0x20, 0x800, 0x8, 0x0, 0x3, 0x7fffffff, 0x0, 0x400, 0x9, 0x1000, 0x81, 0xf, 0x2, 0x4, 0x0, 0x0, 0x7, 0x4, 0x7fffffff, 0x6, 0x800, 0x10, 0x8, 0x5, 0xfffffff9, 0xff, 0x6, 0x3, 0x3, 0x6, 0x9, 0x1, 0x87, 0x69bbdd12, 0x400, 0xd3a, 0x7, 0x7, 0x5, 0x6, 0x92, 0x8d, 0x4, 0x0, 0x8, 0xe9, 0x6, 0x2, 0x8, 0x5, 0x5, 0x4, 0x22f, 0x1000, 0x2, 0x3, 0x364c4b45, 0xf28c, 0x4ed, 0x3ff, 0x7fffffff, 0x1000, 0x10, 0x5, 0x3, 0x88d9, 0x0, 0x2, 0x7, 0x9, 0x9, 0x80000001, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf058, 0x2, 0x0, 0x1ff, 0x4, {0x7, 0x0, 0x4dbe, 0x7, 0x9e, 0x9}, {0x6, 0x2, 0x1, 0x7, 0xfc01, 0x5}, 0x7, 0x5, 0xa82}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4a4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x1e, 0x0, &(0x7f0000000040)="13435c46632b5f1ef020bc6a5c73e4e71c9b050000000500080001d67be9", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xba3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d1}, 0x404c000) 1.007641104s ago: executing program 1 (id=1412): syz_emit_ethernet(0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00006700fe800000000000000000000000000000fe8000000000000000000000000000aaafb7f704000000c20a7320423feb43532e610f7050ec3a19cb6fbaef6b1f838afe4272e4d32c58a811901ac1aaf4c363f347a3d993867c6aac337a754e1ce4051c78ccea677ae0b3d40bb3f500000000000090c1f7df833042c658d48626fa9c71b4471bb5ed8f2a4bad3e3c7fce3442200a13ef0716e3b2f59aeb15cd83b7a326a91c7f3a2fba99a72d29cb9a0ad5eefec7fcead2ac119978dc97d956a3664e7a69edbb56c16f9897306e1de5dfe990"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=@newpolicy={0xc0, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x5, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3c, r3, r2}, {0xb31, 0x1000, 0x1, 0xd09, 0xb5cf, 0xae0, 0x7, 0xc4}, {0x1, 0x4f73, 0x1, 0x100000001}, 0x8001, 0x6e6bbc, 0x2, 0x0, 0x1, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000801) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000006000000000000090f00000000000000"], 0x14}}, 0x0) 912.361773ms ago: executing program 4 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0), 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001114010027bd7000fcdbdf2508004a0002000000080003000000000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x54}}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000180)="adc84a2238c5b96b19707a853877fc5d5a2917479a09c1650f5f42c495d1", 0x1e) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) r11 = socket(0x1e, 0x800, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x84) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 761.3556ms ago: executing program 1 (id=1414): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8001}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x239}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x200}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x6d, 0xac, "0c84e03df11ce5f2a781fc54663824bae5fc1f86ca04b95368718f1a34285d913fd2e05685e5c35f18dcdef1286822a19d39255b0c85600ad8a8454ff432eda98b6fd220ec70408fe8ec9c20719c2239e69fda1822b4ee23fa1d73ce12005c6bb06e2dca3f36de1f67"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53e}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x200440b4}, 0x20000000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x4000010, r0, 0xf7e6f000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000240)=0x7, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000280)="6dac5eb3c81458c194c2329061b1365fdab3d26143557b4a46b2c53a1193ea6b67f0343d1a48abcb76a4a3fe627d7c324a5137e4849af2bd3fe0aae91814a828fea3b8bbcb10dcd18e40406010cffc2c1172", 0x52) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000300)={0x1, 0x0, 0xd}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7fffffff}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x5f}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x200}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x38}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xac4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xc8}, @NL80211_TXQ_ATTR_CWMAX={0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2b}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x4}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x80}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2800}, 0x4c002) (async) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000500)=0x6, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x24, 0xed14, 0x48, @remote, @private1, 0x80, 0x8000, 0x2, 0x5}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x200, 0x8, {{0x28, 0x4, 0x0, 0x23, 0xa0, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast2, {[@generic={0x94, 0x6, "b8e2e8d1"}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x9, [{@multicast2}, {@private=0xa010100, 0xc}]}, @timestamp={0x44, 0x14, 0x1e, 0x0, 0x1, [0x5, 0x80, 0xbd, 0x3]}, @end, @timestamp={0x44, 0x18, 0xfb, 0x0, 0x0, [0x0, 0xffff2674, 0x7fff, 0x100, 0x6]}, @ssrr={0x89, 0x7, 0xd6, [@dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0xf, 0x3e, [@remote, @loopback, @broadcast]}, @ssrr={0x89, 0x27, 0xae, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x8, 0x700, 0x6f8, 0x5, {{0x18, 0x4, 0x1, 0x1d, 0x60, 0x66, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0xb, 0x9b, [@multicast2, @empty]}, @timestamp={0x44, 0x8, 0xb0, 0x0, 0x0, [0x0]}, @noop, @lsrr={0x83, 0xb, 0xdb, [@dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @lsrr={0x83, 0x7, 0x9, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0xf6, [@private=0xa010100, @multicast2, @loopback, @multicast1]}, @ssrr={0x89, 0xb, 0x6c, [@multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000900)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x10, 0x40, 0xcd1c, 0x1, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x64, 0x0, 0x3, 0x9c75542fa7e898a9, 0x0, @remote, @empty, {[@noop, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xa1, 0x3, 0x0, [{@multicast1, 0x7}, {@rand_addr=0x64010102}, {@remote, 0x80000001}, {@rand_addr=0x64010100, 0x8}]}, @lsrr={0x83, 0xf, 0x23, [@multicast2, @multicast2, @multicast1]}, @noop, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xb080022}, 0xc, &(0x7f0000001240)={&(0x7f0000000c80)={0x584, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2a}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x4}}, {{0x8, 0x1, r18}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f94}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) 582.750632ms ago: executing program 3 (id=1415): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}, @srh={0x0, 0x0, 0x4, 0x0, 0x5, 0x20, 0x5}]}}}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000140)="555c721f62ca41cefef971dcd3f08468530ab2420b24da956288f95e6a00b89c9e186cdf1dc5fad64a73eca9d299701f2a1644820108cb1512e57ab6c213aca479105dfd1c33ea6770ebd503432d0e9cbf52bf6eecbc7f26025a3088a16e2a983a2b54d74f5762a5b75a462cb5702684620df4eb", 0x74) write$cgroup_int(r2, &(0x7f0000000080)=0x30000000, 0x12) r4 = socket(0x21, 0x2, 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10, 0x110, 0xa}], 0x30}, 0x0) 567.752468ms ago: executing program 2 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff09aaaaaaaa0008004503001c00000000002f90780a0100fde000"], 0x0) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) socket$inet6_sctp(0xa, 0x7c8ba12f78933217, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r3, 0x0, 0x20}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000", "0000040011bf0403"}, 0x28) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd2499", 0x16, 0x4000, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000300)=""/19, 0x13, 0x40000041, 0x0, 0x0) 536.889215ms ago: executing program 1 (id=1417): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 390.169363ms ago: executing program 1 (id=1418): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) (async) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000005c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="b7f8a937a07a3180efa521b00a8b5157d9364fe525a1f165c795dc676e6542389c2f8af7fd0f6da28afa6c43fcf5", 0x2e}], 0x1, &(0x7f00000019c0)=[{0xc0, 0x114, 0x1, "8231fd58eaebeed5d97f4aabd96885535cd2f3fa4507c542a45e47616cf8fc397b7fd907b10764f8001ea5d9c50a02f326f4c4f2743f1ba5d82ef81075f30f2107a0d8f74275a3f0aa51d23c76a69dd467252c876d530bd8d09b85803464e59dfa9eac0ee6eb62a5086b57e8e22089d6bf64306a385cf776f69aacaf061f4c8b7b11c9649046795dc01e249b164715f93191be0d2babab17b18e88a0a22b0721823eeca925e10dd129835611f367ae8a"}, {0x50, 0x114, 0x7, "6f74e25d88907da2dc4ec5f68f9175b80af7f4f2be9f979559a98c74f8a3ce032780827cdddba8c8672a291749356260e1887d975c10a8e0ef22babc616459"}, {0xa8, 0x118, 0x2, "8e3a66860912c57b9ba1612c61262c58984600cdaa73ae14e949fc29d170b5c101dd0d731629a0e68d5a80432edbfc85eca9ee4559455f5f34d88efd83a26d0d2d928e6aa1c816756405d5e8752f3b4b1d7d93e25969f9a0c7365c4bab0f499e35c237e58a3d900b4f1b33ff734e5430c14187602c96b5b23ce609665340af7eeb692f6a51fa50d14f2fac4b58ae1edbe9a095a6e8"}, {0x20, 0x118, 0x400, "d37e789501b7474ec027"}, {0x28, 0x101, 0x6, "7d597a6d6c035bb143f1379bfbd451caec"}, {0x38, 0x101, 0xb1e0, "56023e04f25c884793522d097d59671c11aa31d43b0891b8aaee81d6d0a1d55965"}, {0xc8, 0x104, 0x1, "5810b4e5a3857952babcfc4fdbe9505ba0d59c7d67b8dd920708b09cff460d86503eaa044bede094d8ee1ddadcfb0719da145d583ccb924b55ef5caa9c403ebe89d9793d5754cc02bed2fb418097b3fa287dcd4183b203e996b2866aa72d9336086b68bcd9b4a5792fbcafa87d0344e43d88798ae985f17847176d7af3285ce2c9a57f604a3c8e7847e9fc8c4804a1f22b84d5437ff36046423ecd53f986151d5e44865139b0d3d4243d9ce960a8ab005dde57483086"}, {0x1010, 0x116, 0x7, "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"}, {0xc0, 0x3a, 0x6, "84cdf930cf71a377d664233ba27b48f76e55bfba498e02bff11468e0ec4ae5a45742c17eb87b8ddb87276ee3b772a77745af76b8e9ecd7ed309e9536321cf78c51a17dac825d8e290110a0f3aca3f1a657c5c98f6e0cdc8af70d0849ada5029029e22fcc39d073dea128cb18e98af28d517c1def2e5fbb2a54b84d2c86a928fb331991e593d2fd3eabc6db749eedfc5cb74ef979a278b8002ea3894f19d0c448e6d0bc7c1846d556e05a"}, {0x28, 0x29, 0x100, "0dd79b552301f5934c72286278ced4649d9b"}], 0x13f8}, 0x8801) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) (async) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 389.691366ms ago: executing program 4 (id=1419): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@default, @default, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r1 = socket(0x15, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r4) read(r3, 0x0, 0xff40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x200}) write$ppp(r3, &(0x7f0000000200)="bc72", 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000060000000400000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r6, &(0x7f0000000040), 0x0}, 0x20) 377.180736ms ago: executing program 2 (id=1420): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}, 0x4044004) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 312.388871ms ago: executing program 4 (id=1421): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x12, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000340)=0x68) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a51b3b019a1c7cf", @ANYRES32, @ANYBLOB="1945b11f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\xff\xc4\xc0%\x0ep\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r4, r1, 0x11, 0x10, 0xffffffffffffffff, @void, @value, @void, @void, r2}, 0x20) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x304}, "757413a98f8cfe5b", "0c2b2f622e429355fa1eb8405aa24f8535d51c835063e36e01fdcea2e3604a36", "f3410733", "08d43a9063a4f5ad"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f0000000100)=""/74, 0x4a}, &(0x7f0000000300)=0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000480)={@private2, 0x9, 0x3, 0x7e4a50ac6bb7ace5, 0x8, 0x8, 0x514}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x1c) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r8 = socket(0xa, 0x3, 0x40) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x200}]}]}, 0x40}}, 0x40) socket$alg(0x26, 0x5, 0x0) 250.141909ms ago: executing program 2 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xb}}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x101}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042790dda2c19ef1ee0100000000000000", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r10, 0x4, 0xc5, 0x9, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x1, 0x8000, 0x1b5, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x284, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb62e}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x0, 0x0, 0x7}, {0x2, 0x52, 0x2c, 0x1}, {0x24, 0x5, 0x5, 0x3}, {0x2, 0x8, 0x2, 0x10}, {0x5, 0x48, 0xfd, 0x1}, {0x1ff, 0x0, 0x2, 0xfffffffc}]}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xef}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x20001000) 0s ago: executing program 4 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x8004b709, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)="81", 0x1}], 0x1, 0x0, 0x0, 0x40088d5}], 0x1, 0x40) (async) recvmmsg(r4, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}], 0x2, 0x10000, 0x0) r5 = socket(0x15, 0x5, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022bbd7000fbdbdf250800000008003100050000000500380001000000050030000000000008003b000600000008003200050000000600280002000000050035000100000005002e0000000000409d7f066ea4c0a9bc7779fa9f4fca85603cd04804fd71ab0407aa05da71a6996ed115fe2595b2a515bc518f25d38b3ff0a1811c6ab45565f942f875095b869b4ee0e21aef46ed319688156030182756002dcdbe1be2bee65e7e83880d9f3951f368cd5e1f22f806d7f172533bf59b6db1b83b18e7777b5c80d20760b8df51b312cdb07c353ec7c2ce37e7d35b3e543e8f82896d8eb2acbbfc78"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x20050100) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000d600070100000000009f4d3e54c55af83d5194d89cb9663b400000070000000000000010058040ffff"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0xc010) (async) getsockname$packet(r5, &(0x7f0000000000), &(0x7f0000000080)=0x14) kernel console output (not intermixed with test programs): entered promiscuous mode [ 79.170767][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.202707][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.214574][ T5847] veth1_macvtap: entered promiscuous mode [ 79.316412][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.338163][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.400292][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.420729][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.432211][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.495297][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 79.507787][ T5974] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.515456][ T5975] bridge_slave_1: left allmulticast mode [ 79.527011][ T5975] bridge_slave_1: left promiscuous mode [ 79.533592][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.544695][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.559368][ T5975] bridge_slave_0: left allmulticast mode [ 79.583363][ T5975] bridge_slave_0: left promiscuous mode [ 79.589326][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.729301][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.738643][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.756565][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.798115][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807470][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.833967][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.879128][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910788][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.946328][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.957334][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.974346][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.983124][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.102814][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.114205][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.156532][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.175097][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.259336][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.270405][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.305117][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.312487][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.388391][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.424944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.508853][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.529885][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.673465][ T5852] Bluetooth: hci0: command tx timeout [ 80.674330][ T5857] Bluetooth: hci3: command tx timeout [ 80.760564][ T5857] Bluetooth: hci4: command tx timeout [ 80.761035][ T5852] Bluetooth: hci1: command tx timeout [ 80.766256][ T5857] Bluetooth: hci2: command tx timeout [ 80.977475][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 81.048542][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.899851][ T43] cfg80211: failed to load regulatory.db [ 82.173742][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 82.478261][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 82.850375][ T6038] syz.0.18 (6038) used obsolete PPPIOCDETACH ioctl [ 83.013127][ T6043] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 83.129604][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 83.159342][ T6043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.565397][ T6058] syz.0.24 (6058) used greatest stack depth: 18136 bytes left [ 84.059921][ T6080] netlink: 'syz.1.31': attribute type 32 has an invalid length. [ 84.073723][ T6081] __nla_validate_parse: 1 callbacks suppressed [ 84.073740][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 84.098902][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 84.136553][ T6080] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 84.240219][ T6085] sch_tbf: burst 1418 is lower than device lo mtu (65550) ! [ 84.475311][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 84.477407][ T6081] syz.3.28 (6081) used greatest stack depth: 16184 bytes left [ 84.617459][ T6101] Zero length message leads to an empty skb [ 84.654290][ T6101] netlink: 'syz.4.35': attribute type 1 has an invalid length. [ 84.750999][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 84.893950][ T6113] team0: Device gtp0 is of different type [ 84.991274][ T6115] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 85.031418][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 85.051036][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 85.198232][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 85.272737][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 85.804698][ T6163] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 85.812294][ T6163] netlink: 'syz.0.53': attribute type 2 has an invalid length. [ 85.886683][ T6166] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 85.898911][ T6166] netlink: 'syz.0.53': attribute type 2 has an invalid length. [ 85.986266][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 86.009723][ T6170] Bluetooth: MGMT ver 1.23 [ 86.043680][ T6172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 86.065289][ T6173] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 86.108427][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 86.172999][ T6177] !: renamed from dummy0 (while UP) [ 87.873955][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 87.887985][ T6262] FAULT_INJECTION: forcing a failure. [ 87.887985][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.958058][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.4.69 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 87.958087][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.958106][ T6262] Call Trace: [ 87.958122][ T6262] [ 87.958130][ T6262] dump_stack_lvl+0x189/0x250 [ 87.958165][ T6262] ? __pfx____ratelimit+0x10/0x10 [ 87.958190][ T6262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.958213][ T6262] ? __pfx__printk+0x10/0x10 [ 87.958251][ T6262] should_fail_ex+0x414/0x560 [ 87.958284][ T6262] _copy_to_user+0x31/0xb0 [ 87.958309][ T6262] simple_read_from_buffer+0xe1/0x170 [ 87.958340][ T6262] proc_fail_nth_read+0x1df/0x250 [ 87.958371][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.958401][ T6262] ? rw_verify_area+0x258/0x650 [ 87.958422][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.958450][ T6262] vfs_read+0x200/0x980 [ 87.958478][ T6262] ? __pfx___mutex_lock+0x10/0x10 [ 87.958505][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 87.958529][ T6262] ? __fget_files+0x2a/0x420 [ 87.958557][ T6262] ? __fget_files+0x3a0/0x420 [ 87.958578][ T6262] ? __fget_files+0x2a/0x420 [ 87.958607][ T6262] ksys_read+0x145/0x250 [ 87.958629][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 87.958645][ T6262] ? rcu_is_watching+0x15/0xb0 [ 87.958671][ T6262] ? do_syscall_64+0xbe/0x3b0 [ 87.958699][ T6262] do_syscall_64+0xfa/0x3b0 [ 87.958720][ T6262] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.958741][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.958759][ T6262] ? clear_bhb_loop+0x60/0xb0 [ 87.958782][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.958797][ T6262] RIP: 0033:0x7f566fb8d33c [ 87.958817][ T6262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.958833][ T6262] RSP: 002b:00007f5670a12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.958853][ T6262] RAX: ffffffffffffffda RBX: 00007f566fdb6160 RCX: 00007f566fb8d33c [ 87.958866][ T6262] RDX: 000000000000000f RSI: 00007f5670a120a0 RDI: 0000000000000005 [ 87.958877][ T6262] RBP: 00007f5670a12090 R08: 0000000000000000 R09: 0000000000000000 [ 87.958888][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.958900][ T6262] R13: 0000000000000000 R14: 00007f566fdb6160 R15: 00007ffea92b1eb8 [ 87.958929][ T6262] [ 89.074413][ T888] IPVS: starting estimator thread 0... [ 89.084951][ T6292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 89.128709][ T6296] __nla_validate_parse: 5 callbacks suppressed [ 89.128728][ T6296] netlink: 17 bytes leftover after parsing attributes in process `syz.0.76'. [ 89.205774][ T6295] IPVS: using max 27 ests per chain, 64800 per kthread [ 89.341908][ T6296] veth2: entered allmulticast mode [ 89.567962][ T6317] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 89.627812][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 89.656394][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 89.668453][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 89.688713][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.698634][ T6313] batadv_slave_1: entered promiscuous mode [ 89.934088][ T6328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 89.954986][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 90.037762][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.242250][ T6330] bridge_slave_1 (unregistering): left allmulticast mode [ 90.275985][ T6330] bridge_slave_1 (unregistering): left promiscuous mode [ 90.283118][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.288771][ T6348] FAULT_INJECTION: forcing a failure. [ 90.288771][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.331005][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.0.89 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 90.331033][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.331045][ T6348] Call Trace: [ 90.331052][ T6348] [ 90.331060][ T6348] dump_stack_lvl+0x189/0x250 [ 90.331090][ T6348] ? __pfx____ratelimit+0x10/0x10 [ 90.331115][ T6348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.331136][ T6348] ? __pfx__printk+0x10/0x10 [ 90.331160][ T6348] ? __might_fault+0xb0/0x130 [ 90.331195][ T6348] should_fail_ex+0x414/0x560 [ 90.331226][ T6348] _copy_from_user+0x2d/0xb0 [ 90.331250][ T6348] ___sys_sendmsg+0x158/0x2a0 [ 90.331271][ T6348] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.331338][ T6348] ? __fget_files+0x2a/0x420 [ 90.331363][ T6348] ? __fget_files+0x3a0/0x420 [ 90.331400][ T6348] __x64_sys_sendmsg+0x19b/0x260 [ 90.331422][ T6348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.331450][ T6348] ? __pfx_ksys_write+0x10/0x10 [ 90.331470][ T6348] ? rcu_is_watching+0x15/0xb0 [ 90.331499][ T6348] ? do_syscall_64+0xbe/0x3b0 [ 90.331529][ T6348] do_syscall_64+0xfa/0x3b0 [ 90.331553][ T6348] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.331577][ T6348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.331596][ T6348] ? clear_bhb_loop+0x60/0xb0 [ 90.331618][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.331637][ T6348] RIP: 0033:0x7f3af858e929 [ 90.331654][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.331669][ T6348] RSP: 002b:00007f3af9451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.331689][ T6348] RAX: ffffffffffffffda RBX: 00007f3af87b5fa0 RCX: 00007f3af858e929 [ 90.331703][ T6348] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 90.331715][ T6348] RBP: 00007f3af9451090 R08: 0000000000000000 R09: 0000000000000000 [ 90.331726][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.331737][ T6348] R13: 0000000000000000 R14: 00007f3af87b5fa0 R15: 00007ffc73292b18 [ 90.331769][ T6348] [ 90.594255][ T6350] Cannot find set identified by id 0 to match [ 90.604424][ T6350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 90.716549][ T6352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.239709][ T6373] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 91.279613][ T6373] netlink: 164 bytes leftover after parsing attributes in process `syz.4.96'. [ 91.983963][ T6393] FAULT_INJECTION: forcing a failure. [ 91.983963][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 92.021732][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.4.100 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 92.021761][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.021773][ T6393] Call Trace: [ 92.021781][ T6393] [ 92.021789][ T6393] dump_stack_lvl+0x189/0x250 [ 92.021817][ T6393] ? __pfx____ratelimit+0x10/0x10 [ 92.021844][ T6393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.021867][ T6393] ? __pfx__printk+0x10/0x10 [ 92.021899][ T6393] ? __pfx___might_resched+0x10/0x10 [ 92.021927][ T6393] should_fail_ex+0x414/0x560 [ 92.021961][ T6393] should_failslab+0xa8/0x100 [ 92.021988][ T6393] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 92.022013][ T6393] ? __alloc_skb+0x112/0x2d0 [ 92.022044][ T6393] __alloc_skb+0x112/0x2d0 [ 92.022075][ T6393] netlink_sendmsg+0x5c6/0xb30 [ 92.022112][ T6393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.022141][ T6393] ? aa_sock_msg_perm+0x94/0x160 [ 92.022172][ T6393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.022190][ T6393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.022217][ T6393] __sock_sendmsg+0x219/0x270 [ 92.022243][ T6393] ____sys_sendmsg+0x505/0x830 [ 92.022278][ T6393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.022317][ T6393] ? import_iovec+0x74/0xa0 [ 92.022344][ T6393] ___sys_sendmsg+0x21f/0x2a0 [ 92.022365][ T6393] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.022421][ T6393] ? __fget_files+0x2a/0x420 [ 92.022446][ T6393] ? __fget_files+0x3a0/0x420 [ 92.022482][ T6393] __x64_sys_sendmsg+0x19b/0x260 [ 92.022504][ T6393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.022533][ T6393] ? __pfx_ksys_write+0x10/0x10 [ 92.022554][ T6393] ? rcu_is_watching+0x15/0xb0 [ 92.022582][ T6393] ? do_syscall_64+0xbe/0x3b0 [ 92.022612][ T6393] do_syscall_64+0xfa/0x3b0 [ 92.022637][ T6393] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.022661][ T6393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.022680][ T6393] ? clear_bhb_loop+0x60/0xb0 [ 92.022704][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.022728][ T6393] RIP: 0033:0x7f566fb8e929 [ 92.022745][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.022778][ T6393] RSP: 002b:00007f5670a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.022798][ T6393] RAX: ffffffffffffffda RBX: 00007f566fdb5fa0 RCX: 00007f566fb8e929 [ 92.022813][ T6393] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 92.022825][ T6393] RBP: 00007f5670a54090 R08: 0000000000000000 R09: 0000000000000000 [ 92.022838][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.022849][ T6393] R13: 0000000000000000 R14: 00007f566fdb5fa0 R15: 00007ffea92b1eb8 [ 92.022880][ T6393] [ 92.440229][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 92.478922][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.487261][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.837023][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.860784][ T6383] batadv_slave_1: left promiscuous mode [ 93.076637][ T6408] veth0: entered promiscuous mode [ 93.107258][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.133540][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.174846][ T6261] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.216437][ T6401] veth0: left promiscuous mode [ 93.240644][ T6261] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.314396][ T6430] netlink: 168 bytes leftover after parsing attributes in process `syz.3.108'. [ 93.733889][ T6445] Illegal XDP return value 4294967294 on prog (id 126) dev N/A, expect packet loss! [ 93.820965][ T6452] netlink: 304 bytes leftover after parsing attributes in process `syz.2.114'. [ 93.882663][ T6445] syzkaller0: entered promiscuous mode [ 93.906945][ T6445] syzkaller0: entered allmulticast mode [ 94.063785][ T6462] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 94.254913][ T6471] __nla_validate_parse: 2 callbacks suppressed [ 94.254930][ T6471] netlink: 52 bytes leftover after parsing attributes in process `syz.1.119'. [ 94.309562][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 94.319117][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 94.461052][ T6479] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 95.243460][ T6462] bridge0: port 3(dummy0) entered blocking state [ 95.250947][ T6462] bridge0: port 3(dummy0) entered disabled state [ 95.257936][ T6462] dummy0: entered allmulticast mode [ 95.266265][ T6462] dummy0: entered promiscuous mode [ 95.280108][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 95.480976][ T6486] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 95.658330][ T6499] FAULT_INJECTION: forcing a failure. [ 95.658330][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.703444][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.4.124 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 95.703476][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.703488][ T6499] Call Trace: [ 95.703495][ T6499] [ 95.703504][ T6499] dump_stack_lvl+0x189/0x250 [ 95.703532][ T6499] ? __pfx____ratelimit+0x10/0x10 [ 95.703558][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.703580][ T6499] ? __pfx__printk+0x10/0x10 [ 95.703606][ T6499] ? __might_fault+0xb0/0x130 [ 95.703641][ T6499] should_fail_ex+0x414/0x560 [ 95.703673][ T6499] _copy_from_iter+0x1db/0x16f0 [ 95.703698][ T6499] ? rcu_is_watching+0x15/0xb0 [ 95.703722][ T6499] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 95.703748][ T6499] ? __pfx__copy_from_iter+0x10/0x10 [ 95.703769][ T6499] ? __build_skb_around+0x257/0x3e0 [ 95.703800][ T6499] ? netlink_sendmsg+0x642/0xb30 [ 95.703825][ T6499] ? skb_put+0x11b/0x210 [ 95.703855][ T6499] netlink_sendmsg+0x6b2/0xb30 [ 95.703888][ T6499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.703917][ T6499] ? aa_sock_msg_perm+0x94/0x160 [ 95.703946][ T6499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.703963][ T6499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.703990][ T6499] __sock_sendmsg+0x219/0x270 [ 95.704016][ T6499] ____sys_sendmsg+0x505/0x830 [ 95.704051][ T6499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.704089][ T6499] ? import_iovec+0x74/0xa0 [ 95.704113][ T6499] ___sys_sendmsg+0x21f/0x2a0 [ 95.704132][ T6499] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.704184][ T6499] ? __fget_files+0x2a/0x420 [ 95.704209][ T6499] ? __fget_files+0x3a0/0x420 [ 95.704244][ T6499] __x64_sys_sendmsg+0x19b/0x260 [ 95.704264][ T6499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.704291][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 95.704309][ T6499] ? rcu_is_watching+0x15/0xb0 [ 95.704335][ T6499] ? do_syscall_64+0xbe/0x3b0 [ 95.704365][ T6499] do_syscall_64+0xfa/0x3b0 [ 95.704397][ T6499] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.704421][ T6499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.704439][ T6499] ? clear_bhb_loop+0x60/0xb0 [ 95.704462][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.704480][ T6499] RIP: 0033:0x7f566fb8e929 [ 95.704496][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.704512][ T6499] RSP: 002b:00007f5670a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.704532][ T6499] RAX: ffffffffffffffda RBX: 00007f566fdb5fa0 RCX: 00007f566fb8e929 [ 95.704546][ T6499] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 95.704558][ T6499] RBP: 00007f5670a54090 R08: 0000000000000000 R09: 0000000000000000 [ 95.704570][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.704580][ T6499] R13: 0000000000000000 R14: 00007f566fdb5fa0 R15: 00007ffea92b1eb8 [ 95.704610][ T6499] [ 96.151952][ T6503] xt_CT: No such helper "snmp" [ 96.439637][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 96.623621][ T6528] netlink: 'syz.1.132': attribute type 2 has an invalid length. [ 96.905528][ T6538] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 96.984841][ T6538] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.292977][ T6550] IPv6: Can't replace route, no match found [ 97.311990][ T6550] IPv6: Can't replace route, no match found [ 97.434526][ T6550] IPv6: Can't replace route, no match found [ 97.468247][ T6550] IPv6: Can't replace route, no match found [ 97.543675][ T6550] IPv6: Can't replace route, no match found [ 97.549979][ T6550] IPv6: Can't replace route, no match found [ 97.559431][ T6550] IPv6: Can't replace route, no match found [ 97.566346][ T6550] IPv6: Can't replace route, no match found [ 97.572697][ T6550] IPv6: Can't replace route, no match found [ 97.579410][ T6550] IPv6: Can't replace route, no match found [ 97.585983][ T6555] FAULT_INJECTION: forcing a failure. [ 97.585983][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 97.599242][ T6550] IPv6: Can't replace route, no match found [ 97.610468][ T6550] IPv6: Can't replace route, no match found [ 97.616996][ T6550] IPv6: Can't replace route, no match found [ 97.627330][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 97.639741][ T6556] netlink: 'syz.0.140': attribute type 7 has an invalid length. [ 97.647895][ T6550] IPv6: Can't replace route, no match found [ 97.653950][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.4.139 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 97.653981][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.653996][ T6555] Call Trace: [ 97.654003][ T6555] [ 97.654010][ T6555] dump_stack_lvl+0x189/0x250 [ 97.654034][ T6555] ? __pfx____ratelimit+0x10/0x10 [ 97.654058][ T6555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.654084][ T6555] ? __pfx__printk+0x10/0x10 [ 97.654131][ T6555] ? ref_tracker_alloc+0x318/0x460 [ 97.654160][ T6555] should_fail_ex+0x414/0x560 [ 97.654203][ T6555] should_failslab+0xa8/0x100 [ 97.654230][ T6555] kmem_cache_alloc_noprof+0x73/0x3c0 [ 97.654251][ T6555] ? skb_clone+0x212/0x3a0 [ 97.654271][ T6555] skb_clone+0x212/0x3a0 [ 97.654293][ T6555] __netlink_deliver_tap+0x404/0x850 [ 97.654329][ T6555] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.654355][ T6555] netlink_deliver_tap+0x19c/0x1b0 [ 97.654382][ T6555] netlink_unicast+0x72f/0x8d0 [ 97.654416][ T6555] netlink_sendmsg+0x805/0xb30 [ 97.654452][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.654481][ T6555] ? aa_sock_msg_perm+0x94/0x160 [ 97.654511][ T6555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.654529][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.654552][ T6555] __sock_sendmsg+0x219/0x270 [ 97.654577][ T6555] ____sys_sendmsg+0x505/0x830 [ 97.654611][ T6555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.654649][ T6555] ? import_iovec+0x74/0xa0 [ 97.654675][ T6555] ___sys_sendmsg+0x21f/0x2a0 [ 97.654695][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.654750][ T6555] ? __fget_files+0x2a/0x420 [ 97.654774][ T6555] ? __fget_files+0x3a0/0x420 [ 97.654810][ T6555] __x64_sys_sendmsg+0x19b/0x260 [ 97.654831][ T6555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.654859][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 97.654877][ T6555] ? rcu_is_watching+0x15/0xb0 [ 97.654904][ T6555] ? do_syscall_64+0xbe/0x3b0 [ 97.654933][ T6555] do_syscall_64+0xfa/0x3b0 [ 97.654956][ T6555] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.654981][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.654999][ T6555] ? clear_bhb_loop+0x60/0xb0 [ 97.655021][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.655036][ T6555] RIP: 0033:0x7f566fb8e929 [ 97.655051][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.655063][ T6555] RSP: 002b:00007f5670a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.655079][ T6555] RAX: ffffffffffffffda RBX: 00007f566fdb5fa0 RCX: 00007f566fb8e929 [ 97.655093][ T6555] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 97.655105][ T6555] RBP: 00007f5670a54090 R08: 0000000000000000 R09: 0000000000000000 [ 97.655115][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.655126][ T6555] R13: 0000000000000000 R14: 00007f566fdb5fa0 R15: 00007ffea92b1eb8 [ 97.655156][ T6555] [ 97.656867][ T6556] netlink: 'syz.0.140': attribute type 8 has an invalid length. [ 97.742471][ T6550] IPv6: Can't replace route, no match found [ 97.750470][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 97.975811][ T6550] IPv6: Can't replace route, no match found [ 97.981994][ T6550] IPv6: Can't replace route, no match found [ 97.992684][ T6555] ip6erspan0: entered allmulticast mode [ 97.995446][ T6550] IPv6: Can't replace route, no match found [ 98.004625][ T6550] IPv6: Can't replace route, no match found [ 98.010903][ T6550] IPv6: Can't replace route, no match found [ 98.030085][ T6550] IPv6: Can't replace route, no match found [ 98.076892][ T6550] IPv6: Can't replace route, no match found [ 98.083088][ T6550] IPv6: Can't replace route, no match found [ 98.501816][ T6576] netlink: 'syz.3.147': attribute type 13 has an invalid length. [ 98.546147][ T6576] netlink: 'syz.3.147': attribute type 17 has an invalid length. [ 98.784770][ T6576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.950467][ T6597] FAULT_INJECTION: forcing a failure. [ 98.950467][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 99.012713][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.0.152 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 99.012741][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.012752][ T6597] Call Trace: [ 99.012760][ T6597] [ 99.012768][ T6597] dump_stack_lvl+0x189/0x250 [ 99.012795][ T6597] ? __pfx____ratelimit+0x10/0x10 [ 99.012819][ T6597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.012841][ T6597] ? __pfx__printk+0x10/0x10 [ 99.012870][ T6597] ? __pfx___might_resched+0x10/0x10 [ 99.012891][ T6597] ? fs_reclaim_acquire+0x7d/0x100 [ 99.012924][ T6597] should_fail_ex+0x414/0x560 [ 99.012957][ T6597] should_failslab+0xa8/0x100 [ 99.012984][ T6597] __kmalloc_cache_noprof+0x70/0x3d0 [ 99.013006][ T6597] ? rtnl_newlink+0xed/0x1c70 [ 99.013029][ T6597] ? kasan_save_free_info+0x46/0x50 [ 99.013061][ T6597] rtnl_newlink+0xed/0x1c70 [ 99.013083][ T6597] ? netlink_sendmsg+0x805/0xb30 [ 99.013106][ T6597] ? __sock_sendmsg+0x219/0x270 [ 99.013136][ T6597] ? ____sys_sendmsg+0x505/0x830 [ 99.013161][ T6597] ? ___sys_sendmsg+0x21f/0x2a0 [ 99.013175][ T6597] ? __x64_sys_sendmsg+0x19b/0x260 [ 99.013189][ T6597] ? do_syscall_64+0xfa/0x3b0 [ 99.013212][ T6597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.013243][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.013288][ T6597] ? kasan_quarantine_put+0xdd/0x220 [ 99.013308][ T6597] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.013339][ T6597] ? nlmon_xmit+0xb0/0x100 [ 99.013358][ T6597] ? kmem_cache_free+0x18f/0x400 [ 99.013388][ T6597] ? __local_bh_enable_ip+0x12d/0x1c0 [ 99.013410][ T6597] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.013434][ T6597] ? __local_bh_enable_ip+0x12d/0x1c0 [ 99.013455][ T6597] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 99.013481][ T6597] ? __dev_queue_xmit+0x27b/0x3b50 [ 99.013514][ T6597] ? __lock_acquire+0xab9/0xd20 [ 99.013559][ T6597] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.013582][ T6597] rtnetlink_rcv_msg+0x7cc/0xb70 [ 99.013611][ T6597] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 99.013634][ T6597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.013656][ T6597] ? ref_tracker_free+0x63a/0x7d0 [ 99.013671][ T6597] ? __copy_skb_header+0xa7/0x550 [ 99.013690][ T6597] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.013707][ T6597] ? __skb_clone+0x63/0x7a0 [ 99.013733][ T6597] netlink_rcv_skb+0x205/0x470 [ 99.013759][ T6597] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.013786][ T6597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.013825][ T6597] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.013848][ T6597] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.013873][ T6597] netlink_unicast+0x758/0x8d0 [ 99.013907][ T6597] netlink_sendmsg+0x805/0xb30 [ 99.013943][ T6597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.013971][ T6597] ? aa_sock_msg_perm+0x94/0x160 [ 99.014001][ T6597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.014019][ T6597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.014044][ T6597] __sock_sendmsg+0x219/0x270 [ 99.014070][ T6597] ____sys_sendmsg+0x505/0x830 [ 99.014104][ T6597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.014150][ T6597] ? import_iovec+0x74/0xa0 [ 99.014176][ T6597] ___sys_sendmsg+0x21f/0x2a0 [ 99.014196][ T6597] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.014250][ T6597] ? __fget_files+0x2a/0x420 [ 99.014274][ T6597] ? __fget_files+0x3a0/0x420 [ 99.014311][ T6597] __x64_sys_sendmsg+0x19b/0x260 [ 99.014330][ T6597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.014357][ T6597] ? __pfx_ksys_write+0x10/0x10 [ 99.014376][ T6597] ? rcu_is_watching+0x15/0xb0 [ 99.014404][ T6597] ? do_syscall_64+0xbe/0x3b0 [ 99.014432][ T6597] do_syscall_64+0xfa/0x3b0 [ 99.014454][ T6597] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.014476][ T6597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.014495][ T6597] ? clear_bhb_loop+0x60/0xb0 [ 99.014518][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.014536][ T6597] RIP: 0033:0x7f3af858e929 [ 99.014553][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.014575][ T6597] RSP: 002b:00007f3af9451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.014599][ T6597] RAX: ffffffffffffffda RBX: 00007f3af87b5fa0 RCX: 00007f3af858e929 [ 99.014618][ T6597] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.014630][ T6597] RBP: 00007f3af9451090 R08: 0000000000000000 R09: 0000000000000000 [ 99.014641][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.014651][ T6597] R13: 0000000000000000 R14: 00007f3af87b5fa0 R15: 00007ffc73292b18 [ 99.014687][ T6597] [ 99.948327][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.016297][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.101611][ T6618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.336040][ T6627] netlink: zone id is out of range [ 100.411179][ T6627] netlink: zone id is out of range [ 100.456600][ T6627] netlink: zone id is out of range [ 100.497674][ T6627] netlink: zone id is out of range [ 100.504361][ T6627] netlink: zone id is out of range [ 100.510158][ T6627] netlink: zone id is out of range [ 100.529874][ T6627] netlink: zone id is out of range [ 100.536540][ T6627] netlink: zone id is out of range [ 100.541994][ T6627] netlink: zone id is out of range [ 100.829087][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 100.839018][ T6646] netlink: 'syz.4.169': attribute type 2 has an invalid length. [ 100.848466][ T6646] netlink: 'syz.4.169': attribute type 2 has an invalid length. [ 100.859852][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 100.961346][ T6649] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 100.977779][ T6649] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 101.280148][ T6655] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.514563][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.175'. [ 101.629311][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 101.692921][ T6682] warning: `syz.3.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.049311][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.068558][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.102927][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.134081][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.432545][ T6702] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 103.625152][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 103.653844][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 103.749149][ T6743] Cannot find del_set index 4 as target [ 103.889430][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 104.081134][ T6750] ip6erspan0: entered allmulticast mode [ 104.669713][ T6778] sctp: [Deprecated]: syz.4.210 (pid 6778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.669713][ T6778] Use struct sctp_sack_info instead [ 104.907078][ T6787] 8021q: VLANs not supported on caif0 [ 104.913866][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 105.112404][ T6791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.215'. [ 106.308338][ T6837] netlink: 'syz.1.228': attribute type 3 has an invalid length. [ 106.359521][ T6837] netlink: 'syz.1.228': attribute type 11 has an invalid length. [ 106.453644][ T6837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.228'. [ 106.972983][ T6862] netlink: 'syz.3.233': attribute type 4 has an invalid length. [ 107.734206][ T6905] net_ratelimit: 8 callbacks suppressed [ 107.734227][ T6905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.863274][ T6905] trusted_key: syz.1.242 sent an empty control message without MSG_MORE. [ 108.581613][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 108.949038][ T6945] tipc: Enabling of bearer rejected, failed to enable media [ 109.226047][ T6956] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 109.416525][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 109.912215][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 109.962191][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 110.016919][ T6996] gretap0: entered promiscuous mode [ 110.066767][ T6996] gretap0: left promiscuous mode [ 110.152069][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 110.318867][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 110.497792][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 110.784538][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 111.151206][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 111.421806][ T7054] syzkaller1: entered promiscuous mode [ 111.450540][ T7054] syzkaller1: entered allmulticast mode [ 112.316705][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 112.553405][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 112.564109][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 112.952936][ T7117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.484930][ T7146] netlink: 76 bytes leftover after parsing attributes in process `syz.0.304'. [ 113.714024][ T7117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.252956][ T7117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.361207][ T7172] batadv_slave_1: entered promiscuous mode [ 114.393822][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 114.440059][ T7117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.484278][ T7172] batadv_slave_1: left promiscuous mode [ 114.619227][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 114.793503][ T6261] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.870912][ T6257] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.894970][ T7196] netlink: 'syz.4.317': attribute type 39 has an invalid length. [ 114.916716][ T6261] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.984231][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.035577][ T7196] veth0_macvtap: left promiscuous mode [ 115.359093][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 115.517053][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 115.646628][ T7223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.323'. [ 115.658987][ T7223] netlink: 43 bytes leftover after parsing attributes in process `syz.1.323'. [ 115.668119][ T7223] netlink: 'syz.1.323': attribute type 6 has an invalid length. [ 115.680781][ T7223] netlink: 'syz.1.323': attribute type 5 has an invalid length. [ 116.451541][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.506016][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.970537][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.024125][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.045715][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.085805][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.363065][ T7267] pim6reg: entered allmulticast mode [ 117.411143][ T7267] pim6reg: left allmulticast mode [ 117.583221][ T7276] xt_TCPMSS: Only works on TCP SYN packets [ 118.668333][ T7303] __nla_validate_parse: 1 callbacks suppressed [ 118.668352][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 118.681945][ T7301] ip6erspan0: entered allmulticast mode [ 119.014082][ T7318] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 119.074816][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 119.101818][ T7323] netlink: 'syz.2.355': attribute type 8 has an invalid length. [ 119.103435][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 119.126218][ T7323] dvmrp0: entered allmulticast mode [ 119.145374][ T7323] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 119.190040][ T7318] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 119.305536][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 119.819834][ T7352] bridge0: port 2(syz_tun) entered blocking state [ 119.843909][ T7352] bridge0: port 2(syz_tun) entered disabled state [ 119.877382][ T7352] syz_tun: entered allmulticast mode [ 119.891988][ T7352] syz_tun: entered promiscuous mode [ 119.898817][ T7352] bridge0: port 2(syz_tun) entered blocking state [ 119.905647][ T7352] bridge0: port 2(syz_tun) entered forwarding state [ 120.370260][ T7360] ip6erspan0: entered allmulticast mode [ 120.884673][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 121.060517][ T7388] tc_dump_action: action bad kind [ 121.841214][ T7436] bridge_slave_0: left allmulticast mode [ 121.854943][ T7436] bridge_slave_0: left promiscuous mode [ 121.867510][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.888149][ T7436] bridge_slave_1: left allmulticast mode [ 121.968743][ T7436] bridge_slave_1: left promiscuous mode [ 121.978053][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.005062][ T7436] bond0: (slave bond_slave_0): Releasing backup interface [ 122.021668][ T7436] bond0: (slave bond_slave_1): Releasing backup interface [ 122.080394][ T7436] team0: Port device team_slave_0 removed [ 122.124605][ T7436] team0: Port device team_slave_1 removed [ 122.126067][ T6414] IPVS: starting estimator thread 0... [ 122.137661][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.151569][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.166555][ T7446] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 122.170067][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.200524][ T7446] xt_TCPMSS: Only works on TCP SYN packets [ 122.203368][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.233926][ T7447] IPVS: using max 37 ests per chain, 88800 per kthread [ 122.647930][ T7458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.392'. [ 122.847410][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.862536][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.875051][ T7458] bond0 (unregistering): Released all slaves [ 123.289585][ T7482] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20001 [ 123.326446][ T7482] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 123.341225][ T7484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.400'. [ 123.363360][ T7484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.400'. [ 123.376258][ T7482] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 123.395141][ T7482] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.399'. [ 123.701025][ T7495] netlink: 'syz.3.401': attribute type 2 has an invalid length. [ 123.789876][ T7499] netlink: 240 bytes leftover after parsing attributes in process `syz.3.401'. [ 123.860488][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 123.902556][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 123.911897][ T7505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.403'. [ 123.933555][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 124.180929][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 124.614639][ T7523] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 124.643326][ T7523] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 124.727184][ T7527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.412'. [ 125.173119][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 125.173119][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 125.493952][ T7560] sctp: [Deprecated]: syz.3.417 (pid 7560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.493952][ T7560] Use struct sctp_sack_info instead [ 125.733118][ T7567] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 125.741178][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.421'. [ 125.761956][ T7567] bridge0: port 1(dummy0) entered blocking state [ 125.771082][ T7567] bridge0: port 1(dummy0) entered disabled state [ 125.800761][ T7567] dummy0: entered allmulticast mode [ 125.822102][ T7567] dummy0: entered promiscuous mode [ 125.829779][ T7567] bridge0: port 1(dummy0) entered blocking state [ 125.836389][ T7567] bridge0: port 1(dummy0) entered forwarding state [ 126.008395][ T7580] netlink: 'syz.2.424': attribute type 8 has an invalid length. [ 126.921139][ T7616] tipc: Invalid UDP bearer configuration [ 126.921211][ T7616] tipc: Enabling of bearer rejected, failed to enable media [ 127.900270][ T7641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 127.952299][ T5857] Bluetooth: hci4: link tx timeout [ 127.957858][ T7645] netlink: 'syz.2.442': attribute type 5 has an invalid length. [ 128.106387][ T7651] team_slave_1: Caught tx_queue_len zero misconfig [ 128.192672][ T7651] netlink: 'syz.2.442': attribute type 58 has an invalid length. [ 128.276926][ T7615] netlink: 'syz.1.435': attribute type 12 has an invalid length. [ 128.320549][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.958735][ T7679] tipc: Started in network mode [ 128.973600][ T7679] tipc: Node identity 56629b295d8, cluster identity 4711 [ 128.988172][ T7679] tipc: Enabled bearer , priority 0 [ 129.017273][ T7687] syzkaller0: entered promiscuous mode [ 129.033058][ T7687] syzkaller0: entered allmulticast mode [ 129.069961][ T7688] x_tables: duplicate underflow at hook 1 [ 129.230492][ T7679] tipc: Resetting bearer [ 129.237639][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.256449][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.266656][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.283697][ T7679] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 129.308728][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.317345][ T7679] netlink: 'syz.4.450': attribute type 4 has an invalid length. [ 129.345991][ T7679] __nla_validate_parse: 10 callbacks suppressed [ 129.346010][ T7679] netlink: 192 bytes leftover after parsing attributes in process `syz.4.450'. [ 129.368797][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.438906][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.447351][ T7702] netlink: 72 bytes leftover after parsing attributes in process `syz.0.454'. [ 129.461035][ T7678] tipc: Resetting bearer [ 129.559385][ T7678] tipc: Disabling bearer [ 129.672220][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 129.712712][ T7696] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 130.084776][ T7719] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 130.354767][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 130.363873][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 130.671806][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 130.867893][ T7737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 130.924245][ T7737] netlink: 136 bytes leftover after parsing attributes in process `syz.2.462'. [ 131.134457][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 131.364269][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 131.444982][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 132.182079][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.474'. [ 134.380212][ T7849] validate_nla: 18 callbacks suppressed [ 134.380252][ T7849] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 134.403988][ T7849] __nla_validate_parse: 3 callbacks suppressed [ 134.404005][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.489'. [ 134.443369][ T7849] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 134.481049][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 135.059348][ T7867] netlink: 256 bytes leftover after parsing attributes in process `syz.0.494'. [ 135.638190][ T7898] nbd: couldn't find device at index 536870912 [ 135.699691][ T7899] netlink: 'syz.4.504': attribute type 21 has an invalid length. [ 135.730250][ T7899] netlink: 156 bytes leftover after parsing attributes in process `syz.4.504'. [ 135.763800][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 135.821233][ T7904] vlan2: entered allmulticast mode [ 135.839543][ T7904] veth1: entered allmulticast mode [ 135.853330][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 136.151480][ T7912] dvmrp0: left allmulticast mode [ 136.250177][ T7913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.312261][ T7916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.433539][ T7925] batadv_slave_1: entered promiscuous mode [ 136.520313][ T7916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.572702][ T7931] netlink: 'syz.4.513': attribute type 2 has an invalid length. [ 136.592052][ T7930] tipc: Started in network mode [ 136.605960][ T7930] tipc: Node identity ac14140f, cluster identity 4711 [ 136.627318][ T7930] tipc: New replicast peer: 255.255.255.255 [ 136.634604][ T7930] tipc: Enabled bearer , priority 10 [ 136.667798][ T7916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.907557][ T7916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.982978][ T7947] IPv6: Can't replace route, no match found [ 137.120921][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 137.172966][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 137.208454][ T6414] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3 [ 137.236481][ T6414] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22 [ 137.256802][ T7915] batadv_slave_1: left promiscuous mode [ 137.293870][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.311346][ T7966] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 137.329843][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.342831][ T7966] netlink: 'syz.4.523': attribute type 8 has an invalid length. [ 137.361733][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 137.415993][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.435997][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.607526][ T7979] nbd: must specify a device to reconfigure [ 137.754581][ T6414] tipc: Node number set to 2886997007 [ 137.780578][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.530'. [ 137.887281][ T7999] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 138.734897][ T8027] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 138.865194][ T8027] batman_adv: batadv0: Adding interface: virt_wifi0 [ 138.894501][ T8027] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 139.093384][ T8027] batman_adv: batadv0: Interface activated: virt_wifi0 [ 139.123111][ T8048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.198413][ T8048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.298903][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.479438][ T8067] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 139.497305][ T8067] __nla_validate_parse: 3 callbacks suppressed [ 139.497405][ T8067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.547'. [ 139.961440][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 139.976363][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 139.988252][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.551'. [ 140.157550][ T8109] x_tables: duplicate underflow at hook 2 [ 140.296219][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 140.737056][ T8140] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.563'. [ 140.864272][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 140.930874][ T8149] 8021q: adding VLAN 0 to HW filter on device team1 [ 141.048825][ T8155] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 141.775212][ T8180] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 141.805637][ T8180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.572'. [ 142.045144][ T8196] xt_CT: No such helper "snmp" [ 142.487019][ T8215] x_tables: duplicate underflow at hook 1 [ 142.521649][ T8217] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20002 [ 142.544306][ T8219] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 142.726265][ T8225] sctp: [Deprecated]: syz.1.582 (pid 8225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.726265][ T8225] Use struct sctp_sack_info instead [ 143.048802][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 143.470478][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 143.655676][ T8245] tipc: Enabling of bearer rejected, failed to enable media [ 143.837021][ T5926] IPVS: starting estimator thread 0... [ 143.854330][ T8258] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 143.953995][ T8255] IPVS: using max 27 ests per chain, 64800 per kthread [ 144.043645][ T8263] bond0: entered promiscuous mode [ 144.545232][ T8285] netlink: 'syz.1.601': attribute type 29 has an invalid length. [ 144.579373][ T8285] netlink: 'syz.1.601': attribute type 29 has an invalid length. [ 144.651645][ T8285] __nla_validate_parse: 4 callbacks suppressed [ 144.651665][ T8285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.601'. [ 144.701458][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 145.011725][ T8305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.605'. [ 145.028659][ T8301] netlink: 'syz.1.603': attribute type 6 has an invalid length. [ 145.240571][ T8313] netlink: 'syz.0.607': attribute type 26 has an invalid length. [ 145.373201][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 145.557257][ T8326] veth0: entered promiscuous mode [ 145.855338][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.610'. [ 146.113465][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 146.180367][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 146.277756][ T8325] veth0: left promiscuous mode [ 146.341405][ T8353] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.616'. [ 146.483066][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 146.511745][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 146.804050][ T8384] batadv1: entered allmulticast mode [ 146.812785][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.103917][ T8392] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.151724][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 147.230362][ T8401] netlink: 'syz.3.629': attribute type 13 has an invalid length. [ 147.238943][ T8401] netlink: 'syz.3.629': attribute type 17 has an invalid length. [ 147.278775][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.320117][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.331867][ T8401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.379727][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.454081][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.538968][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.056436][ T8424] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 148.103693][ T8424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.298470][ T8436] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 148.324626][ T8439] openvswitch: netlink: IPv6 tunnel dst address is zero [ 148.526076][ T8454] ip6tnl1: entered promiscuous mode [ 148.531499][ T8454] ip6tnl1: entered allmulticast mode [ 148.662317][ T8462] lo: entered allmulticast mode [ 148.699033][ T8463] netlink: 'syz.1.648': attribute type 9 has an invalid length. [ 148.709580][ T8463] netlink: 'syz.1.648': attribute type 6 has an invalid length. [ 149.427285][ T8491] xt_TCPMSS: Only works on TCP SYN packets [ 150.134856][ T8516] __nla_validate_parse: 5 callbacks suppressed [ 150.134874][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 150.153087][ T8519] netlink: 328 bytes leftover after parsing attributes in process `syz.0.665'. [ 150.445832][ T8536] netlink: 136 bytes leftover after parsing attributes in process `syz.2.668'. [ 150.455542][ T8536] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 150.806635][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 150.917297][ T8560] tipc: Invalid UDP bearer configuration [ 150.917352][ T8560] tipc: Enabling of bearer rejected, failed to enable media [ 150.968544][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 151.065257][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 151.099887][ T8567] hsr_slave_0: left promiscuous mode [ 151.125747][ T8567] hsr_slave_1: left promiscuous mode [ 151.173938][ T8575] netlink: 'syz.3.679': attribute type 13 has an invalid length. [ 151.195176][ T8575] netlink: 'syz.3.679': attribute type 17 has an invalid length. [ 151.231372][ T8575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.347887][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 151.366590][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.4.680'. [ 151.382885][ T8580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.456359][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.548905][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.620451][ T8597] netlink: 'syz.2.683': attribute type 6 has an invalid length. [ 151.910143][ T8607] netlink: 'syz.1.687': attribute type 11 has an invalid length. [ 151.926145][ T8607] netlink: 'syz.1.687': attribute type 11 has an invalid length. [ 151.957256][ T8607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.687'. [ 152.064985][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 152.583061][ T8635] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 152.630991][ T8637] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 152.920759][ T8645] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 153.050909][ T8662] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 153.503687][ T8687] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 153.575088][ T8698] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 155.109694][ T8712] tc_dump_action: action bad kind [ 155.491208][ T8753] __nla_validate_parse: 13 callbacks suppressed [ 155.491227][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 155.736094][ T8761] netlink: 104 bytes leftover after parsing attributes in process `syz.2.726'. [ 155.755338][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 155.895552][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 156.320857][ T8779] netlink: 'syz.1.730': attribute type 11 has an invalid length. [ 156.377305][ T8779] netlink: 224 bytes leftover after parsing attributes in process `syz.1.730'. [ 156.530825][ T8788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.735'. [ 156.566476][ T8788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.735'. [ 156.606673][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 156.618724][ T8799] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 156.620276][ T8798] nbd: must specify at least one socket [ 156.635160][ T8799] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 156.666013][ T8799] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.737'. [ 157.239452][ T5857] block nbd0: Receive control failed (result -32) [ 157.576290][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 158.115753][ T8862] netlink: 'syz.1.753': attribute type 4 has an invalid length. [ 158.231190][ T8860] netlink: 'syz.4.752': attribute type 6 has an invalid length. [ 158.308428][ T8835] netlink: 'syz.3.744': attribute type 12 has an invalid length. [ 158.447816][ T8871] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 158.634888][ T8872] dummy0: left allmulticast mode [ 158.657031][ T8872] dummy0: left promiscuous mode [ 158.678366][ T8872] bridge0: port 3(dummy0) entered disabled state [ 158.713922][ T8872] bridge_slave_1: left allmulticast mode [ 158.731903][ T8872] bridge_slave_1: left promiscuous mode [ 158.739690][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.751812][ T8872] bridge_slave_0: left allmulticast mode [ 158.758627][ T8872] bridge_slave_0: left promiscuous mode [ 158.765071][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.191927][ T8902] ip6tnl1: entered promiscuous mode [ 159.197918][ T8902] ip6tnl1: entered allmulticast mode [ 159.205476][ T8902] team0: Device ip6tnl1 is of different type [ 159.953160][ T8931] netlink: 'syz.3.768': attribute type 39 has an invalid length. [ 160.025312][ T8936] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 160.055055][ T8940] tipc: Started in network mode [ 160.066629][ T8940] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 160.096291][ T8940] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 160.113902][ T8940] tipc: Enabled bearer , priority 10 [ 160.206415][ T8945] netlink: 'syz.1.772': attribute type 11 has an invalid length. [ 160.312332][ T8953] netlink: 'syz.4.776': attribute type 15 has an invalid length. [ 160.521326][ T8962] delete_channel: no stack [ 160.692418][ T8967] __nla_validate_parse: 13 callbacks suppressed [ 160.692470][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.780'. [ 160.722631][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.780'. [ 161.045182][ T8991] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 161.097883][ T8991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.233927][ T978] tipc: Node number set to 1 [ 161.331375][ T8998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.343997][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 161.382618][ T8998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.453342][ T30] audit: type=1107 audit(1752179877.177:2): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 161.579977][ T8999] syzkaller0: entered promiscuous mode [ 161.597420][ T8999] syzkaller0: entered allmulticast mode [ 161.684249][ T8998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.713348][ T8998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.377890][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.797'. [ 163.436468][ T8998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.488195][ T8998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.540822][ T9037] syzkaller1: entered promiscuous mode [ 163.547451][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 163.551307][ T9037] syzkaller1: entered allmulticast mode [ 163.686652][ T8998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.704525][ T8998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.725231][ T9041] tipc: Started in network mode [ 163.730127][ T9041] tipc: Node identity , cluster identity 4711 [ 163.741928][ T9041] tipc: Failed to set node id, please configure manually [ 163.755859][ T9054] xt_socket: unknown flags 0x8 [ 163.761322][ T9054] netlink: 164 bytes leftover after parsing attributes in process `syz.4.803'. [ 163.771068][ T9041] tipc: Enabling of bearer rejected, failed to enable media [ 163.985789][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 164.003382][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 164.032886][ T8189] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.045650][ T8189] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.119841][ T8189] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.128631][ T8189] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.162480][ T8189] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.170942][ T8189] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.180697][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 164.190624][ T8189] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.218588][ T8189] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.333587][ T9087] netlink: 'syz.4.813': attribute type 21 has an invalid length. [ 164.341583][ T9085] netlink: 'syz.1.814': attribute type 11 has an invalid length. [ 164.357798][ T9087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.813'. [ 164.389184][ T9085] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 164.410947][ T9092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.757056][ T9105] tipc: Enabled bearer , priority 0 [ 164.764651][ T9105] syzkaller0: entered promiscuous mode [ 164.770134][ T9105] syzkaller0: entered allmulticast mode [ 164.789118][ T9105] tipc: Resetting bearer [ 164.900999][ T9108] tipc: Resetting bearer [ 164.986283][ T9108] tipc: Disabling bearer [ 165.013552][ T9110] bridge0: port 2(gretap0) entered blocking state [ 165.020107][ T9110] bridge0: port 2(gretap0) entered disabled state [ 165.027099][ T9110] gretap0: entered allmulticast mode [ 165.045728][ T9110] gretap0: entered promiscuous mode [ 165.057916][ T9110] bridge0: port 2(gretap0) entered blocking state [ 165.064486][ T9110] bridge0: port 2(gretap0) entered forwarding state [ 165.179663][ T9118] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.405467][ T9118] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.513070][ T9118] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.537991][ T9136] x_tables: duplicate underflow at hook 3 [ 165.636412][ T9118] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.757254][ T9139] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 165.771831][ T9141] __nla_validate_parse: 3 callbacks suppressed [ 165.771849][ T9141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.829'. [ 165.796719][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.904900][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.932660][ T6259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.106976][ T8189] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.206815][ T8189] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.371395][ T9169] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 166.582372][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'. [ 166.859651][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 166.875996][ T9185] bond0: entered promiscuous mode [ 166.883398][ T9185] bond_slave_0: entered promiscuous mode [ 166.885088][ T9144] netlink: 'syz.1.829': attribute type 4 has an invalid length. [ 166.889251][ T9185] bond_slave_1: entered promiscuous mode [ 166.908782][ T9185] bond0: left promiscuous mode [ 166.915251][ T9185] bond_slave_0: left promiscuous mode [ 166.924556][ T9185] bond_slave_1: left promiscuous mode [ 167.462761][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 167.495868][ T9208] netlink: 'syz.3.848': attribute type 21 has an invalid length. [ 167.653572][ T9218] x_tables: duplicate underflow at hook 2 [ 167.960307][ T9225] macsec0: entered allmulticast mode [ 167.980127][ T9226] veth1_macvtap: entered allmulticast mode [ 167.989980][ T9226] macsec0: left allmulticast mode [ 167.998247][ T9226] veth1_macvtap: left allmulticast mode [ 168.221693][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 168.254400][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 168.556710][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.4.857'. [ 168.731762][ T9245] wg2: entered promiscuous mode [ 168.740214][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.859'. [ 168.859268][ T9253] batman_adv: batadv0: Adding interface: dummy0 [ 168.897271][ T9253] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.953592][ T9253] batman_adv: batadv0: Interface activated: dummy0 [ 169.019307][ T9254] netlink: 'syz.4.861': attribute type 83 has an invalid length. [ 169.054169][ T9254] netlink: 'syz.4.861': attribute type 10 has an invalid length. [ 169.086732][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.271647][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 169.313572][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 169.491384][ T9274] veth0: entered promiscuous mode [ 169.502535][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 169.526335][ T9274] batadv_slave_0: entered promiscuous mode [ 169.556948][ T9273] batadv_slave_0: left promiscuous mode [ 169.583804][ T9273] veth0: left promiscuous mode [ 169.899046][ T9291] macsec0: entered allmulticast mode [ 169.913689][ T9291] batadv0: entered allmulticast mode [ 169.952735][ T9291] batadv0: left allmulticast mode [ 170.554403][ T9316] netlink: 'syz.3.882': attribute type 2 has an invalid length. [ 170.562837][ T9316] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 170.575799][ T9311] xt_socket: unknown flags 0x8 [ 170.583079][ T9316] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 170.943086][ T9329] __nla_validate_parse: 2 callbacks suppressed [ 170.943104][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 171.092303][ T9341] x_tables: duplicate underflow at hook 1 [ 171.108981][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 171.130859][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 171.228879][ T9346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.892'. [ 171.242065][ T9346] netlink: 'syz.0.892': attribute type 2 has an invalid length. [ 171.249969][ T9346] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.892'. [ 171.280320][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 171.527761][ T9367] netlink: 100 bytes leftover after parsing attributes in process `syz.3.897'. [ 171.771968][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 171.874929][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 171.889487][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 172.006047][ T9392] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 172.108985][ T9392] bond2: entered promiscuous mode [ 172.133362][ T9392] bond2: entered allmulticast mode [ 172.139438][ T9392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.235148][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.242851][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.255505][ T6414] IPVS: starting estimator thread 0... [ 172.322861][ T9416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.337265][ T9392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.351916][ T9392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.376190][ T9414] IPVS: using max 35 ests per chain, 84000 per kthread [ 172.468672][ T8189] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.489788][ T8189] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.509394][ T8189] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.534199][ T8189] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.888344][ T9438] netlink: 'syz.4.920': attribute type 29 has an invalid length. [ 173.077181][ T9447] syzkaller1: entered promiscuous mode [ 173.100156][ T9447] syzkaller1: entered allmulticast mode [ 173.187918][ T9451] Bluetooth: MGMT ver 1.23 [ 174.095361][ T9491] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.911865][ T9525] batadv_slave_1: entered promiscuous mode [ 175.184786][ T9541] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.226289][ T9539] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 175.273463][ T9539] ip6erspan0: left allmulticast mode [ 175.320168][ T9539] vlan2: left allmulticast mode [ 175.372810][ T9539] veth1: left allmulticast mode [ 175.944628][ T9573] __nla_validate_parse: 13 callbacks suppressed [ 175.944649][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 176.044317][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.964'. [ 176.145108][ T9590] netlink: 292 bytes leftover after parsing attributes in process `syz.3.967'. [ 176.257969][ T9584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.965'. [ 176.376491][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c93800: rx timeout, send abort [ 176.439689][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.507876][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.541115][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.553522][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.562536][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.573893][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 176.805334][ T9626] netlink: 'syz.0.977': attribute type 12 has an invalid length. [ 176.885800][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c93800: abort rx timeout. Force session deactivation [ 177.225800][ T9647] syz_tun: entered promiscuous mode [ 177.233503][ T9647] macsec2: entered allmulticast mode [ 177.238827][ T9647] syz_tun: entered allmulticast mode [ 177.343183][ T9647] syz_tun: left allmulticast mode [ 177.352553][ T9647] syz_tun: left promiscuous mode [ 177.886393][ T9674] gretap0: entered promiscuous mode [ 178.619495][ T9698] syzkaller1: entered promiscuous mode [ 178.642895][ T9698] syzkaller1: entered allmulticast mode [ 178.773906][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.869068][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.923647][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.934581][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.946037][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.958885][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.970066][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.982826][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.567877][ T9706] chnl_net:caif_netlink_parms(): no params data found [ 179.769683][ T9738] netlink: 'syz.2.1012': attribute type 4 has an invalid length. [ 180.138097][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.165685][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.172978][ T9706] bridge_slave_0: entered allmulticast mode [ 180.215487][ T9706] bridge_slave_0: entered promiscuous mode [ 180.228643][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.248857][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.264479][ T9706] bridge_slave_1: entered allmulticast mode [ 180.272995][ T9706] bridge_slave_1: entered promiscuous mode [ 180.387239][ T9775] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 180.446352][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.531939][ T9766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.541709][ T9766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.559441][ T9775] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 180.575839][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.705336][ T9706] team0: Port device team_slave_0 added [ 180.734222][ T9706] team0: Port device team_slave_1 added [ 180.891011][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.924410][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.983449][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.015519][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.022486][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.074519][ T5852] Bluetooth: hci4: command tx timeout [ 181.100552][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.166266][ T9805] __nla_validate_parse: 23 callbacks suppressed [ 181.166284][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 181.221890][ T9806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1029'. [ 181.382604][ T9706] hsr_slave_0: entered promiscuous mode [ 181.404180][ T9706] hsr_slave_1: entered promiscuous mode [ 181.419406][ T9706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.431518][ T9706] Cannot create hsr debugfs directory [ 182.317559][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 182.782592][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 182.967610][ T9706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.992331][ T9706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.048478][ T9706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.107575][ T9706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.149150][ T9874] x_tables: duplicate underflow at hook 2 [ 183.155287][ T9871] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1045'. [ 183.164652][ T5857] Bluetooth: hci4: command tx timeout [ 183.178075][ T9874] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:0 [ 183.464714][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 183.495856][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 183.514525][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.533716][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.572814][ T9887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.655815][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.681473][ T9887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.820269][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.856575][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.863809][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.921176][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.929251][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.466347][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.540272][ T9706] veth0_vlan: entered promiscuous mode [ 184.559893][ T9917] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 184.561543][ T9706] veth1_vlan: entered promiscuous mode [ 184.668082][ T9706] veth0_macvtap: entered promiscuous mode [ 184.680488][ T9706] veth1_macvtap: entered promiscuous mode [ 184.729162][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.755095][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.778374][ T6259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.804256][ T6259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.818965][ T6259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.859783][ T6259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.992212][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.009605][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.112862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.134375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.148283][ T9938] netlink: 'syz.1.1064': attribute type 6 has an invalid length. [ 185.157494][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 185.196329][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 185.234859][ T5857] Bluetooth: hci4: command 0x040f tx timeout [ 185.245336][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 185.541370][ T9954] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 185.627584][ T9958] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 185.637928][ T9958] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 185.650632][ T9958] bond1: (slave vti0): making interface the new active one [ 185.658888][ T9958] bond1: (slave vti0): Enslaving as an active interface with an up link [ 185.672069][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.276021][ T8189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.344160][ T9984] __nla_validate_parse: 7 callbacks suppressed [ 186.344179][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 186.381558][ T9984] pim6reg: entered allmulticast mode [ 186.440853][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 186.682859][T10001] netlink: 'syz.4.1084': attribute type 11 has an invalid length. [ 186.691060][T10001] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1084'. [ 186.748320][ T8189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.792064][ T9999] netlink: 'syz.2.1085': attribute type 58 has an invalid length. [ 186.811927][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'. [ 186.946091][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1087'. [ 186.955580][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1087'. [ 186.965887][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1087'. [ 187.071887][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.091723][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.100604][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.112823][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.120747][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.206801][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 187.339195][ T8189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.428112][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 187.561321][ T8189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.098192][T10050] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 188.239635][ T8189] bridge_slave_1: left allmulticast mode [ 188.267074][ T8189] bridge_slave_1: left promiscuous mode [ 188.274270][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.350855][ T8189] bridge_slave_0: left allmulticast mode [ 188.363307][ T8189] bridge_slave_0: left promiscuous mode [ 188.369113][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.459662][T10054] xt_hashlimit: size too large, truncated to 1048576 [ 188.482289][T10054] xt_hashlimit: max too large, truncated to 1048576 [ 188.730029][T10070] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 188.745999][T10070] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.896097][T10074] netlink: 'syz.3.1103': attribute type 3 has an invalid length. [ 189.011389][ T8189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.022395][ T8189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.033390][ T8189] bond0 (unregistering): Released all slaves [ 189.054873][T10071] dvmrp1: entered allmulticast mode [ 189.064253][T10072] dvmrp1: left allmulticast mode [ 189.121119][T10080] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 ! [ 189.154241][ T5852] Bluetooth: hci4: command tx timeout [ 189.157644][T10016] chnl_net:caif_netlink_parms(): no params data found [ 189.438835][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 189.508349][T10099] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 189.541138][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.555938][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.563232][T10016] bridge_slave_0: entered allmulticast mode [ 189.571116][T10016] bridge_slave_0: entered promiscuous mode [ 189.590000][T10099] batman_adv: batadv0: Interface deactivated: dummy0 [ 189.637511][T10099] batman_adv: batadv0: Removing interface: dummy0 [ 189.665681][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.673177][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.686520][T10016] bridge_slave_1: entered allmulticast mode [ 189.696778][T10016] bridge_slave_1: entered promiscuous mode [ 189.776712][ T8189] hsr_slave_0: left promiscuous mode [ 189.795371][ T8189] hsr_slave_1: left promiscuous mode [ 189.801547][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.812782][ T8189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.824093][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.832318][ T8189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.878926][ T8189] veth1_macvtap: left promiscuous mode [ 189.888017][ T8189] veth0_macvtap: left promiscuous mode [ 189.894083][ T8189] veth1_vlan: left promiscuous mode [ 189.899677][ T8189] veth0_vlan: left promiscuous mode [ 190.372695][ T8189] team0 (unregistering): Port device team_slave_1 removed [ 190.411150][ T8189] team0 (unregistering): Port device team_slave_0 removed [ 190.788536][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.811727][T10112] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 190.858096][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.868968][T10112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 190.898778][T10112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 191.039764][T10119] 8021q: VLANs not supported on vxcan0 [ 191.049288][T10016] team0: Port device team_slave_0 added [ 191.086386][T10016] team0: Port device team_slave_1 added [ 191.236284][ T5857] Bluetooth: hci4: command tx timeout [ 191.265502][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.286078][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.341371][T10136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.348636][T10136] IPv6: NLM_F_CREATE should be set when creating new route [ 191.377548][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.423872][T10124] __nla_validate_parse: 3 callbacks suppressed [ 191.423892][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 191.466637][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.477455][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.555469][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.642410][T10150] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1124'. [ 191.910391][T10016] hsr_slave_0: entered promiscuous mode [ 191.924385][T10016] hsr_slave_1: entered promiscuous mode [ 191.930975][T10016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.939079][T10016] Cannot create hsr debugfs directory [ 192.205802][T10161] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1126'. [ 192.342367][T10171] syz_tun: entered allmulticast mode [ 192.459359][T10171] syz_tun: left allmulticast mode [ 192.630924][T10179] macsec0: entered promiscuous mode [ 192.642924][T10179] macsec1: entered allmulticast mode [ 192.650251][T10179] macsec0: entered allmulticast mode [ 192.658141][T10179] veth1_macvtap: entered allmulticast mode [ 193.127710][T10205] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1139'. [ 193.314589][ T5857] Bluetooth: hci4: command tx timeout [ 193.358741][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 193.369641][T10215] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1142'. [ 193.388706][T10215] unsupported nlmsg_type 40 [ 193.389375][T10217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.400295][T10216] vlan0: entered allmulticast mode [ 193.400658][T10217] IPv6: NLM_F_CREATE should be set when creating new route [ 193.406034][T10216] bridge_slave_0: entered allmulticast mode [ 193.412982][T10217] IPv6: NLM_F_CREATE should be set when creating new route [ 193.420350][T10214] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18) [ 193.470828][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 193.648328][T10016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.693316][T10016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.713557][T10016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.729289][T10016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.809866][T10230] No such timeout policy "syz1" [ 193.889487][T10234] No such timeout policy "syz1" [ 193.955838][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.988746][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.004302][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 194.020804][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.028005][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.042208][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 194.056996][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.064167][ T8189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.381939][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 194.598413][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.775542][T10016] veth0_vlan: entered promiscuous mode [ 194.808403][T10016] veth1_vlan: entered promiscuous mode [ 194.871262][T10016] veth0_macvtap: entered promiscuous mode [ 194.907464][T10016] veth1_macvtap: entered promiscuous mode [ 194.976467][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.020350][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.071646][T10285] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 195.099759][ T6259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.139224][ T6259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.185003][ T6268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.203982][ T6268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.350506][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.368722][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.398817][ T5862] Bluetooth: hci4: command tx timeout [ 195.515438][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.533537][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.630034][T10308] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 195.813183][T10319] batadv1: entered allmulticast mode [ 195.855777][T10319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 195.975620][T10326] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 196.273769][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 196.274004][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.281264][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 196.383641][T10354] netlink: 'syz.2.1181': attribute type 10 has an invalid length. [ 196.391692][T10354] batadv0: entered promiscuous mode [ 196.397452][T10354] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 197.001233][T10388] __nla_validate_parse: 108 callbacks suppressed [ 197.001252][T10388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1189'. [ 197.114915][ T6259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.408470][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 197.925371][ T6259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.013973][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.044008][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.045604][T10429] xt_CT: No such helper "syz0" [ 198.080027][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.092706][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.113305][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.179607][ T6259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.205555][T10439] bridge0: port 1(gretap0) entered blocking state [ 198.229253][T10439] bridge0: port 1(gretap0) entered disabled state [ 198.260261][T10439] gretap0: entered allmulticast mode [ 198.269285][T10439] gretap0: entered promiscuous mode [ 198.326307][T10439] bridge0: port 1(gretap0) entered blocking state [ 198.332855][T10439] bridge0: port 1(gretap0) entered forwarding state [ 198.548024][ T6259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.709774][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 198.730283][T10458] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1203'. [ 199.003394][T10455] batadv0: left promiscuous mode [ 199.038041][T10455] batadv1: left allmulticast mode [ 199.113496][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.180298][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.228466][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.252459][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.540660][ T6259] bridge_slave_1: left allmulticast mode [ 199.588338][ T6259] bridge_slave_1: left promiscuous mode [ 199.600402][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.601947][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 199.665017][ T6259] bridge_slave_0: left allmulticast mode [ 199.693486][ T6259] bridge_slave_0: left promiscuous mode [ 199.699310][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.791683][T10503] xt_policy: output policy not valid in PREROUTING and INPUT [ 200.077001][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.089015][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.099521][ T6259] bond0 (unregistering): Released all slaves [ 200.137432][T10497] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1217'. [ 200.193806][ T5852] Bluetooth: hci4: command tx timeout [ 200.378667][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1220'. [ 200.407754][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 200.468823][T10511] veth1_macvtap (unregistering): left allmulticast mode [ 200.506286][T10511] macsec0 (unregistering): left allmulticast mode [ 200.691599][T10434] chnl_net:caif_netlink_parms(): no params data found [ 200.711138][T10527] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 200.719468][T10527] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1223'. [ 200.746002][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1223'. [ 200.758291][T10525] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 200.799821][ T6259] hsr_slave_0: left promiscuous mode [ 200.821348][ T6259] hsr_slave_1: left promiscuous mode [ 200.838431][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.847041][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.869849][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.881284][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.918954][ T6259] veth1_macvtap: left promiscuous mode [ 200.929316][ T6259] veth0_macvtap: left promiscuous mode [ 200.937350][ T6259] veth1_vlan: left promiscuous mode [ 200.942718][ T6259] veth0_vlan: left promiscuous mode [ 201.479457][T10556] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 201.529705][T10557] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 201.730421][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 201.770735][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 202.273932][ T5852] Bluetooth: hci4: command tx timeout [ 202.415548][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.422864][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.431540][T10434] bridge_slave_0: entered allmulticast mode [ 202.440026][T10434] bridge_slave_0: entered promiscuous mode [ 202.480150][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.488521][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.502798][T10434] bridge_slave_1: entered allmulticast mode [ 202.510809][T10434] bridge_slave_1: entered promiscuous mode [ 202.675924][T10577] __nla_validate_parse: 2 callbacks suppressed [ 202.675945][T10577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'. [ 202.705365][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'. [ 202.722390][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.766295][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.883759][T10434] team0: Port device team_slave_0 added [ 202.900494][T10434] team0: Port device team_slave_1 added [ 203.017498][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.025800][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.052268][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.066434][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.077416][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.123296][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.264754][T10434] hsr_slave_0: entered promiscuous mode [ 203.272279][T10434] hsr_slave_1: entered promiscuous mode [ 203.279395][T10434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.288078][T10434] Cannot create hsr debugfs directory [ 203.299261][T10594] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1238'. [ 203.323743][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 203.734729][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 204.151157][T10434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.194350][T10434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.214656][T10434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.252263][T10434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.353599][ T5852] Bluetooth: hci4: command tx timeout [ 204.362808][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 204.629382][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.708527][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.748053][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.755304][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.817413][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.824730][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.998681][T10656] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 205.082741][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 205.639688][T10656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.939052][T10656] gretap1: entered promiscuous mode [ 206.148516][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.264269][T10434] veth0_vlan: entered promiscuous mode [ 206.322529][T10434] veth1_vlan: entered promiscuous mode [ 206.425841][T10434] veth0_macvtap: entered promiscuous mode [ 206.435574][ T5852] Bluetooth: hci4: command tx timeout [ 206.471165][T10434] veth1_macvtap: entered promiscuous mode [ 206.568599][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.610464][T10697] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1268'. [ 206.631689][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.711424][ T6259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.766655][T10703] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1270'. [ 206.815309][ T6259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.851435][ T8177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.894245][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.995969][T10712] tipc: Can't bind to reserved service type 2 [ 207.053531][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.072113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.144739][ T6268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.184953][ T6268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.540284][T10739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1281'. [ 208.637561][ T8177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.112450][ T8177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.199622][ T8177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.269712][ T8177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.365404][ T8177] bridge_slave_1: left allmulticast mode [ 209.371086][ T8177] bridge_slave_1: left promiscuous mode [ 209.377002][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.436968][ T8177] bridge_slave_0: left allmulticast mode [ 209.442650][ T8177] bridge_slave_0: left promiscuous mode [ 209.463506][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.694879][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 209.723470][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1287'. [ 209.914894][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.932737][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.946669][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.964465][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.982235][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.040463][ T8177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.051377][ T8177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.062868][ T8177] bond0 (unregistering): Released all slaves [ 210.080865][T10747] Â: renamed from pim6reg1 [ 210.236511][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 210.340610][T10768] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 210.353138][T10768] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 210.393996][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 210.676524][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 210.718298][ T8177] hsr_slave_0: left promiscuous mode [ 210.727858][ T8177] hsr_slave_1: left promiscuous mode [ 210.735565][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.743279][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.754093][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.761538][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.806033][ T8177] veth1_macvtap: left promiscuous mode [ 210.811603][ T8177] veth0_macvtap: left promiscuous mode [ 210.817398][ T8177] veth1_vlan: left promiscuous mode [ 210.822787][ T8177] veth0_vlan: left promiscuous mode [ 211.138774][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 211.397956][ T8177] team0 (unregistering): Port device team_slave_1 removed [ 211.431455][ T8177] team0 (unregistering): Port device team_slave_0 removed [ 212.013183][T10765] chnl_net:caif_netlink_parms(): no params data found [ 212.028224][T10816] netlink: 'syz.3.1303': attribute type 2 has an invalid length. [ 212.047045][ T5852] Bluetooth: hci4: command tx timeout [ 212.054199][T10816] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 212.061980][T10816] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 212.218112][T10823] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1305'. [ 212.272153][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.374683][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.387737][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.437163][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.444828][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.452187][T10765] bridge_slave_0: entered allmulticast mode [ 212.459995][T10765] bridge_slave_0: entered promiscuous mode [ 212.474692][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.481801][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.496791][T10765] bridge_slave_1: entered allmulticast mode [ 212.505232][T10765] bridge_slave_1: entered promiscuous mode [ 212.592140][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.623917][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.693759][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 212.695184][T10765] team0: Port device team_slave_0 added [ 212.719823][T10765] team0: Port device team_slave_1 added [ 212.790911][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.798277][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.826886][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.846665][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.856566][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.883392][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.899901][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 212.948555][T10847] netlink: 'syz.3.1309': attribute type 8 has an invalid length. [ 213.015434][T10765] hsr_slave_0: entered promiscuous mode [ 213.022742][T10765] hsr_slave_1: entered promiscuous mode [ 213.032156][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.043176][T10765] Cannot create hsr debugfs directory [ 213.069298][T10851] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 213.678230][T10874] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 213.693515][T10874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.097544][T10893] syz_tun: entered promiscuous mode [ 214.106057][T10893] batadv_slave_0: entered promiscuous mode [ 214.113071][T10893] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.123984][ T5852] Bluetooth: hci4: command tx timeout [ 214.125450][T10896] __nla_validate_parse: 4 callbacks suppressed [ 214.125466][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 214.132118][T10893] hsr1: entered allmulticast mode [ 214.151788][T10893] syz_tun: entered allmulticast mode [ 214.159636][T10893] batadv_slave_0: entered allmulticast mode [ 214.265602][T10765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.299256][T10765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.357732][T10765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.414412][T10765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.799846][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.830398][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.864298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.871478][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.949847][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.957042][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.480173][T10944] netlink: 'syz.1.1340': attribute type 4 has an invalid length. [ 216.117243][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.183782][T10765] veth0_vlan: entered promiscuous mode [ 216.194305][ T5852] Bluetooth: hci4: command tx timeout [ 216.211486][T10765] veth1_vlan: entered promiscuous mode [ 216.278835][T10765] veth0_macvtap: entered promiscuous mode [ 216.290387][T10765] veth1_macvtap: entered promiscuous mode [ 216.401196][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.441682][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.477052][ T6268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.498821][ T6268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.523028][ T6268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.538114][ T6268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.674607][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 216.794190][T10994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.407469][T10989] team0: Port device team_slave_0 removed [ 217.507976][T11005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.665281][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.673129][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.740123][ T8177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.757078][ T8177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.832888][T11020] team0: Device gtp0 is of different type [ 218.176058][T11040] x_tables: duplicate underflow at hook 2 [ 218.261538][T11048] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 218.288945][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 218.329953][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 218.345113][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 218.530563][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1372'. [ 218.534380][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 218.897572][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.959753][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 219.131376][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.209873][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.281604][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.386876][ T12] bridge_slave_1: left allmulticast mode [ 219.392537][ T12] bridge_slave_1: left promiscuous mode [ 219.399080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.408996][ T12] bridge_slave_0: left allmulticast mode [ 219.415130][ T12] bridge_slave_0: left promiscuous mode [ 219.420798][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.799826][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'. [ 219.830515][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 219.843089][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 219.859864][T11097] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1381'. [ 219.907898][T11097] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 219.929097][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 220.051499][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.064979][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.080565][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.091666][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.105616][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.117868][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.118092][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.164787][ T12] bond0 (unregistering): Released all slaves [ 220.202429][T11086] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 220.211650][T11086] bridge4: entered allmulticast mode [ 220.271407][T11096] syz_tun (unregistering): left promiscuous mode [ 220.766825][ T12] hsr_slave_0: left promiscuous mode [ 220.885817][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 220.898016][ T12] hsr_slave_1: left promiscuous mode [ 220.907626][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.918131][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.930208][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 220.969137][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.977506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.003095][ T12] veth1_macvtap: left promiscuous mode [ 221.009039][ T12] veth0_macvtap: left promiscuous mode [ 221.014803][ T12] veth1_vlan: left promiscuous mode [ 221.020257][ T12] veth0_vlan: left promiscuous mode [ 221.461278][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.496015][ T12] team0 (unregistering): Port device team_slave_0 removed [ 221.864188][T11120] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 221.891255][T11120] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 221.911146][T11120] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 222.093716][T11146] veth0: entered promiscuous mode [ 222.104586][T11144] SET target dimension over the limit! [ 222.162892][T11145] veth0: left promiscuous mode [ 222.209293][ T5857] Bluetooth: hci4: command tx timeout [ 222.370353][T11100] chnl_net:caif_netlink_parms(): no params data found [ 222.461276][T11158] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1396'. [ 222.481652][T11158] xt_recent: Unsupported userspace flags (00000048) [ 222.489671][T11165] tun0: tun_chr_ioctl cmd 2148553947 [ 222.498728][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'. [ 222.500704][T11158] tun0: tun_chr_ioctl cmd 35111 [ 222.609291][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 222.687429][T11100] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.695176][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.709588][T11100] bridge_slave_0: entered allmulticast mode [ 222.731613][T11100] bridge_slave_0: entered promiscuous mode [ 222.766790][T11100] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.782102][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.790511][T11100] bridge_slave_1: entered allmulticast mode [ 222.805233][T11100] bridge_slave_1: entered promiscuous mode [ 222.902936][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.924160][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.002413][T11100] team0: Port device team_slave_0 added [ 223.012634][T11100] team0: Port device team_slave_1 added [ 223.117390][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.133390][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.222106][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.248130][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.255274][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.311667][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.466543][T11100] hsr_slave_0: entered promiscuous mode [ 223.478502][T11100] hsr_slave_1: entered promiscuous mode [ 223.497078][T11100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.512452][T11100] Cannot create hsr debugfs directory [ 224.273544][ T5857] Bluetooth: hci4: command tx timeout [ 224.602987][T11229] netlink: 'syz.3.1410': attribute type 7 has an invalid length. [ 224.603334][T11228] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 224.635417][T11229] netlink: 'syz.3.1410': attribute type 8 has an invalid length. [ 224.832255][T11229] erspan0: entered promiscuous mode [ 224.850748][T11229] erspan0: left promiscuous mode [ 224.891639][T11235] bond0: entered promiscuous mode [ 224.927208][T11235] bond0: left promiscuous mode [ 225.483443][T11262] tipc: Enabled bearer , priority 0 [ 225.497929][T11262] syzkaller0: entered promiscuous mode [ 225.509164][T11262] syzkaller0: entered allmulticast mode [ 225.552820][T11262] sch_fq: defrate 257 ignored. [ 225.568809][T11262] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 225.580730][T11262] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 225.589161][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.2.1422 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 225.601221][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.611276][T11262] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 225.617712][T11262] Code: 89 ef e8 60 04 ab f8 4d 89 ef 85 db 74 0d e8 e4 83 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 29 04 ab f8 48 8b [ 225.637314][T11262] RSP: 0018:ffffc9000bb9efe8 EFLAGS: 00010202 [ 225.643377][T11262] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 225.651333][T11262] RDX: ffff888021348000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.659279][T11262] RBP: 0000000000000000 R08: ffff888021348000 R09: 0000000000000002 [ 225.667236][T11262] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 225.675192][T11262] R13: ffff888023a82000 R14: dffffc0000000000 R15: ffff888023a82000 [ 225.683144][T11262] FS: 00007f99032676c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 225.692050][T11262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.698608][T11262] CR2: 00007f5670a33d58 CR3: 0000000028e5a000 CR4: 00000000003526f0 [ 225.706558][T11262] Call Trace: [ 225.709815][T11262] [ 225.712728][T11262] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 225.718425][T11262] fq_change+0x1519/0x1f50 [ 225.722818][T11262] ? __pfx_fq_change+0x10/0x10 [ 225.727640][T11262] ? __hrtimer_setup+0x187/0x210 [ 225.732555][T11262] fq_init+0x699/0x960 [ 225.736599][T11262] ? __pfx_fq_init+0x10/0x10 [ 225.741160][T11262] ? lockdep_rtnl_is_held+0x26/0x40 [ 225.746331][T11262] ? qdisc_lookup+0x36d/0x6d0 [ 225.750979][T11262] ? __pfx_fq_init+0x10/0x10 [ 225.755542][T11262] qdisc_create+0x7a9/0xea0 [ 225.760024][T11262] tc_modify_qdisc+0x1426/0x2010 [ 225.764939][T11262] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 225.770204][T11262] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 225.775464][T11262] rtnetlink_rcv_msg+0x77c/0xb70 [ 225.780378][T11262] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 225.785465][T11262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.790903][T11262] netlink_rcv_skb+0x205/0x470 [ 225.795656][T11262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.801115][T11262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.806383][T11262] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.811563][T11262] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.816741][T11262] netlink_unicast+0x758/0x8d0 [ 225.821486][T11262] netlink_sendmsg+0x805/0xb30 [ 225.826228][T11262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.831490][T11262] ? aa_sock_msg_perm+0x94/0x160 [ 225.836409][T11262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.841667][T11262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.846931][T11262] __sock_sendmsg+0x219/0x270 [ 225.851584][T11262] ____sys_sendmsg+0x505/0x830 [ 225.856327][T11262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.861608][T11262] ? import_iovec+0x74/0xa0 [ 225.866103][T11262] ___sys_sendmsg+0x21f/0x2a0 [ 225.870760][T11262] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.875943][T11262] ? __fget_files+0x2a/0x420 [ 225.880515][T11262] ? __fget_files+0x3a0/0x420 [ 225.885173][T11262] __x64_sys_sendmsg+0x19b/0x260 [ 225.890087][T11262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.895518][T11262] ? rcu_is_watching+0x15/0xb0 [ 225.900259][T11262] ? do_syscall_64+0xbe/0x3b0 [ 225.904917][T11262] do_syscall_64+0xfa/0x3b0 [ 225.909401][T11262] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.914577][T11262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.920615][T11262] ? clear_bhb_loop+0x60/0xb0 [ 225.925266][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.931132][T11262] RIP: 0033:0x7f990238e929 [ 225.935531][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.955113][T11262] RSP: 002b:00007f9903267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.963502][T11262] RAX: ffffffffffffffda RBX: 00007f99025b5fa0 RCX: 00007f990238e929 [ 225.971454][T11262] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 225.979399][T11262] RBP: 00007f9902410b39 R08: 0000000000000000 R09: 0000000000000000 [ 225.987344][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.995289][T11262] R13: 0000000000000000 R14: 00007f99025b5fa0 R15: 00007ffca3c6e378 [ 226.003246][T11262] [ 226.006248][T11262] Modules linked in: [ 226.010226][T11262] ---[ end trace 0000000000000000 ]--- [ 226.015684][T11262] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 226.022078][T11262] Code: 89 ef e8 60 04 ab f8 4d 89 ef 85 db 74 0d e8 e4 83 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 29 04 ab f8 48 8b [ 226.041681][T11262] RSP: 0018:ffffc9000bb9efe8 EFLAGS: 00010202 [ 226.047741][T11262] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 226.055703][T11262] RDX: ffff888021348000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.063684][T11262] RBP: 0000000000000000 R08: ffff888021348000 R09: 0000000000000002 [ 226.071639][T11262] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 226.079610][T11262] R13: ffff888023a82000 R14: dffffc0000000000 R15: ffff888023a82000 [ 226.087581][T11262] FS: 00007f99032676c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 226.096513][T11262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.103072][T11262] CR2: 00007f5670a33d58 CR3: 0000000028e5a000 CR4: 00000000003526f0 [ 226.111040][T11262] Kernel panic - not syncing: Fatal exception in interrupt [ 226.118463][T11262] Kernel Offset: disabled [ 226.122771][T11262] Rebooting in 86400 seconds..