last executing test programs: 3.019658406s ago: executing program 1 (id=7148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffc, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r9, &(0x7f0000000780)=ANY=[@ANYBLOB="41e30101"], 0x4) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800e4000000000000000600000095000000000000000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x48) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) recvmsg$qrtr(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x40010121}, 0x38, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2.909115976s ago: executing program 3 (id=7153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a00003c00000000001c90780a210104ac1414aa44540a02ac1414bb0100"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) shutdown(r9, 0x1) sendmmsg$inet6(r4, &(0x7f0000001b80)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="71e75f7a6554e9246a2e41cfb98ee9f55c72d7fa71b055f72a1510648f6e3aa625cb6b9824e105b655245225b0505e31c248c0afc4f82a971fc9a88a73a82551dcfa4582b9ecc00814ae1debe683cb732d5aff536f4020c66145a293dd13fabf193915061112fe2e49ed8b7cdbec5a4f9b05f20bf3ca7fa57a0ebf76428a6a37c315b7e6983a344710c838ae599c", 0x8e}, {&(0x7f0000000580)="d3d0b90036dbf0338e3c0a002d53ae30d95b1d670999a3db85e38f969f104206a13baece31db295d3f74bb9b3352c89ebb5f7915d7b4a100c57774db709f0c3cc4a6f272337d7ea178047f081d72932bf7d2ffb4adeb2f90e665f22eae266cdc90f9e35f889d7bc5fff51c01d14a31a12c7a3b1330fd0f0b42d0d24876a39073e54bf562a8005130605bb89bff5782b83d105364fc3617d80574d271c4b6524b24c3642af3cd1cf7e0ae397959f4f58230ceb265aa059be18d8c6b351b678e70b057f1cf5bb3faaee2b1420620", 0xcd}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02010900000000fe8000000000000000000000000000aa140000000000000029000000340000000000020000000000900000000000000029000000360000002b0e000000000000c2040000001001050000000000000100c204000003ff010200000502504600010005020004074800000001100a040087060000000000000000000002000000000000000000000004000000000000000c00000000000000000000000000000006000000000000000500000000000000c20400000006000000140000000000000029000000340000009fda000000000000d01200000000000029000000040000003a56000000000000074800000003100401000000f80700000000ff07000000000000ff7f000000000000ff03000000000000060000000000000007000000000000000200000000000000090000000000000005a1afaebdabde4a6e678a7b64da2e0527aad975cf2bbc45b8801d29efb16bd0f0160473afc13a82156bf0ce83d94223916101aa08cd1c8ddb809a0696145ed2b21d4ee6fcac61092e88befd4b3f0c8489df6382bf527bc3eb1abe2d84ddd0414afc48ccc1f0e2fe38c7d317077cbff4df7c815f868131e7bcb1da440d068d779e507efba3338cd4651dcf0ab33ecb49a8bd12c065913266af4f1f8ce78f6413fcb78e0060d1fa58fbc74db677e2c078718d3466b24fffd856cd2e72805e3efb4ea6b2317e5a94cf526f782058078eb5098f78320b582c45ef0f6de5e561465aa73f50457b76d7eae728e84b918510e19bbe2bede2c6bab005d2e93c1b04d69090ddc50a0cc910fe8000000000000000000000000000bb0401070973cc4b3623a5a9b71ebfc0c58d65460ab07e84a84d6b2772cf4284022536b82c44f543564a07dae3ac256d6df7105af7777ab5cf8eb8c6a89f7eb4ae110b0eca694c89b77528ec175014d9b121d677e5c8a0dfc7e3f1e84bd40f9592b057c4f03a47cbbcd27ad0be19b6583257fa2c9ef5c8f28f05020f2400008fa159cf3038e2823dbc44102eb71176a50eee2e6e792bccd528e17922b68a42b2e01463eebe3097b77efb03e4b6f164da42d939c3df9b19682474a3a2a6f80719d255a21a26caf13209bd1854271316cf4d7fb094b53cc531bbbb1611e536d2444a896cc66eeea2ee047327ea985d247d779c71b10ccd4721a119641cabe24096af57a85431577c5ad495408e5e2b36caa6834ecb7272a635885f0a497b08604e5ea28ac225df6f71d52293b48e0c779a01c76764ee9f5675ac41546678ee200a3de75976565d2993f980739846ce26b8bd9cd2c68d203f96f6da57950fb8524a97d408edbf83d0d015c5c2b4bfbe210de064dcd168228475bf327ac6a48bdd50610e9750238827fabd670532950cc4b0142a3933b2f834fe00a75ece5c3cee47e658eb773b3a1cafd460a84c3abe0701a6bf90e54e44b2c89f3aaddd29c3f7f251e129b8be83cea53c899272ac5a37d2627a13b4da8b5b2398b80d38e10fa37be349363eedce4ca6380b0db872b7312b3f12d7233d50af1b5f91a88e9ce75cfdd444cae4316a0b437048cc969a067710e91ecfc8ac38e53264630e7299b6577cb9b5f034b1d4b800dcc7af50c4f2df4b35878ad554abef510d934d819654c6279fd4b0a480f376e7068a065e73ef80c832f5729c527f56e8a241fee7659205495d6654f0854ee5cdfc3de4081394619fb5bf47d82f4385f506cdf207a902146b14bb4889f6d68f7b851a29f2415a5b6b0828b737cfd7373906cc316f7e1ec339d8014289478ca956d5788d266f3b03d239cfa3bf86d0cdcd069851e394057ada7b767eaa9ca67709c2cbd8a2a61c53536c531db53456380722af2252f750e9d82c32ab4c965dc81767a9e7c44957b4b16911b7b06ab9a47587b12dc443b469113fa3009554d5082d1663765e7f01c19fd60e07aa7f4bd230b714eb738fa22049668b39f5939e6beef07db83586b086a5fb6949a670770573bcf3d9958697362ad4a24df8c4f799f4c4347ee5dfbbd23dc41185bc71c71518006aa6b241b385301fda4aa4f3cfda2a7de3d05d129b5cabcdab32c6622c836d2d0686601074e2c04140826db79fb55b179a828013209c16327c2037294c4b3cbdda81a2e061649853619f0d94f96b30ba7964773da5d780d5abc8cfa987239f302c0e9cdec1869ba741bc624256a1e392c84c10a1b5135b3e5848e6cd201b363b3d927d2e836cb46103a4403e5c50f66e28e2b85ebb01fe0366655e44cb5bc9bec5774300389f9a0a5489f2eb876878d530fe68824ab610d1d0884eda069da768c340a02276f41280ffc6c62e4ef10eba498698cdc67582c47a3f1381eec204a7fdb59945292b69ee32a83674bd1d3d7ec9ac4b4cb7c2763cacc58b497312f9856cc21bcd3cb8a7828ef5b7267d0a8661cd0141b9b8c46e4fefa3f7ddd9013f8e8c566a146a171560bedfe39a1b2d6035dd564b52efbf1847cb16d718a7f0c2ee651c18d5d9483ceae320a02aa03352c6c339f491612a968dc5fdf28debe10d72b960c90a42ee34e6299b4e1d8f541fdd1534213040613c5bee1aeca6c84ca7b085cff613b621271786e23ebc5c9ba150652fd3d789ef74dd183b7318769556c29f9760d722f4d90045efaceaed2131424cece77f040bd869ae130fc3b9546e102713926efd2531874f7b25f5510f60734166e7bc75ca61669eb5fa1d665513bedc9c7ee8b79ea2b46fc6d6714a0629ad8ec2fff1f9db957ba5e212ef1932a5eeac8df000b5c802193d42196051a1285cfccb411c8fdb8eb58a397502f9aec29a4c4090e3d9022afa88e4369548c8f1bc46c2dc1a9a0f137fa965505aa08ee9530e72dce2881994bb94c4daceb29bb4f76c4bfbd4a8170c4d6f9f926840b834bc6d767ba817914971d76af1c167155ff14316736566edbcdf19f0fe7aa0fd8125637544961300a27cde5bd18b5b2464423306e316b0cc54a337be0b8b0899587cd10810353c2243d67c26d06c83a750d02617d406aea2ca84c81499330e8d515d50e8cba9069fb21a26115666659ce7375d38b5488158638acf36484511884b9d06bf946b282a2b650bdff4566e5cc33ba094fb39eab6a2081acd0aa1cd13c5ef25d1c3389094e6e90498cd9a589108d6ed150f3bb6c699d3a28b1c20fdf909ec9d9cedb811a25c8e7b5067c3f308680b21e40d56595bc6a43a9c6625574d6fef72e007064603fd4527e0da0d78dd0db2005abe94a5ff564080200d4ee0ac2121ba8718378c4f999b4326c60f73c61901bdae30336c85e03815cf47cbc3a6a4eb47ad2add7d7c4e7abffc8b19a800325f7baec834562b476e92b574797b1e12c95e4cdbbc5fedb637c4d8e9abbe5a601cb5c699715fd3b008d46fb3bb4d91190931f02116f5e289f420173228882d6a669172190b0a42fba13412b71fb20c4d6c07534b6b6aa870ea6c0df2a5e1b2d9b1cdd9961e5a9d0844a07ef86aecc51f63d3016b1d2ec3b6e7f8c6b8f7c3fe5611dc0d51c74469fe94fd135c86eec6a12fea7f830c60e84de94ec7806e305e6d4b52845863837208fb43766dcd1807c644a79fcdc5f4fb10356b100eb02c81fbfdb171d100e2db7ea3273ad0f33f1dccb940f05b745da81893829a805fef09091eecfca4a8131a0424d4b829c0bd356065414d920a369780691d4b649093b462ebad23c8c5ed90fbf7df0f572ba8915441d15891514eeae7dc326d83271530167f145a2084d46c3a25d756402964f317cd93306eb002a9458872c5301bd0ad825c20a4558804b1c2a2e41f92d3260a53cddcd6082d0cadbed9fd069e1243164f8072ea6afb37be4ca7a87898fb3e3a2eabb9dd0fd3409d73856a70eb7c113d95467ba70819bff9487ffc91fac684155ba6faa7b65767f68424a5547ac123d5fdff679fc80465c3731c1f970c91f67bfb730ae6f0818eaed814db38cddc2adc4367d9a3d9b77b96032a0375b2dbc4f17121cf75aa6294c8c5833cf5d5288447f3b9cf502b123af77bbb1f9fbb7e59f9f5a7badab5b64a70a980753c7b1cc82641824a4fa3eb65fc3cba068371bbdd03a4d5cbb42a0ec8ead523d8b91ccf09b544559b90ed3750a42a68fd40bb63d43751d0062d92acd36e087e4c9d66b3f07df4d57cc364da36e3e25a57ba91f3c17498c90a4b82d204522b819f70383ad45869cf7ca40a5e59541b518e72801a3056e0aecc4ea7c9e8eef51180912457569f56e471534e6fa7f0a648f41e2b390d2b47c7369cbe0400000069962fba83f3ef7ced1814b3c1996298b9375c742cce70420552b20b32add5aedf2a113ced44d02dc94da1054a1e96f37892d3a2baa1493f166945c0087b327efcf1bb6d76d91a034d2e213deecc925cc397997cc3ef2677dd39525c8cfa87e0ca829f0debdcc644472c133d3829536cedf7e30a94248e6ae921181498e77632a7cb14349d3dd90156479cb40cea478efd5ea8ac5cedd66f8545f7044adf6838ad027da0ab6ddd553dcdabd6a6c7d892dc36755d24e951e336230fcd9b72b64cffa6bb4a25a8246045edd2106f63004a0b90f79ce1cc299a3a270ef6584940304dbf119a964a46d5f508ecd27b362313cc68c0bb884a6d6dea14df035119ec78190e2439fce69088676c8b24c2aebeebd2882802e08d46bc58c32141bf6e583c96c0d66fb8431ef0b4efbcae43f1fa7d5758c30d7b28727be6a65d7445e8921b5ee97e50b3f8368fbabd715e7f01c3b17b8dec81f28b35c0fdf5e578a4e550b70218115b9f99ed25de7d0257c24f6ea4ff618f310466d83a4f2e1c95cce701674725c5bf347167f6448cfbcf902feaa1351d7eeff88faefad1cbf1fe49d5b0cbcaf333d131a4e1903ed571093f415a24574cbdfcf9a5628410188261201770590719b292254a2ad32e86c7fb3397ae715383177727284cf92bf918e1d95a392322c4adc7a596107e35cb154546fc74a82d8e7b756ecd9c17dc239b99a6e93ea25f6acf74ab053f43eaae79ba3a34fb47cfd39f18fb717e5a92b2ee5e2914da3f8b42c163d639f71539fdcd809a1389aaca0841f0a00f23ccbd0297859731e60bfde97c1b631a7f57ec39f5cc1c368fda107c14b75ddf3ffec6577c6e5ac8ee2c48ab486f75e10822d911a8a712077d0aef5f8c3d2a0fdbf2779189350497fe4dcf119e7d75d494a188f03367b463da79fa1bc780607eb17e5f894c034bc2aee692f18af4c91292fb29f209dfcbdc327362646ff7c0571bbfca9131fd04c72125a6f65aa9d8c0eaa9b02356bb8a73835d50eb2347b6b4b513f5469a60e2aaca563c67b7b5b40029a340c7ae24cc20e93682cb7109b47c0696c42dcf5f24af3521abab2e27e24b23dae487f941607f7c1bd9d5c8f35dfde97566f97c142cf081fbed8b1dc4c01fd1c44765c25ec1295fe5cf82dfa22f00d3323d47f425c9da44d76adca2d73ae6e419d5a9d512bcbb45b374bea50465d187696bcc3d46e508afa8e835b6119eee67a76a517c3e1d19b4c1b571ad29fdbc9d60e6fa5268156b4313cac5ce4581480090e23340cc26ff1555a6921e19a5e8507a48e565794f467f3863786b7b78970e6c3cd1e8cc040f732a747e737c80ffd38ff00e6badc41b94348b73bf0f90ad7df93dcce8f44d726c218736275f0fb0fb39d8cdb922a28bdbcb8316aa57b91eabf99ff0162b8fcd4b0073ba57af4463fbfb6f31c6f8f97cebb32ab59ca2ad960c446b35360fa17fd38c6d69a728cc44d033f267e81958d1d884348c67ee3e87d017fc2ef5b0acdb61d47e050345ec0d19fcbd60469cb9fa4d81aa7c4984383f7e09fd538c3a223d827265e55111a5d6fec03c70437cfbfa5ea51e4332500aa5147118e586777be1507e7c884db1821c48f95a59b0a653f7583f0376d48462f4d2d75eb37bed7b9f160e1c0bb66e54a514bd9379b9d8fe0d0b133f22ad8233243f3cb43db281afdf218fb57730c95ab795d4c3b8404395f33bbcd5bceee85d8822ada199b57eb54226849318b0e91f6c9ff48ac601ed8b4cc03b3225b39d34a352832a0b346d857d05d5e64a960ad66a9c0b83ecf361ed3eb4def2fdae21c2d65e24ed781191d42bf04d189aac5cfac955d6d59d333ad6c3a47a83c71280e9b7ee81574822738ddc2f296f57d31da3f49bc55d968ed75b77329e3c35bbb74616b159c46c8413bca231d04d1b86fe013ed54236cdb3b1e9585e2d1e940c345dc9b0e34835b2a4fb7815377ae637904ef31b7b6b94f9b368fcdc3d0a9a4c0ed053e0905f1db771cfb2dc28c1e31803843626101f53d944c7c07680eabfe3f05538bee967688b759343c07fd1e4261353bb8eab08f284978a5e880ac46b88ceb7c25fff2640f75d5c49b4f02d83e5eba5fbe908a8f301cbe9f956f149625d32311ffc8128cb9327eca1a166cd513e5985841e9b698f8584b404b5684e52c60ea2e5d6d9dc6bb8f8706168295d657a2e2196664f335826d6ad69607cc1d7a93d0977c292a2bd9181ad42e42bb0ab262131e4f0c74e106bc5fe69a7b23f19af8c3c4eee3bb673c21ea5a677a55893e5ff1b4111208b8b647e8fa8565c85e9be34940d8341786ddc5430bde4cc96c5bdd9782dfda34a304f0b76d4fc49c3e1d575181e0a17a96045a68fcad15a430ddf391be9509ef0a6b9716c1d3486a50a67514303402363ab8dfc824a32dc653bd088c753f9fb5aaae58770f1e9dfc3043530b8682ca6908f69ff79dadd0492111c0bebffbbb958d6e64a54b489b867010848df77d247bc23e07c6a000773fc00d0b1d746dc90fae2a39134f7b408d3d81b103463d5936ae07f1b21c637b99a921dae4debac1d3ee64b4ed7b6434307e8e9d6db19d4edf49571c1c8aaa96c4d59a4ab1dcd6d7e175064485bc583681ad3827ef042043f8dfdd52485f7d9597127a9d5af5c5a8569a307b5a8d67966ff989d1d39aa80f66ef63246b8fde9e459deaba8b318d5376794a846a69067af54eb6da3dde7a5fd6ba197ff786ab3e468ae3738a01dc1680d90fec5264fcc43150b75b976149eed82a22b096990184577f0165d7754e077507172702d51783641310c4ee0ff852963c6fa948323d4e3973b8a4300000000140000000000000029000000340000000a0100000000000014000000000000002900000034000000f5d1000000000000140000000000000029000000340000000700000000000000880000000000000029000000390000003a0e010a00000000fe88000000000000000000000000000120010000000000000000000000000002fc010000000000000000000000000000fc000000000000000000000000000000fc010000000000000000000000000001ff01000000000000000000000000000100000000000000000000ffffffffffff"], 0x1488}}], 0x1, 0x800) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000000600070008000000080008808400010008000500", @ANYRES32=r6], 0x30}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x3, 0xd, 0xb4065bbf89e2ed4d}, {0x2, 0x1, 0x9, 0xa}, {0x2, 0x3, 0xe, 0x6}, {0x4, 0x2, 0x0, 0x8319577eac9cb145}, {0x4, 0x5, 0x7, 0x9}, {0x3, 0x2, 0xf, 0x12}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x6a, 0x5, 0x20000000, 0x3) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000400)={r2, r10}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000000000000140008000000fe8a1c61cad443b7a0c301040228cc6ffc011f26816efd00000000000005001400ff000000"], 0x30}}, 0x0) 2.776577299s ago: executing program 2 (id=7154): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1}, 0x20003ff1}], 0x1, 0x0, 0x0) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) 2.080225273s ago: executing program 3 (id=7161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.897621784s ago: executing program 3 (id=7163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0xb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x24040800}, 0x20004800) 1.888015792s ago: executing program 1 (id=7165): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) sendmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x0, 0x8000) (async) socket(0x8, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) (async) accept4$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000004d8db76a9440000701fcffffff00000100017c002cc25243800c0001800600060086dd0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x44040011}, 0xc000) 1.861354972s ago: executing program 2 (id=7166): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180011000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) 1.730220785s ago: executing program 0 (id=7167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x28, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(r1) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) (async) r6 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x8, 0x0, 0x0, @dev, @local, {[@hopopts]}}}}}, 0x0) (rerun: 32) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010100}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 952.107655ms ago: executing program 3 (id=7168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 951.311055ms ago: executing program 2 (id=7169): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r1], 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) sendto$inet6(r1, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x3, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x4, 0x8, 0x0, 0x40000000, 0x5, 0xffffffff, 0x4, 0x40}}}}]}, 0x58}}, 0x20042040) (async) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x3f722457a8293fde}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 949.360564ms ago: executing program 2 (id=7171): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r2, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x1c, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 948.659681ms ago: executing program 3 (id=7172): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r0 = socket(0x2, 0x800, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) 948.418648ms ago: executing program 0 (id=7173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x134, r1, 0x30, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x110, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, "2419baffa6b9ec775e7d1620110e879283185bc248357723a0fe4372"}, @NL80211_BAND_2GHZ={0xec, 0x0, "9285f8dba8661c3681526c3ca97c48440d4af4a391050fb785c9b8b30a1470aeb98c60edacb486be7d5a07856352552846064dc0cd5e9f986ed6c5d9a4f27d921d033a5aa837c165c2280b8c9bbfc06eecf27b2cda837fe43a7787f3e6109e134bd1c55cf1ff505a720d3a6b2605f462476d5029d8b94cf3fb861dc7862afbcec94c69a86925bd147669146df589c120db469473a7f6218b4cd39e658dc09847245fcf632937fe2be5d612e8f73cc0c20566b5c975fa7c40610dbe07d1c4b6da103d72cf48b6067be286c2928fb379b4555978d52b2f7f11e8c9e07b90c8b5137f38222995c687a7"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8080}, 0x4040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r4, @ANYRES32=r5], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000340)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0xfc}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="80a9d290c91bb7b8bced7545120000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008040}, 0x40000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r11) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x28, r12, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x0, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x0, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME, @NL802154_SECLEVEL_ATTR_FRAME={0xffffffffffffffbb, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x0, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x0, 0x1, 0xed}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040c1}, 0x4840) 946.809969ms ago: executing program 4 (id=7174): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@caif, &(0x7f0000000180)=0x80, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r3, 0x0, 0x0, 0x4}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 946.391545ms ago: executing program 3 (id=7175): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008009) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020028bd7000ffdbdf25020000000100000c001000c408000000000000080019000a010100"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x6, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x20) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000003838d2c6be5c164dc1ca134f8a4475ec879b83d85ec093887088d4e7057dd8e0b9da3b6343227dfc231502a2988302793ee55fb0f783f0244035db120a4465811b7b45b508f13377555251ba86f30581ed80afa85d6c5f267443c54f6ace7eb9d3121e7a0eeaf4718fd00c", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf25030000000800110000000000050005000000000006001d00060000000800090000000000"], 0x34}}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x0, 0xde, 0x0, r9, 0x6, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x9, 0xa}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x29, 0x0, @empty, @empty}}}}) 942.475136ms ago: executing program 4 (id=7176): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60000090) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "5966c0c12cedf0657d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 940.076126ms ago: executing program 0 (id=7177): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001080)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "ba5801cee766e7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002080)={0x0, r7, "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", "7e58c8ace7c4c8767e969df2aeda9c8aaf6fb4e966965992a16bfdb3a5c02e5b8f8ece83c993eabc908caea0e04873b03bcb45a6f480af0b06013c69603698b561df1cad385d66353673c29fc67d366f1496e9932585b741e68a6b8806a0c8cf8996208cfe839924eb382f6156ab5633648b932648fed9c8766e09eea2e4a88e42b437cbf7213c7fd3029c5011bf074a59a219223ef26e3ecd5556f68186f4c31031781b815af648edc6cef300290bf3e9f7c6a1d5a964aad4c16541db7960c2a79fea745f249396f6e87e0635bf0bdd29783680ca819160b64734485deef035ded55cb8eb829e579ca7eaca20e6831fc31426c04eddeffedf4d18494e3a75bce91840fb4a6864101098abbc522c42e841e1ffefb21a419ddb2740a27e5dc576e922671f7fdc7b0ab1200c9ceb439a1b172379eccdd752b59b5437174de642bf6776ab5e1553a49cecc1f6e36516a414561c371d7c1fc44deb997cfc5008476dc69f76be232287f5f6948ccdc02af79dac18e89fba343c629887f9752e1710a9bd5b8dde77d526ada80624bc9ebd2951e0b0a69f6731c87cdea6bdb92aaa80c7207c7b904a7c625de7e7d4aea34d70d7ebe8d1ffa44d050dbc94a4eed0c61a51b12ee61b247dce6379edb806129219145ac19bdb57f389002aa83f15874f5d1afe047fca68d48e639382c45ea9034b16d730980f0f891e39989742c3faaff74a85503043e5ee9ae35d9eafac20d94820b39a05870c8f7b8626aa7a8c6b3cb22e3455f22bbb177f82b18dbf865a39d31c014407f4da51620dd789015089328537cbf6880ab8d0b4e2e02951a133696ab1b08eb5ed289f467f70fe15f9e4ee18226d1ec81fe2449642e4898b2ad6ed93f6dd7b88dd557db52861f448318eef86872b7b9bb133a4f1cdef4628dabda1c84c740302815e27e12dafe46f85f337728b30fd5edffccd67ffefa14583366119945d0910a01601be48e8536fda4f6b1df96d0c75cf833e72f045ebf5fa9927fa7fdc44542e1afd4645d283dc5aeaba205bc8918c92fd94735d03c7f951d48f9ab7bd1727bebdd7125bb8e97946e59dc65c474f4b1a6905d10bff678b43ed05a3e0414cf206ed4a996fa4c2df8a26809befbf9e0f64ac9f26716fa4b0b04b7719dba66ad5bcac4c7735c9e6d61d754a6eb2f15dfcf27779a8feb4c25321360d52484cf2b7d6e8a7ce9330f9729fdca82654c9f08aff558cb056171bbb682627d65a046c0e7b3923e1726a242b0a889c637c18459a08b9d08767486d903375290a9daaa5676989865a8c21265d76c0ff612fc3206118d502c3cdeea6c8d49c974bc9a7681bdaffc11b52996c9d968c7dcfdf33d4c833c39df6b4dd742130044709c91155ac2f03bfa00a783e602411aad0b7da6a23cc0440abef4bf63f7a17130b010c6f30f3c4c5105103c18023fb5556ba3338a8713b1f35fa438c981c935575b244194ef0676e128e9fa4555b090757550f28671783bcae125c5dc8f21d3f95f5b15b7a665835a0501aafb93800a99217e026353e903baf0ab88d448020c16045e28a6c0c7c95b34196f7854ed12d57d7997c359cc5828b2b31dfa5937924c8d9efcf78978fd013d60092a826a5d8550baff697ca92b9a593ff29ab86445cb864c1203975591cdd5ff049bd1a66fa60d69432b01f393d683ab572c791df2ab112be790d89b81b8234cb049fadc2b4b9b9e76f88fd1e9503ffdb249674832074ac5abcb11db078c658a926a6b0208bce3544ad07dfd4f48c8f51a0181ec6daf644baddec81f3e56d5ad4ba7c33b18a9f3cff6b4e2dc12bc5fff34845b78515e9b3c443d9be72f9681d4eb366e888b14fe2bebae8d22eda5e5779959eee820387349a63578215c901809538b7b3ac3d9b5e873ded77facb92a41713008ec79a604f2f07e4f215a39668f431d3291ee71da8952ea4d5114ea1b3a8213b7254740e99238c8223e75ef130ee116acb1414148877fe332437b542827bb143f49ebeb4fb7584b2441709ef6e79d54621d0b20eaac2be12b0ef021b9221446bf428b843acc94b0998c708d098342812a43a057f7a024978631668729a4f866dc6d4990ebd25f6ebc22000076e24072f1f11e79c8cf1f5c46bee38df0fc539591bd92b2978daac1691662e81aeb6af17d81e280aba641cf5c284b7b25c009c8f18cafd5346a51a454deedc7d5e6b90dfd23554f51c888c769c5b69ae46916fe36b2f927a60386ae9ec91cfe5d796dabab09953bb629fbd305bc2c0b94c76d5b3cec6b83fa7ceb731b13d0a1d96659837fce31d549488d7791f124a9ed9f48d4e677f939962c1e41e0c4424dc4057fe7c447aacca1dc28ba405df95714e8db703880aa909c5e3f1658c5ad8065d3134e9439d30d69522abc2427fc714a7fcbe5667e231f8f1342fca8f46a243b18aa6933d22808fdd28ffe8cf1b52340278d9bc8bc803de6e497be108342a3e732cf7ad129f29a4beb3bdc17d7cc6930797d08e737bc94b5dad2b6b1e88cc97d0598354c0163902bdab8bcc50cece6936207e40f603cf3ac93372a6addd06eb7e60a04a52cc84b63bb62d1764e3f2dc5983020562f2a90050d939aa271422c1576c372004f6fdc7bf0e3f4abee01e5e3678aff8808b9097753f8b3f2441301b8d07f208645865f53e131ce5f2dc020a10deaa4fbc11cdd118d76196eb197b67ec8d5a75d718ce75581daab64ce6a37c56d6f6edff4802e06481190db9cfe0150687446ab0c6a6089102d1696057ed7c1e7132c3b1ddfe80059d069dd8e6162f09d9d0e8744e00da8e1fd805dcdde756ecd3c519e7b2301ab36aab22cf2d0c832313e3a5d0a0dd8b566d7da018be76acb92470eb4bd054251a426602d8876b350cdddef15e268a730e1bc0dc5b20a45fb814c5777c785ae6cb09b52394589f679d5f33227afc83493c12acd5bd1550a03b05cd661eebdb42dc31a1f03865eb600061b22216498e36f2469da5995ff3318791c653f9301f76a26c24d1b0ec62cc15e68f8816a8954afc92344ec3dcf48c1c2a960bd362acac9a59596ad3cf5a6075a0be7c841007ea59a54efdf255c7c1f95c70c6a469932fadc30696481bcc7a123090a7865203648021b175d07a882d8cdc3a133168054ed6493483a66a7483e2b6a82ea7cf329209dd1626b02284f0239628386707e8639c723de54900b928adea4f0a94937c4ddc3f0eb102649e5b10da166baf7aaaa26f48d30afbf0c4d4deee0eb3897ca6e947c505a9829f9c1331cb3345d4901f7ca83de64f22fd6456e95fa70299fd08370ecaf1843ee78ca2e0771bbfeb7edbf293b8f4b409e753c3cd33b2e006489099f69af21f6cfef8f2f8d1ef269ee095ece31db1bc2e65f7c38a0ae586693332dd222d3974a07f5699ed9327858be6e25e7d6e38e22bcac872edbc74e8d75818e763c870bd4ec6acb4e478a6206e2e1157c39350761114161f2e317c75bda231533ded0dc577677a03f2c129113216ea79a30b60d6b6019516347fe59f6c975d4461f32e275fa87584628c06654075a14a6a6a7302402b8a717d7e0bff51367d4180462989cbec7c0ffea4d74f529674e0cef64dc780e279a5e25444c73156823ba540b13361e86de24511b2c09187fdac874e63de8f98cfa5ec02b3a794d46bad9b8142c22d09545129ae798fb4ca17bba2b9edc0b14b6aafb5c31ceb60c809316011580c7280940de73d1ffeb05a6daadc5c9ccba7d73305d0d6c24e4c2854a308a3f90ddcd2c4afd84f8262fec319fee6d851cdcd3fe6f3f821b5a2820f301f712a43f5f87c6a0377bb2392d4b39af51804b8a9223926ac15979abc6afd64039d6139e9d505469db0f48476a5dc19d3c062bebdb1d9338fe9814940bac760e60bd85924b2aa8eb140cb8ab8011844f89dba5e02f7ba09eb2520098b75475ffaf0b867655707ec84cdee45b069e5662a0487dd72a598678f408f4b5ea256fbf402806b1e41091005811d68762f37a45984d9c3589ed66c4f99ee40598fc31a06899e7513011489f33b143a1baf7d370720d9668cc2e631013b79b80e233117f4fbb06bef2550a67a8acc2fcc650a6a797a331b53fd375473fbf6f1a97b5744b56fe2051e6b43ea65d0031c96de6ba5fce1eef31c0b4029ae0f80521c5f06fb28c8d75c90b55ae1c66a14e1a0205d01c3d865df4ddc4b3f3837299b29da644c908f0b2425a71b2c1e7d05bd389dffea48214f1d674fccc9d0a8957aeea9d8b93c01f9d75e3d077221221007d5269d26de5544bb85ee7a1d7c6eb4b462111affa7c00e78acc8a36eee63cc4178b9879e238e402e797a6e271ab5496302539a38a417114c55d91f9b5a5169a07e748cd09f006357221fd71f458567bcd40e8d7b054cb3012300135bcedca05480cf300e8470fda0b53e8b85067247148c522cbeb84e496332783ff630a613c80ba59812e6ea4878ebd29ff589cfcf936122e8460fb92b667d3c6b1a9a84adb682307803cb03d2c095b73ae8d76783abb06b4919407d23b020265f91525d880f07e677c29de2b5980edb1f09978a87ff41682a8f61d5307252cd7159277656284c84480f29ed2cd7cbfcdb20fcf540530961f1a3f2eb1b5cf93a137ca1202af879b1c3d6a01452c7a49e23fb6b42d7b28ae556bd97089939b302597e943792468815ab0f18ab78b79be6ef4f8485fe88ab761e8b3c84c829047fc00cd70f39bf09df6c6ef806d6cffe2f0cae84dc9aa95a46d573dc775a8809ccae8960100f20beed528519bfaab5f8de0afe81efe62bc9c82e2bfe3dd863f8bd2b1053f5b7f77d71b857c23f2bbb08cae0ce37bff1726b62a08c14675566baf5e2a577a73745c398c641cae97d840454a8bab389c40746454b7f8d6a78e6c1a9402e24eca29f5a2ea3513919e4af73075760cdcc15963338fd6bbd4e4da4bd5f829a9464b953654cd3a30995f084708922e4541e67ffa3a4c8fd7e0bf24b420fe740f00011d7327506ed84e0df37673a64c28b217246587fadeb9e7771e37cff80ea667f2378d2e7e61a95fde8e616ff4192b5bed3bc21ed623c9f24d09d5eb6130ecd89423625ab6066ac8ba22f78d14891b46d892769e199a96ff2de340c05a22ed194e470d0f86cb3c82032e07784e92af714c47231d8edf9462738577e9b4cf8624d305ee5516752ba3e6b52dd66e445c59c59b94a18aa5c6fd48b819427653a1fa16070e6f7333f8d78be78869215272adf640c535114cb8e7eeaa18418af779753dd45d67653cff08a0a2e244d2f47a06b002ff187ec5b9f837d1628b2fe8806e195213bcb4ae45606c739765c540c6963f71a754e92e35d35fb6dc1dba3bd6802d4e9301ca7940051cb87027df8bea874abc2427c8e476ba791ff5dc6ccb71f1331792cd0424ace54"}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x83, &(0x7f00000000c0), 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e22, 0x3, 'sed\x00', 0x5, 0x5, 0x9}, {@remote, 0x4e22, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x27780cee903d73e9, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3, 0x4}, {0x5, 0xfff3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 614.605095ms ago: executing program 1 (id=7178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000000)=0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000914010026bd7000fddb9d250800010001000000080001000100000008000100010000002bff01000100000008000100010000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004040) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x6, 0x4, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e20, 0xffffffff, @private2, 0x10001}, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xd}], 0xac) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@delqdisc={0xb4, 0x25, 0xdf1781564768c53a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0xfff1, 0xfff3}, {0x0, 0xfffc}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x651}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3b}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4044844}, 0x48040) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 557.905778ms ago: executing program 0 (id=7179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x108, r1, 0x1, 0x0, 0x25dfdbfd, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc54}, {0xc, 0x90, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r5, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r12, 0x1, 0x30bd26, 0x0, {0x1e}, [{@nsim={{0xe}, {0x24, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="1400550003049da0e99b720000000000000000759f8ad9ed754525d2fa40d3388156d3"], 0x30}, 0x1, 0x0, 0x0, 0x240480d5}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3843c}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4041}, 0x80) 555.46797ms ago: executing program 4 (id=7180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x3a, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 400.447518ms ago: executing program 4 (id=7181): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x400, 0x6, 0x7d6e, 0x2, 0x842, 0x7, 0xf6c}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc244}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 354.373919ms ago: executing program 1 (id=7182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) 302.589224ms ago: executing program 2 (id=7183): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20041800}, 0x80) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4044) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c054) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250600000008000800ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20041800}, 0x80) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4044) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c054) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250600000008000800ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) (async) 196.343372ms ago: executing program 4 (id=7184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x84c1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'/37}, 0x30) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 142.08973ms ago: executing program 1 (id=7185): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800c}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="1eecf5d52ff428d01800000065ee6a"], 0x18}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x268, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x671b2182}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd4241bc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbaf1d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a3802a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75f3fc11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x315de18c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b4a7a44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18c68da0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d3bdf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6263d9cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55898681}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa93b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ac7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d5472d3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5220}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6edc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x780f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c65b7c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f257423}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b5e3bfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x585602b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ab8c69}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30e33a24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b2840a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6975b75c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61b8d97b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x210e5e55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13aa7031}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x524313f2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35c36512}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64932ef3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x576c63c5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xda717a1}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 140.430857ms ago: executing program 0 (id=7186): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0x3a, 0x4, 0x328, 0xffffffff, 0x198, 0x0, 0x100, 0x90, 0xffffffff, 0x290, 0x290, 0x290, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x3], 0x1}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0x7ff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 58.67022ms ago: executing program 2 (id=7187): ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x6, 0x4}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="0b1abe733dcca45097c80131d48ad69d3f978226e1d21cc6ef5244ef2d87a12f7713ad7e50638e64ddaf8a9433f9eb557bf1247d9ccf3731c4dc72213af84593360149f965088d387d65c1caed8bbf9f9af8bb8271d471764ae47ac0ca641cc1545aa25e10a8e2413ddc9a6be3a71a5f73343df3e2e7d7076977da102fb4600948af43689ff182d63abed011e264445f21ea0243b1f2aa532d59c37f2cb1c484a9375e509ab371ec52c32a603f3094c6fa71affe8c35ff2a047e4cfc5ea620369767a8", 0xc3}], 0x1, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0xa9, 0x1, 0x2, 0x4, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0x2, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xff}, {@loopback, 0x9}, {@private=0xa010102, 0x4}]}, @generic={0x11, 0x3, 'V'}, @cipso={0x86, 0x4f, 0x1, [{0x0, 0x8, "6bd35b4ea244"}, {0x7, 0x8, "3cd8d5d82b5a"}, {0x0, 0xc, "aaf7b740c01822686f29"}, {0x2, 0x5, "78708f"}, {0x0, 0x10, "265d52a4356f83b11e4078efc3e6"}, {0x5, 0xe, "6764bdecd85f41636f604ec5"}, {0x7, 0xa, "97cbedca9a5fd14d"}]}, @timestamp_addr={0x44, 0x24, 0x1e, 0x1, 0x8, [{@empty}, {@private=0xa010101, 0xa4}, {@remote, 0xffffffff}, {@empty, 0x7}]}, @generic={0x94, 0x7, "fbe5961ba3"}, @timestamp={0x44, 0x24, 0x8e, 0x0, 0x5, [0x5, 0x0, 0x3, 0x1, 0x3d, 0x3ff, 0x7fff, 0xa38]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x933c}]}, 0x54}}, 0x80) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x48d0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000680)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f00000006c0)=0x4, 0x4) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000700)=@name, &(0x7f0000000740)=0x10, 0x80000) bind$tipc(r6, &(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x2, {0x82, 0x2, 0x4}}, 0x10) write$cgroup_pid(r0, &(0x7f00000007c0)=0xffffffffffffffff, 0x12) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc3f81d2e21ed7f603ebb6657c0e958f443913e1c6e3f56c"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000d00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x224, r10, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc57}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd6e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9025}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x69e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x224}}, 0x4000) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000008, 0x1010, r11, 0x65728000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xc4, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x46, 0x3, "91384cc58bcea3244ea1c40c350b361cf5c187d4bc524cd14db2707b060f5c879104cbedefc2c8f6edc40f1cd9af8646cb8a6b336228ca310d128aa8fa378aa3542b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc7c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xba18}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}]}, 0xc4}}, 0x4800) sendto$unix(r11, &(0x7f0000000f40)="5aa3c9d0dbfc", 0x6, 0x3225d57d81b7861, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f00000021c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={&(0x7f0000001040)={0x111c, 0x12, 0x100, 0x70bd27, 0x25dfdbff, {0x2, 0x1, 0xe, 0xde, {0x4e24, 0x4e22, [0x7, 0x7f, 0x6, 0x7], [0xd9e, 0x0, 0x9, 0x6], r3, [0x8, 0x8001]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "11baf8260a8e1aa528fa53e0e70b878299ad039178aab7e01df7e70794c129fcca59c8338dee7b7ddc6ecf46573f42460225eae06349fdf6b27fa3bf42af7e7e810a4ea147853af25bc9f2e17b4988062d1900a323a16e7e9f4387be3a66e65060eeea64b25f37edb667e206d728ef5c452a8bb0fdba0bd6d7cb514c57314c9d3e69e4ff0427d998e4541a88275097d198cdcb67e4ccb1a126a90038e27006bac11d498bd503b7873ebed24bf223bcc883bd1da40b7fb738b38a6f81e1504ed80e4edb25b5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x111c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) socketpair(0xa, 0x0, 0x2, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002240)={'wg2\x00'}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x70, 0x1405, 0x4, 0x70bd28, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) 52.611251ms ago: executing program 4 (id=7188): r0 = socket(0x2a, 0x3, 0x9) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}], 0x20) socket$pptp(0x18, 0x1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000280)=0xffffffffffffff8e) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="81d751a33c41a3bd561cf215b050f65f6991a2aef6ed2401fb4969b95d6035e8127eaee443b186ea83"], 0x84}}, 0x20004881) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.049167ms ago: executing program 0 (id=7189): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600006200028008000a00", @ANYRES32=0x0, @ANYBLOB="dd18618175ce3a75e49e046ddee05e907d245c73c3bda61178ff919e4176cace5a"], 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x5, 0x2}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x2}, 0x90) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) 0s ago: executing program 1 (id=7190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee213459a7a00"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): er supported [ 554.956538][T24130] xt_l2tp: unknown flags: 10 [ 555.374881][T24164] : renamed from hsr0 (while UP) [ 556.758722][T24244] netlink: 'syz.3.5293': attribute type 5 has an invalid length. [ 556.761256][T24245] netlink: 'syz.3.5293': attribute type 5 has an invalid length. [ 557.281056][T24274] __nla_validate_parse: 15 callbacks suppressed [ 557.281079][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5302'. [ 557.312382][T24274] vlan5: entered allmulticast mode [ 557.464072][T24279] geneve3: entered promiscuous mode [ 557.469342][T24279] geneve3: entered allmulticast mode [ 557.485928][T12634] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.505370][T12634] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.532568][T24284] netlink: 'syz.4.5305': attribute type 29 has an invalid length. [ 557.552888][T24285] netlink: 'syz.4.5305': attribute type 29 has an invalid length. [ 557.564649][T12634] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.592892][T12634] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.602201][T24289] netlink: 'syz.0.5307': attribute type 24 has an invalid length. [ 557.944543][T24305] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5312'. [ 558.251467][T24308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.357255][T24326] syzkaller0: entered promiscuous mode [ 558.363539][T24326] syzkaller0: entered allmulticast mode [ 558.374255][T24326] sch_tbf: peakrate 5 is lower than or equals to rate 6 ! [ 558.429802][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5321'. [ 558.440719][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5321'. [ 558.587782][T24345] syzkaller0: entered promiscuous mode [ 558.593540][T24345] syzkaller0: entered allmulticast mode [ 558.607599][T24345] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 559.146603][T24351] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5325'. [ 559.162193][T24353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5325'. [ 559.278820][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5327'. [ 559.313628][T24362] sctp: [Deprecated]: syz.1.5328 (pid 24362) Use of int in maxseg socket option. [ 559.313628][T24362] Use struct sctp_assoc_value instead [ 559.329749][T24361] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5329'. [ 559.386087][T24368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.594359][T24385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5335'. [ 559.909844][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5345'. [ 560.362987][T24433] syzkaller0: entered promiscuous mode [ 560.368628][T24433] syzkaller0: entered allmulticast mode [ 562.778833][T24452] syzkaller1: entered promiscuous mode [ 562.784782][T24452] syzkaller1: entered allmulticast mode [ 562.798075][T24470] syzkaller1: entered promiscuous mode [ 562.804122][T24470] syzkaller1: entered allmulticast mode [ 562.945838][T24487] __nla_validate_parse: 5 callbacks suppressed [ 562.945856][T24487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 562.966227][T24487] Timeout policy `syz1' can only be used by L3 protocol number 248 [ 563.374983][T24510] netlink: 'syz.4.5370': attribute type 10 has an invalid length. [ 563.474919][T24489] vlan0 (unregistering): left allmulticast mode [ 563.482563][T24489] vlan0 (unregistering): left promiscuous mode [ 563.572228][T24489] vlan1 (unregistering): left allmulticast mode [ 563.578798][T24489] veth0_vlan (unregistering): left allmulticast mode [ 563.771874][T24520] xt_socket: unknown flags 0x50 [ 563.816281][T24520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5375'. [ 563.846371][T24520] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 563.904324][T24532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5378'. [ 564.118608][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5382'. [ 564.134190][T24537] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 564.232620][T24537] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 564.322696][T24553] netlink: 'syz.2.5386': attribute type 27 has an invalid length. [ 564.342772][T24537] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 564.409488][T24537] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 564.572437][T24568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5389'. [ 564.728436][T24578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.783278][T12628] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 564.800628][T12628] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 564.829841][T12628] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 564.845753][T24583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5393'. [ 564.850895][T12628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 564.875501][T24583] batman_adv: batadv0: Interface deactivated: dummy0 [ 565.032163][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5396'. [ 565.245125][T24604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5399'. [ 565.258692][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'. [ 565.283181][T24606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5400'. [ 565.645538][T24628] delete_channel: no stack [ 565.701721][T24632] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 565.930440][ T5833] Bluetooth: hci1: command 0x0405 tx timeout [ 566.299288][T24645] netlink: 'syz.1.5410': attribute type 5 has an invalid length. [ 566.327412][T24659] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 566.342314][T24659] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 566.415401][T24660] netlink: 'syz.4.5415': attribute type 5 has an invalid length. [ 566.486131][T24666] sctp: [Deprecated]: syz.2.5417 (pid 24666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.486131][T24666] Use struct sctp_sack_info instead [ 566.766638][T24684] veth1_to_bond: entered allmulticast mode [ 566.900964][T24684] veth1_to_bond (unregistering): left allmulticast mode [ 566.921352][T24696] tipc: Enabled bearer , priority 0 [ 566.954345][T24683] syzkaller0: entered promiscuous mode [ 566.959875][T24683] syzkaller0: entered allmulticast mode [ 567.008451][T24702] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 567.044983][T24683] tipc: Resetting bearer [ 567.108326][T24687] x_tables: duplicate underflow at hook 1 [ 567.121384][T24683] tipc: Disabling bearer [ 567.152809][T24709] bridge0: port 3(vlan5) entered blocking state [ 567.169606][T24709] bridge0: port 3(vlan5) entered disabled state [ 567.187977][T24709] vlan5: entered allmulticast mode [ 567.206516][T24709] bridge0: entered allmulticast mode [ 567.228339][T24709] vlan5: left allmulticast mode [ 567.233784][T24709] bridge0: left allmulticast mode [ 567.324282][T24718] pim6reg527: entered allmulticast mode [ 567.847983][T24754] IPVS: set_ctl: invalid protocol: 51 172.30.0.1:20001 [ 567.918980][T24763] --map-set only usable from mangle table [ 568.054492][T24769] netlink: 'syz.4.5445': attribute type 6 has an invalid length. [ 568.070976][T24773] sctp: [Deprecated]: syz.2.5447 (pid 24773) Use of int in max_burst socket option. [ 568.070976][T24773] Use struct sctp_assoc_value instead [ 568.082808][T24775] __nla_validate_parse: 14 callbacks suppressed [ 568.082830][T24775] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5446'. [ 569.784024][T24797] tipc: Enabling of bearer rejected, failed to enable media [ 569.860605][T24803] netlink: 'syz.4.5454': attribute type 39 has an invalid length. [ 570.022752][T24817] wg1 speed is unknown, defaulting to 1000 [ 570.043749][T24817]  speed is unknown, defaulting to 1000 [ 570.067190][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5457'. [ 570.118485][T24820] tipc: Enabled bearer , priority 0 [ 570.127965][T24820] tipc: Resetting bearer [ 570.172498][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5460'. [ 570.287690][T24831] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5463'. [ 570.402232][T24839] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 570.421518][T24839] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 570.499051][T24840] bond3: entered promiscuous mode [ 570.920956][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5473'. [ 570.959240][T24878] netlink: 'syz.3.5475': attribute type 1 has an invalid length. [ 570.970071][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5475'. [ 571.152223][T24870] batadv_slave_1: entered promiscuous mode [ 571.179700][T24869] batadv_slave_1: left promiscuous mode [ 571.396910][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5481'. [ 571.406526][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 571.415740][T24896] netlink: 'syz.3.5481': attribute type 15 has an invalid length. [ 571.486986][T24900] bridge4: entered promiscuous mode [ 571.492672][T24900] bridge4: entered allmulticast mode [ 571.527565][T24903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 571.582229][T24896] netlink: 'syz.3.5481': attribute type 16 has an invalid length. [ 571.607604][T24896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5481'. [ 571.647206][T24906] tipc: Enabled bearer , priority 0 [ 571.655032][T24906] syzkaller0: entered promiscuous mode [ 571.661562][T24906] syzkaller0: entered allmulticast mode [ 571.714641][T24905] tipc: Resetting bearer [ 571.735577][T24914] netlink: 'syz.0.5487': attribute type 2 has an invalid length. [ 571.759362][T24905] tipc: Disabling bearer [ 571.787299][T24923] netlink: 'syz.0.5487': attribute type 9 has an invalid length. [ 571.804083][T24914] : entered promiscuous mode [ 571.819440][T24923] netlink: 'syz.0.5487': attribute type 9 has an invalid length. [ 572.270923][T24960] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 572.286185][T24960] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 572.879806][T25006] tipc: Enabled bearer , priority 0 [ 572.892996][T25006] syzkaller0: entered promiscuous mode [ 572.899105][T25006] syzkaller0: entered allmulticast mode [ 572.919824][T25006] tipc: Resetting bearer [ 572.929816][T25004] tipc: Resetting bearer [ 573.004582][T25004] tipc: Disabling bearer [ 573.214826][T25033] __nla_validate_parse: 7 callbacks suppressed [ 573.214845][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 573.289112][T25033] veth5: entered promiscuous mode [ 573.300305][T25033] veth5: entered allmulticast mode [ 573.325147][T25043] netlink: 'syz.2.5522': attribute type 10 has an invalid length. [ 573.347532][T25044] netlink: 'syz.2.5522': attribute type 10 has an invalid length. [ 573.400923][T25048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5523'. [ 573.502976][T25059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5526'. [ 573.530658][T25059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5526'. [ 573.570764][T25064] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5528'. [ 573.584176][T25064] gretap0: entered promiscuous mode [ 573.584394][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5529'. [ 573.708987][T25062] team0: entered promiscuous mode [ 573.720051][T25062] team0: entered allmulticast mode [ 573.870681][T25086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5537'. [ 574.218265][T25098] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5539'. [ 574.257542][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5545'. [ 574.292827][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5545'. [ 574.316241][T25123] netlink: 'syz.2.5545': attribute type 3 has an invalid length. [ 574.626219][T25132] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 574.639970][T25132] bond5 (unregistering): Released all slaves [ 575.120721][T25159] netlink: 'syz.2.5559': attribute type 30 has an invalid length. [ 575.383084][T25171] openvswitch: netlink: Missing valid actions attribute. [ 575.407464][T25171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.637358][T25186] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 575.651472][T25186] bond15 (unregistering): Released all slaves [ 575.966538][T25208] tipc: New replicast peer: 255.255.255.255 [ 575.997658][T25208] tipc: Enabled bearer , priority 10 [ 576.647652][T25260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.942520][T25288] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 576.985570][T25290] macvtap1: entered promiscuous mode [ 576.995355][T25290] vlan0: entered promiscuous mode [ 577.001219][T25290] macvtap1: entered allmulticast mode [ 577.029198][T25290] macvtap2: entered promiscuous mode [ 577.063415][T25290] macvtap2: entered allmulticast mode [ 577.093441][T25300] netlink: 'syz.3.5599': attribute type 1 has an invalid length. [ 577.131269][ T5816] tipc: Node number set to 1521605296 [ 577.139721][T25301] Cannot find del_set index 512 as target [ 577.165384][T25303] netlink: 'syz.1.5601': attribute type 4 has an invalid length. [ 577.313221][T25317] netlink: 'syz.2.5605': attribute type 10 has an invalid length. [ 577.465670][T25326] lo: left allmulticast mode [ 577.476640][T25326] xt_TPROXY: Can be used only with -p tcp or -p udp [ 577.508323][T25327] tipc: Enabled bearer , priority 0 [ 577.515971][T25327] syzkaller0: entered promiscuous mode [ 577.525762][T25327] syzkaller0: entered allmulticast mode [ 577.560946][T25327] tipc: Resetting bearer [ 577.818332][T25351] netlink: 'syz.3.5614': attribute type 15 has an invalid length. [ 577.864298][T25351] netlink: 'syz.3.5614': attribute type 15 has an invalid length. [ 577.991093][T25363] netlink: 'syz.2.5618': attribute type 16 has an invalid length. [ 578.107265][T25377] netlink: zone id is out of range [ 578.126965][T25377] netlink: zone id is out of range [ 578.172725][T25377] netlink: set zone limit has 8 unknown bytes [ 578.280972][T25322] tipc: Resetting bearer [ 578.315423][T25322] tipc: Disabling bearer [ 578.411860][T25397] sctp: [Deprecated]: syz.1.5627 (pid 25397) Use of int in maxseg socket option. [ 578.411860][T25397] Use struct sctp_assoc_value instead [ 578.734671][T25419] __nla_validate_parse: 24 callbacks suppressed [ 578.734692][T25419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5636'. [ 578.750929][T25419] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5636'. [ 578.759897][T25419] netlink: 'syz.0.5636': attribute type 5 has an invalid length. [ 578.768283][T25419] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5636'. [ 578.826979][T25422] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5637'. [ 578.918585][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'. [ 579.146501][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5645'. [ 579.400552][T25456] netlink: 'syz.2.5648': attribute type 4 has an invalid length. [ 579.419168][T25456] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5648'. [ 579.437239][T25448] syzkaller0: entered promiscuous mode [ 579.499988][T25448] syzkaller0: entered allmulticast mode [ 579.587492][T25465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5650'. [ 579.790055][T25471] netlink: 'syz.2.5652': attribute type 21 has an invalid length. [ 579.810551][T25471] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5652'. [ 579.844167][T25474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5652'. [ 579.994774][T25482] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 580.007890][T25482] bond15 (unregistering): Released all slaves [ 580.137541][T25488] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 580.167983][T25488] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 580.186378][T25491] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 580.208392][T25497] sctp: [Deprecated]: syz.1.5656 (pid 25497) Use of int in maxseg socket option. [ 580.208392][T25497] Use struct sctp_assoc_value instead [ 580.327943][T25505] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 580.361036][T25507] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 580.625969][T25525] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2771 [ 580.723760][T25537] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 580.731875][T25537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.753403][T25536] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 581.008949][T25556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.292976][T25568] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 581.479351][T25594] tipc: Enabled bearer , priority 0 [ 581.519654][T25581] syzkaller0: entered promiscuous mode [ 581.533453][T25581] syzkaller0: entered allmulticast mode [ 581.676716][T25581] tipc: Resetting bearer [ 581.846485][T25580] tipc: Resetting bearer [ 581.866892][T25580] tipc: Disabling bearer [ 583.887690][T25643] __nla_validate_parse: 6 callbacks suppressed [ 583.887716][T25643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5700'. [ 583.920763][T25643] netlink: 'syz.0.5700': attribute type 7 has an invalid length. [ 583.961503][T25643] netlink: 'syz.0.5700': attribute type 8 has an invalid length. [ 584.004431][T25643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5700'. [ 584.101601][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 584.162045][T25664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 584.196372][T25661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5705'. [ 584.304700][ T1114] tipc: Subscription rejected, illegal request [ 584.366049][T25679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5711'. [ 584.421823][T25681] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}µâëÓÒS7\mgÆíãÒ’?æNêéZe·„zöº÷ [ 584.462840][T25690] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 584.627483][T25695] pimreg3: entered allmulticast mode [ 584.648031][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.688453][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.699156][T25697] syzkaller0: entered promiscuous mode [ 584.707026][T25697] syzkaller0: entered allmulticast mode [ 584.716129][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.726574][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.746570][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.757125][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.985718][T25723] netlink: del zone limit has 4 unknown bytes [ 585.268053][T25745] syzkaller0: entered promiscuous mode [ 585.274695][T25745] syzkaller0: entered allmulticast mode [ 586.183175][T25829] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 586.195843][T25829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.792722][T25868] x_tables: duplicate underflow at hook 2 [ 586.812209][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 586.964450][T25880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.069643][T25884] bond11: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 587.118748][T25884] bond11 (unregistering): Released all slaves [ 587.155097][T25890] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 587.329152][T25907] xt_hashlimit: size too large, truncated to 1048576 [ 587.659125][T25925] netlink: 'syz.1.5783': attribute type 10 has an invalid length. [ 587.676485][T25920] netlink: 'syz.2.5781': attribute type 1 has an invalid length. [ 588.076661][T25940] tipc: Enabling of bearer rejected, already enabled [ 588.246006][T25950] tipc: Enabled bearer , priority 0 [ 588.282567][T25950] syzkaller0: entered promiscuous mode [ 588.288087][T25950] syzkaller0: entered allmulticast mode [ 588.309972][T25954] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 588.329595][T25954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.350925][T25950] tipc: Resetting bearer [ 588.403247][T25954] syzkaller1: entered promiscuous mode [ 588.408760][T25954] syzkaller1: entered allmulticast mode [ 588.418259][T25949] tipc: Resetting bearer [ 588.431182][T25963] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 588.439333][T25964] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 588.468854][T25949] tipc: Disabling bearer [ 588.702657][T25982] netlink: 'syz.2.5798': attribute type 21 has an invalid length. [ 588.710546][T25983] netlink: 'syz.2.5798': attribute type 21 has an invalid length. [ 588.710573][T25983] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.864557][T25981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.981117][T25993] __nla_validate_parse: 48 callbacks suppressed [ 588.981139][T25993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5800'. [ 589.050556][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'. [ 589.081243][T26004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5802'. [ 589.121509][T26004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5802'. [ 589.138242][T26007] pim6reg: left allmulticast mode [ 589.343347][T26016] bond11: option miimon: invalid value (18446744073709551585) [ 589.353873][T26016] bond11: option miimon: allowed values 0 - 2147483647 [ 589.377014][T26016] bond11 (unregistering): Released all slaves [ 589.455253][T26028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5811'. [ 589.562466][T26026] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 589.587475][T26026] bond7 (unregistering): Released all slaves [ 589.623713][T26031] tipc: Enabling of bearer rejected, already enabled [ 589.769841][T26051] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 589.832133][T26050] ip6tnl0: Caught tx_queue_len zero misconfig [ 590.061723][T26067] Cannot find del_set index 4 as target [ 590.433077][T26094] IPVS: set_ctl: invalid protocol: 20443 224.0.0.2:20002 [ 590.495165][T26094] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5831'. [ 590.894966][T26123] syzkaller0: entered promiscuous mode [ 590.976836][T26123] syzkaller0: entered allmulticast mode [ 591.242667][T26136] siw: device registration error -23 [ 591.401972][T26115] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5834'. [ 591.556564][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'. [ 591.573354][T26146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5845'. [ 591.640014][T26146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 591.647283][T26149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.670052][T26146] gretap1: entered promiscuous mode [ 591.687742][T26146] gretap1: entered allmulticast mode [ 591.694703][T26151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5850'. [ 591.882188][T26164] IPVS: sed: FWM 3 0x00000003 - no destination available [ 591.889830][T26163] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 591.970548][T26177] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) ! [ 592.051459][T26167] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 592.058739][T26167] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 592.109752][T26184] IPv6: sit2: Disabled Multicast RS [ 592.298046][T26197] tipc: Enabled bearer , priority 0 [ 592.305905][T26196] tipc: Enabling of bearer rejected, already enabled [ 592.332023][T26196] syzkaller0: entered promiscuous mode [ 592.346701][T26196] syzkaller0: entered allmulticast mode [ 592.464195][T26196] tipc: Resetting bearer [ 592.487473][T26196] syzkaller0: tun_net_xmit 90 [ 592.492266][T26196] syzkaller0: tun_net_xmit 90 [ 592.532510][T26195] tipc: Resetting bearer [ 592.588484][T26195] tipc: Disabling bearer [ 592.959813][T26231] IPVS: persistence engine module ip_vs_pe_À not found [ 593.300848][T26250] syzkaller0: entered promiscuous mode [ 593.306446][T26250] syzkaller0: entered allmulticast mode [ 595.686638][T26283] __nla_validate_parse: 3 callbacks suppressed [ 595.686656][T26283] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5881'. [ 595.836219][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5883'. [ 595.916193][T26296] netlink: 'syz.2.5885': attribute type 39 has an invalid length. [ 595.975002][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5887'. [ 596.781403][T26345] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 596.786160][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5905'. [ 596.906941][T26355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5906'. [ 596.971521][T26345] 8021q: adding VLAN 0 to HW filter on device bond15 [ 597.038533][T26360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5907'. [ 597.061181][T26353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5904'. [ 597.082921][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5907'. [ 597.284673][T26369] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.291930][T26369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.299497][T26369] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.306730][T26369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.329259][T26369] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.340283][T26369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.392712][T26370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.427105][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.439534][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.449692][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.468340][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.476335][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.574225][T26375] wg1 speed is unknown, defaulting to 1000 [ 597.584299][T26375]  speed is unknown, defaulting to 1000 [ 597.719342][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 597.745372][T26390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5914'. [ 597.769757][T26393] openvswitch: netlink: Message has 4 unknown bytes. [ 597.801961][T26390] geneve4: entered promiscuous mode [ 597.807472][T26390] geneve4: entered allmulticast mode [ 597.826916][T25758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.949178][T25758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.976199][T26400] delete_channel: no stack [ 597.999394][T25758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.059989][T26404] team0: Device wireguard2 is of different type [ 598.095104][T26375] chnl_net:caif_netlink_parms(): no params data found [ 598.208341][T26375] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.228045][T26375] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.246077][T26375] bridge_slave_0: entered allmulticast mode [ 598.258016][T26375] bridge_slave_0: entered promiscuous mode [ 598.279534][T26375] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.291158][T26375] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.298988][T26375] bridge_slave_1: entered allmulticast mode [ 598.307263][T26375] bridge_slave_1: entered promiscuous mode [ 598.318305][T26412] sctp: [Deprecated]: syz.2.5919 (pid 26412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.318305][T26412] Use struct sctp_sack_info instead [ 598.363549][T26375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.377869][T26375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.524902][T26375] team0: Port device team_slave_0 added [ 598.528897][T26419] netlink: 'syz.1.5921': attribute type 83 has an invalid length. [ 598.534238][T26375] team0: Port device team_slave_1 added [ 598.562228][T26420] syzkaller0: entered promiscuous mode [ 598.568162][T26420] syzkaller0: entered allmulticast mode [ 598.641895][T26375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.649084][T26375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.676446][T26375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.696069][T26375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.703571][T26375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.730976][T26375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.794363][T26428] pim6reg1: entered promiscuous mode [ 598.799801][T26428] pim6reg1: entered allmulticast mode [ 598.873220][T26375] hsr_slave_0: entered promiscuous mode [ 598.880745][T26375] hsr_slave_1: entered promiscuous mode [ 599.069089][T26447] IPVS: set_ctl: invalid protocol: 108 172.30.0.4:20004 [ 599.159556][T26375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.253103][T26375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.283409][T26457] tc_dump_action: action bad kind [ 599.288766][T26458] tc_dump_action: action bad kind [ 599.318937][T26375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.394185][T26375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 599.433238][T26467] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 599.532254][ T5833] Bluetooth: hci0: command tx timeout [ 599.627922][T26375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.643711][T26375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.655381][T26375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 599.666874][T26375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 599.739767][T26485] Bluetooth: MGMT ver 1.23 [ 599.849626][T26375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.885491][T26375] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.899728][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.906961][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.938307][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.945582][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.088515][T26502] netlink: 'syz.1.5947': attribute type 1 has an invalid length. [ 600.106088][T26502] netlink: 'syz.1.5947': attribute type 1 has an invalid length. [ 600.332260][T26375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.849885][T26375] veth0_vlan: entered promiscuous mode [ 600.867057][T26375] veth1_vlan: entered promiscuous mode [ 600.935188][T26547] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 600.936088][T26548] tipc: Enabling of bearer rejected, failed to enable media [ 600.957413][T26375] veth0_macvtap: entered promiscuous mode [ 600.968198][T26375] veth1_macvtap: entered promiscuous mode [ 600.987066][T26547] bond0: Caught tx_queue_len zero misconfig [ 601.015555][T26548] tipc: Enabled bearer , priority 0 [ 601.051959][T26375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.157812][T26375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.173503][T26548] tipc: Disabling bearer [ 601.187950][T26562] __nla_validate_parse: 1 callbacks suppressed [ 601.187969][T26562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5961'. [ 601.219136][T25771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.250587][T25771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.285700][T25771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.326374][T25771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.350898][T26566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5962'. [ 601.611913][ T5833] Bluetooth: hci0: command tx timeout [ 601.718367][T25762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.777291][T26591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5967'. [ 601.800611][T25762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.836025][T26593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5970'. [ 601.864475][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.886815][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.969586][T26597] netlink: 'syz.3.5972': attribute type 9 has an invalid length. [ 602.141519][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5975'. [ 602.250601][T26615] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5977'. [ 602.345321][T26619] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 602.371258][T26626] ipvlan3: entered promiscuous mode [ 602.425184][T26628] rdma_op ffff888059bf89f0 conn xmit_rdma 0000000000000000 [ 602.535669][T26634] : renamed from hsr0 (while UP) [ 603.143875][T26678] netlink: 'syz.0.5998': attribute type 10 has an invalid length. [ 603.234771][T26686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.248626][T26688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6003'. [ 603.261538][T26688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6003'. [ 603.293044][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6003'. [ 603.321110][T26688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6003'. [ 603.703134][ T5833] Bluetooth: hci0: command tx timeout [ 604.243932][T26758] erspan0: entered promiscuous mode [ 604.254965][T26758] vlan2: entered promiscuous mode [ 604.427421][T26766] vlan1: entered promiscuous mode [ 604.447088][T26766] bridge0: entered promiscuous mode [ 604.473796][T26777] netlink: 'syz.3.6030': attribute type 12 has an invalid length. [ 604.489051][T26777] netlink: 'syz.3.6030': attribute type 29 has an invalid length. [ 604.497563][T26768] netlink: 'syz.4.6028': attribute type 29 has an invalid length. [ 604.510443][T26776] netlink: 'syz.4.6028': attribute type 29 has an invalid length. [ 604.529827][T26766] openvswitch: netlink: Missing valid actions attribute. [ 604.540657][T26768] netlink: 'syz.4.6028': attribute type 29 has an invalid length. [ 604.549983][T26768] netlink: 'syz.4.6028': attribute type 29 has an invalid length. [ 604.559486][T26766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.119755][T26825] tipc: Enabled bearer , priority 0 [ 605.127712][T26825] syzkaller0: entered promiscuous mode [ 605.136830][T26825] syzkaller0: entered allmulticast mode [ 605.430339][T26846] netlink: 'syz.4.6047': attribute type 1 has an invalid length. [ 605.514174][T26853] delete_channel: no stack [ 605.772066][ T5833] Bluetooth: hci0: command tx timeout [ 605.928813][T26839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.941554][T26824] tipc: Resetting bearer [ 605.994308][T26824] tipc: Disabling bearer [ 606.139812][T26875] netlink: 'syz.3.6058': attribute type 64 has an invalid length. [ 606.993403][T26897] xt_limit: Overflow, try lower: 271964/0 [ 607.035587][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.057759][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.066982][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.078628][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.086787][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.115637][T26901] netlink: 'syz.1.6065': attribute type 1 has an invalid length. [ 608.036003][T26918] __nla_validate_parse: 48 callbacks suppressed [ 608.036023][T26918] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6068'. [ 608.052115][T26918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.127744][T26922] x_tables: duplicate entry at hook 1 [ 609.139379][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6069'. [ 609.141205][ T5846] Bluetooth: hci4: command tx timeout [ 609.156606][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6069'. [ 609.175895][T26919] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6068'. [ 609.186246][T26919] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6068'. [ 609.207651][T26919] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 609.264444][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6071'. [ 609.316456][T26895] wg1 speed is unknown, defaulting to 1000 [ 609.407442][T26895]  speed is unknown, defaulting to 1000 [ 609.612869][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6077'. [ 609.632415][T26947] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6078'. [ 609.799487][T26955] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 609.819849][T26961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6079'. [ 609.835309][T26955] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 610.024418][T26971] syzkaller0: entered promiscuous mode [ 610.031797][T26971] syzkaller0: entered allmulticast mode [ 610.111282][T26974] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6081'. [ 610.161917][T26895] chnl_net:caif_netlink_parms(): no params data found [ 610.279448][T26984] vlan0: entered allmulticast mode [ 610.285066][T26984] gretap0: entered allmulticast mode [ 610.635129][T26895] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.650721][T26895] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.658498][T26895] bridge_slave_0: entered allmulticast mode [ 610.670074][T26895] bridge_slave_0: entered promiscuous mode [ 610.681711][T26895] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.689094][T26895] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.703004][T26895] bridge_slave_1: entered allmulticast mode [ 610.712348][T26895] bridge_slave_1: entered promiscuous mode [ 610.791492][T26895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.816005][T26895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.946008][T26895] team0: Port device team_slave_0 added [ 610.965283][T26895] team0: Port device team_slave_1 added [ 611.047121][T26895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.064864][T26895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.092393][T26895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.120791][T26895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.132588][T26895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.177099][T26895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.210444][ T5846] Bluetooth: hci4: command tx timeout [ 611.338872][T26895] hsr_slave_0: entered promiscuous mode [ 611.346497][T26895] hsr_slave_1: entered promiscuous mode [ 611.354140][T26895] debugfs: 'hsr0' already exists in 'hsr' [ 611.361717][T26895] Cannot create hsr debugfs directory [ 611.744354][T27056] syzkaller0: entered promiscuous mode [ 611.769084][T27056] syzkaller0: entered allmulticast mode [ 611.933635][T26895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.945354][T26895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.976425][T27075] batadv_slave_1: entered promiscuous mode [ 611.982643][T27075] batadv_slave_1: entered allmulticast mode [ 611.989612][T27075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.062481][T26895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.073597][T26895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.172884][T27082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.233554][T26895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.242175][T27086] netlink: 'syz.4.6109': attribute type 1 has an invalid length. [ 612.244433][T26895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.296106][T27087] dvmrp8: entered allmulticast mode [ 612.336941][T27086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.346687][T27086] bond1: (slave bond2): making interface the new active one [ 612.354706][T27086] bond1: (slave bond2): Enslaving as an active interface with an up link [ 612.377558][T26895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.388598][T26895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.410573][T27087] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 612.780503][T26895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 612.806977][T27116] Cannot find add_set index 0 as target [ 612.820923][T26895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 612.822192][T27116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.857967][T27116] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 612.883657][T26895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 612.926986][T26895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.247439][T26895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.291837][ T5846] Bluetooth: hci4: command tx timeout [ 613.344866][T27148] __nla_validate_parse: 41 callbacks suppressed [ 613.344889][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6124'. [ 613.353125][T26895] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.396044][T25759] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.403255][T25759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.417650][T27156] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 613.469093][T25759] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.476360][T25759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.493140][T27156] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 613.503734][T27148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6124'. [ 613.550267][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6124'. [ 613.559955][T27156] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 613.569078][T27156] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 613.699824][T27165] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 613.726688][T27165] bond12 (unregistering): Released all slaves [ 613.822478][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6130'. [ 613.887510][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6130'. [ 613.967492][T27180] SET target dimension over the limit! [ 614.097976][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6135'. [ 614.309657][T26895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.510586][T26895] veth0_vlan: entered promiscuous mode [ 614.545569][T26895] veth1_vlan: entered promiscuous mode [ 614.619531][T26895] veth0_macvtap: entered promiscuous mode [ 614.622812][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 614.649936][T26895] veth1_macvtap: entered promiscuous mode [ 614.691003][T26895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.714713][T26895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.744286][T25759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.757718][T25759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.777358][T25759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.799426][T25759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.979803][T25762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.015672][T25762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.096876][T25762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.120441][T25762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.370945][ T5846] Bluetooth: hci4: command tx timeout [ 615.443684][T27255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6059'. [ 615.674501][T27261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6153'. [ 615.825366][T27261] netlink: 'syz.1.6153': attribute type 1 has an invalid length. [ 616.093433][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.104905][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.116264][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.126006][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.140965][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.416957][T25757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.502869][T27272] wg1 speed is unknown, defaulting to 1000 [ 616.535867][T25757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.575810][T27272]  speed is unknown, defaulting to 1000 [ 616.663768][T25757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.687884][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6173'. [ 617.905173][T25757] bond8 (unregistering): (slave gretap1): Releasing active interface [ 618.034903][T25757] dvmrp8 (unregistering): left allmulticast mode [ 618.260625][ T5833] Bluetooth: hci3: command tx timeout [ 618.746630][T25757] bond1 (unregistering): (slave bond2): Releasing backup interface [ 618.755478][T25757] bond1 (unregistering): Released all slaves [ 618.886749][T25757] bond2 (unregistering): Released all slaves [ 619.021956][T25757] bond3 (unregistering): Released all slaves [ 619.037643][T25757] bond0 (unregistering): Released all slaves [ 619.162471][T25757] bond4 (unregistering): Released all slaves [ 619.279405][T25757] bond5 (unregistering): Released all slaves [ 619.293189][T25757] bond6 (unregistering): Released all slaves [ 619.307038][T25757] bond7 (unregistering): Released all slaves [ 619.323914][T25757] bond8 (unregistering): Released all slaves [ 619.442280][T25757] bond9 (unregistering): Released all slaves [ 619.561065][T25757] bond10 (unregistering): Released all slaves [ 619.574837][T25757] bond11 (unregistering): Released all slaves [ 619.693897][T25757] bond12 (unregistering): (slave wireguard0): Releasing backup interface [ 619.703180][T25757] wireguard0: left promiscuous mode [ 619.709977][T25757] bond12 (unregistering): Released all slaves [ 619.819046][T25757] bond13 (unregistering): (slave wireguard1): Releasing backup interface [ 619.827698][T25757] wireguard1: left promiscuous mode [ 619.835076][T25757] bond13 (unregistering): Released all slaves [ 619.953189][T25757] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 619.964469][T25757] bond14 (unregistering): Released all slaves [ 620.075141][T25757] bond15 (unregistering): Released all slaves [ 620.102926][T27272] chnl_net:caif_netlink_parms(): no params data found [ 620.330883][ T5833] Bluetooth: hci3: command tx timeout [ 620.379305][T27380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.397883][T25757] tipc: Disabling bearer [ 620.406469][T25757] tipc: Left network mode [ 620.828749][T27272] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.844934][T27272] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.852487][T27272] bridge_slave_0: entered allmulticast mode [ 620.872497][T27272] bridge_slave_0: entered promiscuous mode [ 620.897242][T27272] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.923799][T27272] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.950867][T27272] bridge_slave_1: entered allmulticast mode [ 620.968143][T27272] bridge_slave_1: entered promiscuous mode [ 621.045830][T27426] __nla_validate_parse: 1 callbacks suppressed [ 621.045850][T27426] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6189'. [ 621.092754][T27422] veth1_macvtap: left promiscuous mode [ 621.184015][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6193'. [ 621.187544][T27272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.253598][T27272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.302369][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6195'. [ 621.305397][T27437] netlink: 'syz.3.6194': attribute type 1 has an invalid length. [ 621.311912][T27439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6195'. [ 621.364748][T27272] team0: Port device team_slave_0 added [ 621.368153][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6195'. [ 621.387188][T27439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6195'. [ 621.401438][T27272] team0: Port device team_slave_1 added [ 621.417736][T25757] hsr_slave_0: left promiscuous mode [ 621.430978][T25757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.442073][T25757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.459798][T25757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.480550][T25757] vlan0: left promiscuous mode [ 621.484411][T27444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6196'. [ 621.499416][T27444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'. [ 621.923646][T25757] team0 (unregistering): Port device team_slave_1 removed [ 621.970027][T25757] team0 (unregistering): Port device team_slave_0 removed [ 622.306179][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6197'. [ 622.318083][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6197'. [ 622.410606][ T5833] Bluetooth: hci3: command tx timeout [ 622.428899][T27272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.443419][T27272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.477842][T27272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.501113][T27272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.508691][T27272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.536326][T27272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.610714][T25763] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.652161][T25763] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.819521][T25763] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.875496][T25763] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.893548][T27272] hsr_slave_0: entered promiscuous mode [ 622.902118][T27272] hsr_slave_1: entered promiscuous mode [ 622.908711][T27272] debugfs: 'hsr0' already exists in 'hsr' [ 622.914826][T27272] Cannot create hsr debugfs directory [ 623.141875][T25757] IPVS: stop unused estimator thread 0... [ 623.324898][T27485] bridge11: entered promiscuous mode [ 623.330415][T27485] bridge11: entered allmulticast mode [ 623.864574][T27508] IPVS: set_ctl: invalid protocol: 44 172.20.20.61:20000 [ 624.030029][T27272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 624.047537][T27514] --map-set only usable from mangle table [ 624.075303][T27272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 624.129469][T27272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 624.198009][T27517] bond3: Removing last arp target with arp_interval on [ 624.216626][T27272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.377981][T27535] netlink: 'syz.4.6214': attribute type 29 has an invalid length. [ 624.389206][T27535] netlink: 'syz.4.6214': attribute type 29 has an invalid length. [ 624.491447][ T5833] Bluetooth: hci3: command tx timeout [ 624.524376][T27272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.555866][T27272] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.593059][T25759] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.600273][T25759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.642385][T25759] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.649572][T25759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.136856][T27578] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 625.165937][T27578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.278493][T27272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.410025][T27272] veth0_vlan: entered promiscuous mode [ 625.438011][T27272] veth1_vlan: entered promiscuous mode [ 625.473716][ T5833] block nbd3: Receive control failed (result -32) [ 625.502527][T27272] veth0_macvtap: entered promiscuous mode [ 625.525950][T27272] veth1_macvtap: entered promiscuous mode [ 625.575076][T27272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.587335][T27272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.602802][T25762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.633920][T25762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.667035][T25762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.680654][T25762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.716803][T27618] x_tables: duplicate underflow at hook 1 [ 625.866223][T27628] Unknown options in mask b7f2 [ 625.909579][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.927973][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.993648][T25757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.023470][T25757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.092035][T27632] __nla_validate_parse: 13 callbacks suppressed [ 626.092054][T27632] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6241'. [ 626.163083][T27639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6243'. [ 626.192045][T27644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6243'. [ 626.238397][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6150'. [ 626.771535][T27657] tipc: Started in network mode [ 626.776463][T27657] tipc: Node identity 6ac7d0ade88b, cluster identity 4711 [ 626.794348][T27657] tipc: Enabled bearer , priority 0 [ 626.852551][T27657] syzkaller0: entered promiscuous mode [ 626.858076][T27657] syzkaller0: entered allmulticast mode [ 626.952086][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 626.964483][T27657] tipc: Resetting bearer [ 626.977357][T27657] syzkaller0: tun_net_xmit 90 [ 626.982163][T27657] syzkaller0: tun_net_xmit 90 [ 626.989642][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.008556][T27656] tipc: Resetting bearer [ 627.017546][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.031902][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.048550][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.059153][T27656] tipc: Disabling bearer [ 627.088067][T27674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6254'. [ 627.110071][T27674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6254'. [ 627.124134][T27672] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 627.163890][T27667] wg1 speed is unknown, defaulting to 1000 [ 627.175682][T27667]  speed is unknown, defaulting to 1000 [ 627.263555][T27677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6255'. [ 627.287190][T27676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6255'. [ 627.365804][T27684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6258'. [ 627.440008][T27684] netlink: 'syz.0.6258': attribute type 7 has an invalid length. [ 627.457342][T27684] netlink: 'syz.0.6258': attribute type 8 has an invalid length. [ 627.465816][T27684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6258'. [ 627.483587][T27691] block nbd4: Unsupported socket: should be TCP or UNIX. [ 627.542032][T27689] batadv0: entered promiscuous mode [ 627.550015][T27693] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 627.562776][T27693] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 627.578031][T27694] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 627.621273][T27693] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 627.673821][T27667] chnl_net:caif_netlink_parms(): no params data found [ 627.833207][T27667] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.841132][T27667] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.849557][T27667] bridge_slave_0: entered allmulticast mode [ 627.858685][T27667] bridge_slave_0: entered promiscuous mode [ 627.869678][T27667] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.880036][T27667] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.887740][T27667] bridge_slave_1: entered allmulticast mode [ 627.895041][T27667] bridge_slave_1: entered promiscuous mode [ 627.937434][T27667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.956102][T27667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.008366][T27667] team0: Port device team_slave_0 added [ 628.018830][T27667] team0: Port device team_slave_1 added [ 628.073070][T27667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.082960][T27667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.112100][T27667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.127416][T27667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.135377][T27667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.165811][T27667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.268928][T27686] batadv0: left promiscuous mode [ 628.293360][T27667] hsr_slave_0: entered promiscuous mode [ 628.300904][T27667] hsr_slave_1: entered promiscuous mode [ 628.337083][T27667] debugfs: 'hsr0' already exists in 'hsr' [ 628.350238][T27667] Cannot create hsr debugfs directory [ 628.722942][T27750] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 628.737070][T27667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.754924][T27667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.912400][T27667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.925481][T27667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.978688][T27766] syz_tun: entered allmulticast mode [ 629.084931][T27667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.112305][T27667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.133074][ T5833] Bluetooth: hci2: command tx timeout [ 629.224689][T27667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.235482][T27667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.298030][T27782] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 631.213374][ T5833] Bluetooth: hci2: command tx timeout [ 631.354819][T27667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.404436][T27667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.433096][T27667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.465587][T27667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 631.729544][T27829] __nla_validate_parse: 6 callbacks suppressed [ 631.729562][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.753560][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.759577][T27834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6300'. [ 631.765179][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.782577][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.828610][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.843292][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6298'. [ 631.867549][T27667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.135555][T27667] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.208178][T25759] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.216401][T25759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.280928][T25759] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.288165][T25759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.317667][T27855] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6305'. [ 632.343078][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 632.566601][T27864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6307'. [ 632.659673][T27876] netlink: 'syz.4.6309': attribute type 1 has an invalid length. [ 633.106908][T27667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.225405][T27898] xt_CT: No such helper "syz1" [ 633.291095][ T5833] Bluetooth: hci2: command tx timeout [ 633.356165][T27667] veth0_vlan: entered promiscuous mode [ 633.400161][T27667] veth1_vlan: entered promiscuous mode [ 633.489349][T27667] veth0_macvtap: entered promiscuous mode [ 633.528637][T27667] veth1_macvtap: entered promiscuous mode [ 633.598895][T27667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.655324][T27667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.687322][T27925] netlink: 'syz.4.6322': attribute type 24 has an invalid length. [ 633.788078][T25759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.809915][T25759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.842436][T25759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.866865][T25759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.891663][T27933] netlink: 'syz.4.6325': attribute type 4 has an invalid length. [ 634.073931][T27949] batman_adv: batadv0: Removing interface: dummy0 [ 634.184862][T25759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.220451][T25759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.288880][T25763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.303097][T25763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.682397][T27409] udevd[27409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 634.815484][ T5930] page_pool_release_retry() stalled pool shutdown: id 109, 1 inflight 60 sec [ 635.062809][T11358] IPVS: starting estimator thread 0... [ 635.160427][T28025] IPVS: using max 32 ests per chain, 76800 per kthread [ 635.365391][T28031] netlink: 'syz.1.6348': attribute type 2 has an invalid length. [ 635.380901][ T5833] Bluetooth: hci2: command tx timeout [ 636.144718][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 636.157265][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 636.168814][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 636.185966][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 636.196593][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 636.208575][T28059] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 636.424117][T25752] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 636.594836][T25752] ` (unregistering): (slave geneve1): Releasing backup interface [ 636.603711][T25752] geneve1 (unregistering): left promiscuous mode [ 636.883406][T25752] bond3 (unregistering): (slave bridge5): Releasing active interface [ 637.204415][T25752] bond6 (unregistering): (slave bridge12): Releasing backup interface [ 637.215608][T25752] bridge12 (unregistering): left promiscuous mode [ 637.389738][T25752] ` (unregistering): left promiscuous mode [ 637.413303][T25752] ` (unregistering): Released all slaves [ 637.427717][T25752] bond1 (unregistering): Released all slaves [ 637.555135][T25752] bond2 (unregistering): Released all slaves [ 637.567617][T25752] bond3 (unregistering): Released all slaves [ 637.583151][T25752] bond0 (unregistering): Released all slaves [ 637.596807][T25752] bond4 (unregistering): Released all slaves [ 637.613864][T25752] bond5 (unregistering): Released all slaves [ 637.735543][T25752] bond6 (unregistering): Released all slaves [ 637.769331][T17335] syz_tun (unregistering): left allmulticast mode [ 637.783867][T28067] syzkaller0: entered promiscuous mode [ 637.802563][T28067] syzkaller0: entered allmulticast mode [ 637.898477][T11359] wg1 speed is unknown, defaulting to 1000 [ 637.910432][T25752] 9: left promiscuous mode [ 637.915782][T11359] syz2: Port: 1 Link DOWN [ 637.931236][T28087] xt_hashlimit: size too large, truncated to 1048576 [ 638.027556][T28091] netlink: 'syz.1.6364': attribute type 25 has an invalid length. [ 638.037237][T28092] __nla_validate_parse: 10 callbacks suppressed [ 638.037256][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6366'. [ 638.043357][T28062] wg1 speed is unknown, defaulting to 1000 [ 638.062390][T25752] tipc: Disabling bearer [ 638.100998][T25752] tipc: Left network mode [ 638.139255][T28062]  speed is unknown, defaulting to 1000 [ 638.148215][T28094] tipc: Enabled bearer , priority 0 [ 638.192804][T28089] syzkaller0: entered promiscuous mode [ 638.199237][T28089] syzkaller0: entered allmulticast mode [ 638.225030][T28089] tipc: Resetting bearer [ 638.262988][ T5833] Bluetooth: hci5: command tx timeout [ 638.271524][T28088] tipc: Resetting bearer [ 638.322308][T28088] tipc: Disabling bearer [ 638.744786][T28122] ªªªªªªZ7nz>RAÌ: renamed from lo (while UP) [ 638.840094][T28126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6376'. [ 638.899208][T25752] hsr_slave_0: left promiscuous mode [ 638.911153][T25752] hsr_slave_1: left promiscuous mode [ 638.947744][T25752] veth0_macvtap: left promiscuous mode [ 638.955403][T25752] veth1_vlan: left promiscuous mode [ 639.874483][T25752] team0 (unregistering): Port device dummy0 removed [ 640.021263][T28062] chnl_net:caif_netlink_parms(): no params data found [ 640.149197][T28149] veth0: entered promiscuous mode [ 640.163049][T28147] veth0: left promiscuous mode [ 640.191730][T28156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6384'. [ 640.328326][T28062] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.340381][ T5833] Bluetooth: hci5: command tx timeout [ 640.357920][T28062] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.373526][T28062] bridge_slave_0: entered allmulticast mode [ 640.417319][T28062] bridge_slave_0: entered promiscuous mode [ 640.425330][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6389'. [ 640.455745][T28173] netlink: 'syz.4.6386': attribute type 10 has an invalid length. [ 640.506110][T28173] team0: Port device dummy0 added [ 640.517893][T28062] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.546069][T28062] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.551871][T28177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6392'. [ 640.562492][T28062] bridge_slave_1: entered allmulticast mode [ 640.567030][T28062] bridge_slave_1: entered promiscuous mode [ 640.705243][T28169] syzkaller1: entered promiscuous mode [ 640.711132][T28169] syzkaller1: entered allmulticast mode [ 640.811416][T28062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.846125][T28062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.972446][T28196] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6395'. [ 640.991934][T28062] team0: Port device team_slave_0 added [ 641.026387][T28062] team0: Port device team_slave_1 added [ 641.136757][T28062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.150265][T28062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.192006][T28062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.247555][T28062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.328998][T28062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.390314][T28062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.455543][T28210] netlink: 'syz.3.6400': attribute type 1 has an invalid length. [ 641.572687][T28217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'. [ 641.609059][T28198] lec:lec_atm_close: lec0: Shut down! [ 641.702164][T28220] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6402'. [ 641.887634][T28062] hsr_slave_0: entered promiscuous mode [ 641.899492][T28062] hsr_slave_1: entered promiscuous mode [ 641.931640][T28062] debugfs: 'hsr0' already exists in 'hsr' [ 641.937422][T28062] Cannot create hsr debugfs directory [ 641.964909][T28230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6405'. [ 641.974168][T28230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.989188][T28227] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6407'. [ 642.107183][T28233] tipc: Started in network mode [ 642.120803][T28233] tipc: Node identity ac14140f, cluster identity 4711 [ 642.155025][T28233] tipc: New replicast peer: 255.255.255.255 [ 642.195284][T28233] tipc: Enabled bearer , priority 10 [ 642.227453][T28246] netlink: 'syz.1.6409': attribute type 14 has an invalid length. [ 642.257010][T28232] tipc: Enabling of bearer rejected, already enabled [ 642.410501][ T5833] Bluetooth: hci5: command tx timeout [ 642.606542][T28062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.619041][T28062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.668870][T28281] veth0_to_team: entered promiscuous mode [ 642.902915][T28062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.918718][T28062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.958386][T28280] syzkaller1: entered promiscuous mode [ 642.984299][T28280] syzkaller1: entered allmulticast mode [ 643.045300][T28280] __nla_validate_parse: 8 callbacks suppressed [ 643.045318][T28280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6417'. [ 643.107089][T28062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.118902][T28062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 643.288359][T28310] netlink: 'syz.4.6425': attribute type 1 has an invalid length. [ 643.304673][T28062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.310696][ T855] tipc: Node number set to 2886997007 [ 643.316143][T28310] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6425'. [ 643.330998][T28062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 643.341613][T28310] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6425'. [ 643.783113][T28062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.818152][T28062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.857516][T28062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.901782][T28062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.929596][T28327]  speed is unknown, defaulting to 1000 [ 643.954025][T28323]  speed is unknown, defaulting to 1000 [ 644.334201][T28346] netlink: 'syz.3.6438': attribute type 4 has an invalid length. [ 644.347802][T28347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6438'. [ 644.385157][T28353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6436'. [ 644.501131][ T5833] Bluetooth: hci5: command tx timeout [ 644.773249][T28374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6442'. [ 644.837796][T28376] bond1: (slave bond_slave_1): Device is not our slave [ 644.845469][T28376] bond1: option active_slave: invalid value (bond_slave_1) [ 644.858058][T28376] bond1 (unregistering): Released all slaves [ 644.926714][T28389] netlink: 'syz.3.6446': attribute type 1 has an invalid length. [ 644.929626][T28387] macvlan1: entered allmulticast mode [ 645.026268][T28378] delete_channel: no stack [ 645.104069][T28062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.169594][T28062] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.223823][T28399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6449'. [ 645.243911][T12628] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.251107][T12628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.271545][T28405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.272909][T12628] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.284024][T28408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.287725][T12628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.427097][T28414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6453'. [ 645.614121][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'. [ 645.647971][T28427] netlink: 'syz.1.6455': attribute type 3 has an invalid length. [ 645.705459][T28433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.860089][T28441] bond0: option ad_select: unable to set because the bond device is up [ 645.897675][T28441] bond0: option ad_select: unable to set because the bond device is up [ 645.898202][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6460'. [ 645.908763][T28441] bond0: option ad_select: unable to set because the bond device is up [ 645.925035][T28441] bond0: option ad_select: unable to set because the bond device is up [ 645.951292][T28062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.976855][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.011787][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.030798][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.054144][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.094284][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.115514][T28062] veth0_vlan: entered promiscuous mode [ 646.123944][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.158986][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.205897][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.217000][T28062] veth1_vlan: entered promiscuous mode [ 646.234419][T28478] 8021q: VLANs not supported on lo [ 646.242824][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.253844][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.265426][T28474] netlink: 'syz.2.6465': attribute type 1 has an invalid length. [ 646.277086][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.304051][T25753] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.314815][T25753] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.332944][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.342704][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.366817][T25753] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.376260][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.386201][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.399172][T25753] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.415043][T28062] veth0_macvtap: entered promiscuous mode [ 646.428620][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.444236][T28062] veth1_macvtap: entered promiscuous mode [ 646.454532][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.468793][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.497617][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.512550][T28062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.524133][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.533775][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.550812][T28062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.563589][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.573659][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.588981][T25753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.612511][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.633039][T25753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.647543][T25753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.662624][T28441] bond0: option ad_select: unable to set because the bond device is up [ 646.717107][T28491] bond4 (unregistering): Released all slaves [ 646.750598][T25753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.955532][T28504] tipc: Started in network mode [ 646.962013][T28504] tipc: Node identity 160c646af3ca, cluster identity 4711 [ 646.974931][T28504] tipc: Enabled bearer , priority 0 [ 647.002539][T28508] syzkaller0: entered promiscuous mode [ 647.020665][T28508] syzkaller0: entered allmulticast mode [ 647.060674][T28514] xt_ecn: cannot match TCP bits for non-tcp packets [ 647.067516][T25753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.081898][T25753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.127555][T28503] tipc: Resetting bearer [ 647.156033][T28503] tipc: Disabling bearer [ 647.205845][T28000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.239877][T28000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.416736][T28527] tipc: Enabling of bearer rejected, failed to enable media [ 647.552396][T28533] IPVS: Scheduler module ip_vs_sip not found [ 647.587601][T28534] IPVS: Scheduler module ip_vs_sip not found [ 647.668068][T28547] netlink: 'syz.3.6483': attribute type 5 has an invalid length. [ 648.055993][T28562] __nla_validate_parse: 14 callbacks suppressed [ 648.056013][T28562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6489'. [ 648.111264][T28571] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6491'. [ 648.315738][T28585] netlink: 'syz.1.6495': attribute type 2 has an invalid length. [ 648.340637][T28585] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6495'. [ 648.483523][T28594] netlink: 'syz.1.6499': attribute type 2 has an invalid length. [ 648.540867][T28590] netlink: 808 bytes leftover after parsing attributes in process `syz.2.6497'. [ 648.750654][T28619] delete_channel: no stack [ 648.929331][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6509'. [ 648.943174][T28634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6509'. [ 648.976773][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6509'. [ 648.986994][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6509'. [ 649.083503][T28639] syzkaller0: entered promiscuous mode [ 649.089153][T28639] syzkaller0: entered allmulticast mode [ 649.198682][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6511'. [ 649.361540][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 649.636427][T28660] netlink: 'syz.4.6515': attribute type 39 has an invalid length. [ 650.028515][T28679] netlink: 'syz.0.6518': attribute type 1 has an invalid length. [ 651.804027][T28686] netlink: 'syz.3.6522': attribute type 19 has an invalid length. [ 651.986755][T28688] bond2: (slave bond_slave_1): Device is not our slave [ 652.001024][T28688] bond2: option active_slave: invalid value (bond_slave_1) [ 652.018500][T28688] bond2 (unregistering): Released all slaves [ 652.113299][T28695] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 652.135801][T28693] tipc: Enabled bearer , priority 0 [ 652.153583][T28693] syzkaller0: entered promiscuous mode [ 652.161881][T28693] syzkaller0: entered allmulticast mode [ 652.261486][T28693] tipc: Resetting bearer [ 652.274741][T28692] tipc: Resetting bearer [ 652.338576][T28692] tipc: Disabling bearer [ 652.353870][T28708] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 652.369140][T28718] bridge_slave_0: left allmulticast mode [ 652.375855][T28718] bridge_slave_0: left promiscuous mode [ 652.381905][T28718] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.409004][T28718] bridge_slave_1: left allmulticast mode [ 652.420628][T28718] bridge_slave_1: left promiscuous mode [ 652.427698][T28718] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.471735][T28718] bond0: (slave bond_slave_0): Releasing backup interface [ 652.487096][T28718] bond0: (slave bond_slave_1): Releasing backup interface [ 652.529543][T28718] team0: Failed to send options change via netlink (err -105) [ 652.543009][T28718] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 652.556735][T28718] team0: Port device team_slave_0 removed [ 652.569095][T28718] team0: Failed to send options change via netlink (err -105) [ 652.581376][T28718] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 652.592319][T28718] team0: Port device team_slave_1 removed [ 652.599185][T28718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.608146][T28718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.616728][T28739] netlink: 'syz.4.6537': attribute type 1 has an invalid length. [ 652.629668][T28718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.638610][T28718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.648261][T28718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 652.803217][T28747] netlink: 'syz.3.6540': attribute type 21 has an invalid length. [ 653.171254][T28760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.748223][T28783] nbd: must specify an index to disconnect [ 654.092704][T28813] sock: sock_timestamping_bind_phc: sock not bind to device [ 654.324792][T28829] __nla_validate_parse: 4 callbacks suppressed [ 654.324810][T28829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6569'. [ 654.746297][T28451] IPVS: starting estimator thread 0... [ 654.758173][T28856] tipc: Enabled bearer , priority 10 [ 654.775575][T28859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6577'. [ 654.840431][T28857] IPVS: using max 34 ests per chain, 81600 per kthread [ 654.946016][T28872] netlink: 'syz.3.6583': attribute type 6 has an invalid length. [ 655.049957][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'. [ 655.101831][T28878] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6586'. [ 655.316058][T28892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 655.429671][T28892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.456233][T28898] bond2: entered allmulticast mode [ 655.551663][T28898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6591'. [ 655.574060][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6595'. [ 655.639227][T28902] bond2: entered promiscuous mode [ 655.644921][T28898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 655.659332][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6596'. [ 655.705606][T28902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.852407][T28898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.870576][T28452] tipc: Node number set to 3854984298 [ 655.961511][T28929] netlink: 'syz.0.6598': attribute type 1 has an invalid length. [ 655.974343][T28929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6598'. [ 656.336991][T28959] netlink: 'syz.4.6607': attribute type 2 has an invalid length. [ 656.553366][T28978] bridge5: entered promiscuous mode [ 656.558616][T28978] bridge5: entered allmulticast mode [ 656.626190][T28978] team0: Port device bridge5 added [ 656.652233][T28986] bridge0: port 3(team0) entered blocking state [ 656.658674][T28986] bridge0: port 3(team0) entered disabled state [ 656.677984][T28986] team0: entered allmulticast mode [ 656.692178][T28986] team_slave_0: entered allmulticast mode [ 656.698011][T28986] team_slave_1: entered allmulticast mode [ 656.735065][T28986] dummy0: entered allmulticast mode [ 656.755232][T28986] team0: entered promiscuous mode [ 656.770860][T28986] team_slave_0: entered promiscuous mode [ 656.779665][T28986] team_slave_1: entered promiscuous mode [ 656.787770][T28986] dummy0: entered promiscuous mode [ 656.794169][T28986] bridge0: port 3(team0) entered blocking state [ 656.800574][T28986] bridge0: port 3(team0) entered forwarding state [ 656.965982][ T30] audit: type=1800 audit(1761849725.361:6): pid=28987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6615" name="memory.events" dev="tmpfs" ino=294 res=0 errno=0 [ 657.012781][T29005] netlink: 'syz.0.6619': attribute type 2 has an invalid length. [ 657.032078][T29005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.082188][T29008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.089482][T29008] IPv6: NLM_F_CREATE should be set when creating new route [ 657.106199][T29008] delete_channel: no stack [ 657.356760][T29004] delete_channel: no stack [ 657.465056][T29019] geneve2: entered promiscuous mode [ 657.490553][T29019] geneve2: entered allmulticast mode [ 657.505303][T12628] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 657.530911][T12628] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 657.580418][T12628] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 657.589399][T12628] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 657.641202][T29025] netlink: 'syz.3.6628': attribute type 1 has an invalid length. [ 657.688768][T29033] syzkaller1: entered promiscuous mode [ 657.707605][T29033] syzkaller1: entered allmulticast mode [ 658.256836][T29069] netlink: 'syz.4.6643': attribute type 12 has an invalid length. [ 658.406090][T29074] only policy match revision 0 supported [ 658.406111][T29074] unable to load match [ 658.875710][T29099] x_tables: duplicate underflow at hook 1 [ 660.022867][T29142] __nla_validate_parse: 17 callbacks suppressed [ 660.022886][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6667'. [ 660.072301][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6667'. [ 660.087539][T29144] syzkaller0: entered promiscuous mode [ 660.099675][T29144] syzkaller0: entered allmulticast mode [ 660.114037][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6667'. [ 660.226980][T29144] tipc: Started in network mode [ 660.232364][T29144] tipc: Node identity 86ac7161da5, cluster identity 4711 [ 660.241589][T29144] tipc: Enabled bearer , priority 0 [ 660.255741][T29141] tipc: Resetting bearer [ 660.310077][T29141] tipc: Disabling bearer [ 660.619207][T29177] netlink: 'syz.0.6678': attribute type 6 has an invalid length. [ 660.636530][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6680'. [ 660.752888][T29186] syzkaller0: entered promiscuous mode [ 660.764574][T29186] syzkaller0: entered allmulticast mode [ 661.151589][T29200] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6686'. [ 661.193482][T29200] netlink: 184648 bytes leftover after parsing attributes in process `syz.0.6686'. [ 661.271252][T29199] syz.0.6686: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 661.309223][T29199] CPU: 0 UID: 0 PID: 29199 Comm: syz.0.6686 Not tainted syzkaller #0 PREEMPT(full) [ 661.309251][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.309262][T29199] Call Trace: [ 661.309271][T29199] [ 661.309280][T29199] dump_stack_lvl+0x189/0x250 [ 661.309313][T29199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.309336][T29199] ? __pfx__printk+0x10/0x10 [ 661.309357][T29199] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 661.309381][T29199] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 661.309405][T29199] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 661.309431][T29199] warn_alloc+0x214/0x310 [ 661.309465][T29199] ? __pfx_warn_alloc+0x10/0x10 [ 661.309499][T29199] ? __get_vm_area_node+0x28f/0x300 [ 661.309523][T29199] ? nf_tables_newset+0x1330/0x2540 [ 661.309549][T29199] __vmalloc_node_range_noprof+0x690/0x12d0 [ 661.309605][T29199] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 661.309628][T29199] ? nf_tables_newset+0x1330/0x2540 [ 661.309662][T29199] ? rcu_is_watching+0x15/0xb0 [ 661.309683][T29199] ? nf_tables_newset+0x1330/0x2540 [ 661.309703][T29199] __kvmalloc_node_noprof+0x674/0x910 [ 661.309730][T29199] ? nf_tables_newset+0x1330/0x2540 [ 661.309755][T29199] ? nft_set_lookup+0x128/0x150 [ 661.309776][T29199] ? nft_hash_privsize+0x6f/0xf0 [ 661.309797][T29199] nf_tables_newset+0x1330/0x2540 [ 661.309833][T29199] ? __pfx_nf_tables_newset+0x10/0x10 [ 661.309876][T29199] ? __nla_parse+0x40/0x60 [ 661.309900][T29199] nfnetlink_rcv+0x11d9/0x2590 [ 661.309965][T29199] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 661.310005][T29199] ? ref_tracker_free+0x63a/0x7d0 [ 661.310055][T29199] ? __netlink_deliver_tap+0x807/0x850 [ 661.310082][T29199] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.310124][T29199] netlink_unicast+0x82f/0x9e0 [ 661.310154][T29199] ? __pfx_netlink_unicast+0x10/0x10 [ 661.310177][T29199] ? netlink_sendmsg+0x642/0xb30 [ 661.310190][T29199] ? skb_put+0x11b/0x210 [ 661.310209][T29199] netlink_sendmsg+0x805/0xb30 [ 661.310234][T29199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.310254][T29199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 661.310281][T29199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.310299][T29199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.310316][T29199] __sock_sendmsg+0x21c/0x270 [ 661.310351][T29199] ____sys_sendmsg+0x505/0x830 [ 661.310380][T29199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.310409][T29199] ? import_iovec+0x74/0xa0 [ 661.310435][T29199] ___sys_sendmsg+0x21f/0x2a0 [ 661.310457][T29199] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.310516][T29199] ? __fget_files+0x2a/0x420 [ 661.310532][T29199] ? __fget_files+0x3a0/0x420 [ 661.310559][T29199] __x64_sys_sendmsg+0x19b/0x260 [ 661.310580][T29199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.310613][T29199] ? do_syscall_64+0xbe/0xfa0 [ 661.310648][T29199] do_syscall_64+0xfa/0xfa0 [ 661.310668][T29199] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.310691][T29199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.310708][T29199] ? clear_bhb_loop+0x60/0xb0 [ 661.310730][T29199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.310747][T29199] RIP: 0033:0x7fe6f438efc9 [ 661.310764][T29199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.310779][T29199] RSP: 002b:00007fe6f51d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.310799][T29199] RAX: ffffffffffffffda RBX: 00007fe6f45e5fa0 RCX: 00007fe6f438efc9 [ 661.310812][T29199] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 661.310823][T29199] RBP: 00007fe6f4411f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.310835][T29199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.310845][T29199] R13: 00007fe6f45e6038 R14: 00007fe6f45e5fa0 R15: 00007fffb739a808 [ 661.310878][T29199] [ 661.693153][T29199] Mem-Info: [ 661.715609][T29199] active_anon:7373 inactive_anon:0 isolated_anon:0 [ 661.715609][T29199] active_file:3471 inactive_file:40141 isolated_file:0 [ 661.715609][T29199] unevictable:768 dirty:111 writeback:0 [ 661.715609][T29199] slab_reclaimable:13419 slab_unreclaimable:134500 [ 661.715609][T29199] mapped:32100 shmem:4218 pagetables:1020 [ 661.715609][T29199] sec_pagetables:0 bounce:0 [ 661.715609][T29199] kernel_misc_reclaimable:0 [ 661.715609][T29199] free:1286001 free_pcp:10287 free_cma:0 [ 661.763473][T29199] Node 0 active_anon:29392kB inactive_anon:0kB active_file:13884kB inactive_file:160360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128400kB dirty:444kB writeback:0kB shmem:15336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17240kB pagetables:3924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 661.796789][T29199] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 661.827121][T29199] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.859799][T29199] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 661.865912][T29199] Node 0 DMA32 free:1233204kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29392kB inactive_anon:0kB active_file:13884kB inactive_file:160360kB unevictable:1536kB writepending:444kB zspages:0kB present:3129332kB managed:2565172kB mlocked:0kB bounce:0kB free_pcp:26348kB local_pcp:14132kB free_cma:0kB [ 661.899565][T29199] lowmem_reserve[]: 0 0 0 0 0 [ 661.904463][T29199] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.936481][T29199] lowmem_reserve[]: 0 0 0 0 0 [ 661.941377][T29199] Node 1 Normal free:3895440kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15480kB local_pcp:6228kB free_cma:0kB [ 661.999514][T29199] lowmem_reserve[]: 0 0 0 0 0 [ 662.004876][T29199] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 662.018702][T29199] Node 0 DMA32: 397*4kB (UME) 877*8kB (UME) 530*16kB (UME) 200*32kB (UME) 62*64kB (UME) 83*128kB (UME) 42*256kB (UME) 23*512kB (UME) 7*1024kB (UE) 5*2048kB (UME) 282*4096kB (M) = 1233084kB [ 662.038120][T29199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 662.053406][T29199] Node 1 Normal: 176*4kB (UE) 42*8kB (UME) 40*16kB (UME) 130*32kB (UME) 41*64kB (UME) 5*128kB (UM) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895440kB [ 662.071801][T29199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.081593][T29199] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.091476][T29199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.101149][T29199] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.110726][T29199] 46577 total pagecache pages [ 662.115907][T29199] 0 pages in swap cache [ 662.120075][T29199] Free swap = 124996kB [ 662.124478][T29199] Total swap = 124996kB [ 662.128714][T29199] 2097051 pages RAM [ 662.132666][T29199] 0 pages HighMem/MovableOnly [ 662.137609][T29199] 424116 pages reserved [ 662.141916][T29199] 0 pages cma reserved [ 662.335905][T29240] rdma_op ffff88807c5f69f0 conn xmit_rdma 0000000000000000 [ 662.492672][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 662.514706][T29246] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6700'. [ 662.530271][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 662.726252][T29264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.733653][T29264] IPv6: NLM_F_CREATE should be set when creating new route [ 662.745120][T29264] xt_cgroup: path and classid specified [ 662.954708][T29280] bridge_slave_0: left allmulticast mode [ 663.005475][T29280] bridge_slave_0: left promiscuous mode [ 663.029650][T29280] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.054793][T29292] vcan0: tx drop: invalid sa for name 0x2000000000000000 [ 663.066015][T29280] bridge_slave_1: left allmulticast mode [ 663.075819][T29280] bridge_slave_1: left promiscuous mode [ 663.086094][T29280] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.108426][T29280] bond0: (slave bond_slave_0): Releasing backup interface [ 663.122927][T29280] bond0: (slave bond_slave_1): Releasing backup interface [ 663.153589][T29280] team0: Port device team_slave_0 removed [ 663.167656][T29280] team0: Port device team_slave_1 removed [ 663.176789][T29280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.185414][T29280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.196213][T29280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.204646][T29280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.215849][T29280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 663.348336][T29307] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 663.372694][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6717'. [ 663.458406][T29316] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 663.466634][T29309] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 663.478629][T29309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.492541][T29316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.689486][T29329] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 663.966902][T29346] nbd: couldn't find device at index 2 [ 664.037215][T29348] IPVS: ip_vs_add_dest(): server weight less than zero [ 664.570595][T29377] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 664.642029][T29379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.123843][T29411] __nla_validate_parse: 10 callbacks suppressed [ 665.123861][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6747'. [ 665.334854][T29428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6752'. [ 665.431750][T29431] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6753'. [ 665.453537][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6754'. [ 665.593556][T29445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6757'. [ 665.859733][T29454] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 665.869997][T29454] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 665.900553][T29454] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 666.014480][T29467] netlink: 'syz.0.6763': attribute type 10 has an invalid length. [ 666.065950][T29467] team0: Device veth1_macvtap failed to register rx_handler [ 666.333491][T29486] netlink: 'syz.0.6772': attribute type 3 has an invalid length. [ 666.448825][T12634] syzkaller0: tun_net_xmit 76 [ 666.459731][T12634] syzkaller0: tun_net_xmit 48 [ 666.469195][T29490] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 666.475509][T27992] syzkaller0: tun_net_xmit 76 [ 666.499080][T29490] syzkaller0: Linktype set failed because interface is up [ 666.508724][T27992] syzkaller0: tun_net_xmit 76 [ 666.576684][T29502] x_tables: duplicate underflow at hook 2 [ 666.840464][T27992] syzkaller0: tun_net_xmit 76 [ 667.026829][T29530] netlink: 'syz.2.6782': attribute type 1 has an invalid length. [ 667.051096][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 667.248623][T29530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.405337][T29545] netlink: 'syz.1.6786': attribute type 1 has an invalid length. [ 667.532622][T29537] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 667.559180][T29538] bond2: (slave ip6gretap1): making interface the new active one [ 667.567732][T28455] syzkaller0: tun_net_xmit 76 [ 667.574481][T29538] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 667.887813][T29549] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 667.940165][T29549] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 667.970840][T29549] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 668.219191][T29566] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6790'. [ 670.782156][T29569] IPv6: sit1: Disabled Multicast RS [ 670.918387][T29582] netlink: 'syz.4.6795': attribute type 1 has an invalid length. [ 670.927133][T29582] netlink: 'syz.4.6795': attribute type 3 has an invalid length. [ 670.937541][T29580] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.6794'. [ 670.946823][T29582] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6795'. [ 671.074044][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6795'. [ 671.111926][T29582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'. [ 671.123630][T29597] veth3: entered allmulticast mode [ 671.529716][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 671.661914][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6811'. [ 671.672564][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6811'. [ 671.827947][T29627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.840688][T29627] bond0: (slave bond4): Enslaving as an active interface with an up link [ 672.365967][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6822'. [ 672.375420][T29683] chnl_net:caif_netlink_parms(): no params data found [ 672.421387][T29673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6822'. [ 672.527011][T29673] chnl_net:caif_netlink_parms(): no params data found [ 672.615469][T29694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.766825][T29709] xt_hashlimit: overflow, try lower: 3/0 [ 672.989375][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6833'. [ 673.104984][T29727] tipc: Enabled bearer , priority 0 [ 673.167625][T29727] syzkaller0: entered promiscuous mode [ 673.173585][T29727] syzkaller0: entered allmulticast mode [ 673.179991][T29727] tipc: Resetting bearer [ 673.222215][T29733] tipc: Enabling of bearer rejected, failed to enable media [ 673.247109][T29725] tipc: Resetting bearer [ 675.034356][T29725] tipc: Disabling bearer [ 675.335648][T12629] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.532025][ T30] audit: type=1800 audit(1761849743.931:7): pid=29782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6851" name="memory.events" dev="tmpfs" ino=402 res=0 errno=0 [ 675.758033][T29802] ipt_ECN: cannot use operation on non-tcp rule [ 675.767741][T29801] ipt_ECN: cannot use operation on non-tcp rule [ 675.799125][T29789]  speed is unknown, defaulting to 1000 [ 676.199119][T29829] smc: net device vcan0 applied user defined pnetid SYZ1 [ 676.804875][T29867] __nla_validate_parse: 7 callbacks suppressed [ 676.804895][T29867] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6880'. [ 676.851433][T29867] block nbd0: Unsupported socket: should be TCP or UNIX. [ 676.866832][T29874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6884'. [ 677.136622][T29898] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 677.168271][T29898] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 677.262188][T29900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.526243][T29918] tipc: Started in network mode [ 677.532788][T29918] tipc: Node identity , cluster identity 4711 [ 677.538985][T29918] tipc: Failed to obtain node identity [ 677.545002][T29918] tipc: Enabling of bearer rejected, failed to enable media [ 677.589851][T29921] netlink: zone id is out of range [ 677.658061][T29925] syzkaller0: entered promiscuous mode [ 677.664280][T29925] syzkaller0: entered allmulticast mode [ 677.674615][T29927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6899'. [ 677.685814][T29927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.802406][T29933] netlink: 'syz.0.6900': attribute type 2 has an invalid length. [ 677.813440][T29933] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6900'. [ 677.913113][T29938] 0: reclassify loop, rule prio 0, protocol 800 [ 678.648910][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6917'. [ 678.702327][T29981] tipc: Enabled bearer , priority 0 [ 678.843527][T29981] syzkaller0: entered promiscuous mode [ 678.853236][T29981] syzkaller0: entered allmulticast mode [ 678.864412][T29981] tipc: Resetting bearer [ 678.955167][T29998] bridge0: port 3(bond5) entered blocking state [ 678.962535][T29998] bridge0: port 3(bond5) entered disabled state [ 678.970362][T29998] bond5: entered allmulticast mode [ 678.979719][T29998] bond5: entered promiscuous mode [ 678.988041][T29980] tipc: Resetting bearer [ 679.025709][T30015] netlink: 'syz.1.6923': attribute type 8 has an invalid length. [ 679.031935][T30018] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6921'. [ 680.702034][T29980] tipc: Disabling bearer [ 680.716174][T30002] syzkaller1: entered promiscuous mode [ 680.722139][T30002] syzkaller1: entered allmulticast mode [ 680.732488][T30015] bridge0: entered promiscuous mode [ 680.856893][T30032] IPv6: NLM_F_CREATE should be specified when creating new route [ 680.865582][T30032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.872879][T30032] IPv6: NLM_F_CREATE should be set when creating new route [ 681.013437][T30041] netlink: 'syz.0.6930': attribute type 10 has an invalid length. [ 681.059482][T30041] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 681.154652][T30050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6935'. [ 681.155700][T30051] netlink: 'syz.4.6933': attribute type 10 has an invalid length. [ 681.178303][T30051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6933'. [ 681.194025][T30051] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 681.204042][T30051] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 681.214037][T30051] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 681.232485][T30045] netlink: 'syz.2.6932': attribute type 29 has an invalid length. [ 681.345133][T30058] team0: Device ip6gre2 is of different type [ 681.585175][T30077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6943'. [ 681.659944][T30079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.671431][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6947'. [ 681.719489][T30079] team0: Device gtp0 is up. Set it down before adding it as a team port [ 682.112052][T30106] netlink: 'syz.3.6957': attribute type 10 has an invalid length. [ 682.159589][T30106] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 682.179700][T30111] syzkaller0: entered promiscuous mode [ 682.186595][T30111] syzkaller0: entered allmulticast mode [ 682.472597][T30130] __nla_validate_parse: 1 callbacks suppressed [ 682.472621][T30130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6964'. [ 682.829383][T30151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6971'. [ 682.886783][T30152] netlink: 'syz.3.6971': attribute type 21 has an invalid length. [ 682.980299][T30152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6971'. [ 683.109848][T30159] Unsupported ieee802154 address type: 0 [ 683.121890][T30158] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6973'. [ 683.137794][T30163] vlan1: entered allmulticast mode [ 683.158994][T30164] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6973'. [ 683.257791][T30171] Cannot find add_set index 0 as target [ 683.405148][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6981'. [ 683.425515][T30182] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 683.645134][T30195] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6987'. [ 683.657050][T30195] netlink: 'syz.3.6987': attribute type 21 has an invalid length. [ 683.682644][T30195] netlink: 'syz.3.6987': attribute type 6 has an invalid length. [ 683.694937][T30195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6987'. [ 684.038335][T30218] netlink: zone id is out of range [ 684.060297][ T30] audit: type=1800 audit(1761849752.451:8): pid=30216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6993" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=531 res=0 errno=0 [ 684.335584][T30230] netlink: 'syz.3.6995': attribute type 1 has an invalid length. [ 684.351164][T30230] netlink: 'syz.3.6995': attribute type 1 has an invalid length. [ 684.485908][T30245] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7003'. [ 684.680864][T30263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7006'. [ 685.424018][T30281] team0 (unregistering): Port device team_slave_0 removed [ 685.437925][T30281] team0 (unregistering): Port device team_slave_1 removed [ 685.678041][T30325] bridge_slave_0: left promiscuous mode [ 685.689275][T30325] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.705394][T30325] bridge_slave_1: left allmulticast mode [ 685.715372][T30325] bridge_slave_1: left promiscuous mode [ 685.723754][T30325] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.746243][T30325] bond0: (slave bond_slave_0): Releasing backup interface [ 685.762609][T30330] netlink: 'syz.4.7026': attribute type 9 has an invalid length. [ 685.784837][T30325] bond0: (slave bond_slave_1): Releasing backup interface [ 685.827639][T30325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.839684][T30336] netlink: zone id is out of range [ 685.847469][T30325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.866880][T30325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.875895][T30325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.885912][T30325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.000596][T30334] veth5: entered promiscuous mode [ 686.005913][T30334] veth5: entered allmulticast mode [ 686.121856][T30341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.431142][T30374] tipc: Enabling of bearer rejected, failed to enable media [ 686.453008][T30374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.563114][T30395] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 686.775635][T30388] syzkaller1: entered promiscuous mode [ 686.791787][T30388] syzkaller1: entered allmulticast mode [ 686.816492][T28452] IPVS: starting estimator thread 0... [ 686.910249][T30413] IPVS: using max 29 ests per chain, 69600 per kthread [ 687.390552][T30457] netem: change failed [ 687.410343][T30456] nbd4: detected capacity change from 0 to 127 [ 687.442318][ T5833] block nbd4: Receive control failed (result -104) [ 687.611756][T30471] __nla_validate_parse: 10 callbacks suppressed [ 687.611778][T30471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7061'. [ 687.669038][T28451] IPVS: starting estimator thread 0... [ 687.771689][T30480] IPVS: using max 33 ests per chain, 79200 per kthread [ 687.819011][T30490] netlink: 'syz.1.7063': attribute type 4 has an invalid length. [ 687.819877][T30487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 687.893569][T30494] netlink: 'syz.1.7063': attribute type 4 has an invalid length. [ 687.896405][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7065'. [ 687.947310][T30498] ip6t_rpfilter: unknown options [ 687.954148][T30493] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7065'. [ 688.181183][T30507] nbd: illegal input index 2958377 [ 688.344819][T30515] xt_TCPMSS: Only works on TCP SYN packets [ 688.408175][T30518] netlink: 'syz.1.7075': attribute type 1 has an invalid length. [ 688.465533][T30518] bond3: entered promiscuous mode [ 688.474528][T30518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.482938][T30523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7075'. [ 688.511226][T30523] bond3: entered allmulticast mode [ 688.587046][T30518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7075'. [ 688.651452][T30530] tipc: Enabling of bearer rejected, failed to enable media [ 688.697024][T30533] pimreg: entered allmulticast mode [ 688.738596][T30537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7081'. [ 688.880472][T30546] netlink: 'syz.1.7084': attribute type 2 has an invalid length. [ 688.911566][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7085'. [ 688.937993][T30550] geneve2: entered promiscuous mode [ 689.030592][T30556] vlan0: entered promiscuous mode [ 689.045899][T30556] bridge0: entered promiscuous mode [ 689.051930][T30558] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 689.078664][T30558] netlink: 'syz.2.7089': attribute type 2 has an invalid length. [ 689.098912][T30558] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7089'. [ 689.162550][T30565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7091'. [ 689.263558][T30575] netlink: 'syz.3.7094': attribute type 64 has an invalid length. [ 689.565860][T30592] netlink: 'syz.0.7098': attribute type 10 has an invalid length. [ 689.573983][T30592] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 689.610803][T30592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.712556][T30599] netlink: 'syz.2.7102': attribute type 1 has an invalid length. [ 689.795164][T30591] hsr_slave_0 (unregistering): left promiscuous mode [ 689.923231][T30599] bond3: entered promiscuous mode [ 689.951942][T30599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.025603][T30605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.035712][T30605] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 690.049259][T30605] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 690.065796][T30605] bond3: (slave gre2): making interface the new active one [ 690.073325][T30605] gre2: entered promiscuous mode [ 690.080823][T30605] bond3: (slave gre2): Enslaving as an active interface with an up link [ 690.472984][T30654] netlink: 'syz.1.7112': attribute type 6 has an invalid length. [ 690.487696][T30656] xt_TCPMSS: Only works on TCP SYN packets [ 690.489464][T30654] netlink: 'syz.1.7112': attribute type 5 has an invalid length. [ 691.122332][T30702] openvswitch: netlink: Flow key attr not present in new flow. [ 691.414222][T30721] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 691.443680][T30719] netlink: 'syz.2.7135': attribute type 2 has an invalid length. [ 691.525025][T30711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.124662][T30759] netlink: 'syz.4.7149': attribute type 11 has an invalid length. [ 692.136451][T30762] SET target dimension over the limit! [ 692.145235][T30759] Cannot find del_set index 3 as target [ 692.160002][T30761] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 692.318449][T30770] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 692.382434][T25759] nci: nci_rsp_packet: unknown rsp opcode 0x123 [ 693.034246][T30799] __nla_validate_parse: 21 callbacks suppressed [ 693.034267][T30799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7160'. [ 693.066108][T30799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.112345][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7161'. [ 693.699506][T30843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7173'. [ 693.740986][T30843] block nbd0: reconnected socket [ 693.746053][T30843] nbd: socks must be embedded in a SOCK_ITEM attr [ 693.784672][T30846] dvmrp0: entered allmulticast mode [ 693.824690][ T5833] block nbd0: Receive control failed (result -32) [ 693.950704][T30846] dvmrp0: left allmulticast mode [ 694.000590][T30853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'. [ 694.562095][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7178'. [ 694.646211][T30871] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7180'. [ 694.812915][T30875] validate_nla: 3 callbacks suppressed [ 694.812933][T30875] netlink: 'syz.4.7181': attribute type 15 has an invalid length. [ 694.860508][T30875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7181'. [ 694.998871][T30890] x_tables: duplicate underflow at hook 3 [ 695.132758][T30902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7189'. [ 695.175419][T30903] [ 695.177784][T30903] ====================================================== [ 695.184805][T30903] WARNING: possible circular locking dependency detected [ 695.191832][T30903] syzkaller #0 Not tainted [ 695.196250][T30903] ------------------------------------------------------ [ 695.203271][T30903] syz.4.7188/30903 is trying to acquire lock: [ 695.209348][T30903] ffffffff8f425c98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 695.218677][T30903] [ 695.218677][T30903] but task is already holding lock: [ 695.226053][T30903] ffff88801f75d570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 695.235389][T30903] [ 695.235389][T30903] which lock already depends on the new lock. [ 695.235389][T30903] [ 695.245798][T30903] [ 695.245798][T30903] the existing dependency chain (in reverse order) is: [ 695.254812][T30903] [ 695.254812][T30903] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 695.262821][T30903] lock_acquire+0x120/0x360 [ 695.267850][T30903] _raw_spin_lock_bh+0x36/0x50 [ 695.273145][T30903] nr_rt_device_down+0x12a/0x720 [ 695.278596][T30903] nr_device_event+0x137/0x150 [ 695.283862][T30903] notifier_call_chain+0x1b6/0x3e0 [ 695.289490][T30903] __dev_notify_flags+0x18d/0x2e0 [ 695.295025][T30903] netif_change_flags+0xe8/0x1a0 [ 695.300472][T30903] dev_change_flags+0x130/0x260 [ 695.305845][T30903] dev_ioctl+0x7b4/0x1150 [ 695.310685][T30903] sock_do_ioctl+0x22c/0x300 [ 695.315787][T30903] sock_ioctl+0x576/0x790 [ 695.320623][T30903] __se_sys_ioctl+0xfc/0x170 [ 695.325726][T30903] do_syscall_64+0xfa/0xfa0 [ 695.330746][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.337155][T30903] [ 695.337155][T30903] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 695.344963][T30903] lock_acquire+0x120/0x360 [ 695.349973][T30903] _raw_spin_lock_bh+0x36/0x50 [ 695.355246][T30903] nr_rt_device_down+0xa9/0x720 [ 695.360639][T30903] nr_device_event+0x137/0x150 [ 695.365917][T30903] notifier_call_chain+0x1b6/0x3e0 [ 695.371536][T30903] __dev_notify_flags+0x18d/0x2e0 [ 695.377069][T30903] netif_change_flags+0xe8/0x1a0 [ 695.382512][T30903] dev_change_flags+0x130/0x260 [ 695.387875][T30903] dev_ioctl+0x7b4/0x1150 [ 695.392712][T30903] sock_do_ioctl+0x22c/0x300 [ 695.397817][T30903] sock_ioctl+0x576/0x790 [ 695.402653][T30903] __se_sys_ioctl+0xfc/0x170 [ 695.407755][T30903] do_syscall_64+0xfa/0xfa0 [ 695.412768][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.419166][T30903] [ 695.419166][T30903] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 695.427064][T30903] validate_chain+0xb9b/0x2140 [ 695.432342][T30903] __lock_acquire+0xab9/0xd20 [ 695.437527][T30903] lock_acquire+0x120/0x360 [ 695.442538][T30903] _raw_spin_lock_bh+0x36/0x50 [ 695.447811][T30903] nr_remove_neigh+0x25/0xe0 [ 695.452914][T30903] nr_add_node+0x1d9f/0x2570 [ 695.458019][T30903] nr_rt_ioctl+0xc12/0xd50 [ 695.462942][T30903] sock_do_ioctl+0xdc/0x300 [ 695.467952][T30903] sock_ioctl+0x576/0x790 [ 695.472789][T30903] __se_sys_ioctl+0xfc/0x170 [ 695.477899][T30903] do_syscall_64+0xfa/0xfa0 [ 695.482925][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.489349][T30903] [ 695.489349][T30903] other info that might help us debug this: [ 695.489349][T30903] [ 695.499579][T30903] Chain exists of: [ 695.499579][T30903] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 695.499579][T30903] [ 695.513398][T30903] Possible unsafe locking scenario: [ 695.513398][T30903] [ 695.520835][T30903] CPU0 CPU1 [ 695.526182][T30903] ---- ---- [ 695.531528][T30903] lock(&nr_node->node_lock); [ 695.536287][T30903] lock(nr_node_list_lock); [ 695.543383][T30903] lock(&nr_node->node_lock); [ 695.550678][T30903] lock(nr_neigh_list_lock); [ 695.555340][T30903] [ 695.555340][T30903] *** DEADLOCK *** [ 695.555340][T30903] [ 695.563463][T30903] 1 lock held by syz.4.7188/30903: [ 695.568554][T30903] #0: ffff88801f75d570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 695.578291][T30903] [ 695.578291][T30903] stack backtrace: [ 695.584165][T30903] CPU: 0 UID: 0 PID: 30903 Comm: syz.4.7188 Not tainted syzkaller #0 PREEMPT(full) [ 695.584185][T30903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 695.584195][T30903] Call Trace: [ 695.584201][T30903] [ 695.584212][T30903] dump_stack_lvl+0x189/0x250 [ 695.584238][T30903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.584256][T30903] ? __pfx__printk+0x10/0x10 [ 695.584270][T30903] ? stack_trace_save+0x9c/0xe0 [ 695.584293][T30903] print_circular_bug+0x2ee/0x310 [ 695.584312][T30903] check_noncircular+0x134/0x160 [ 695.584331][T30903] validate_chain+0xb9b/0x2140 [ 695.584356][T30903] __lock_acquire+0xab9/0xd20 [ 695.584371][T30903] ? nr_remove_neigh+0x25/0xe0 [ 695.584388][T30903] lock_acquire+0x120/0x360 [ 695.584401][T30903] ? nr_remove_neigh+0x25/0xe0 [ 695.584421][T30903] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 695.584439][T30903] ? nr_remove_neigh+0x25/0xe0 [ 695.584454][T30903] _raw_spin_lock_bh+0x36/0x50 [ 695.584470][T30903] ? nr_remove_neigh+0x25/0xe0 [ 695.584486][T30903] nr_remove_neigh+0x25/0xe0 [ 695.584503][T30903] nr_add_node+0x1d9f/0x2570 [ 695.584520][T30903] ? __asan_memcpy+0x40/0x70 [ 695.584538][T30903] ? nr_call_to_digi+0x126/0x1b0 [ 695.584554][T30903] nr_rt_ioctl+0xc12/0xd50 [ 695.584574][T30903] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 695.584587][T30903] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.584609][T30903] ? apparmor_capable+0x137/0x1b0 [ 695.584628][T30903] ? capable+0x89/0xe0 [ 695.584643][T30903] ? nr_ioctl+0x1b1/0x3b0 [ 695.584655][T30903] sock_do_ioctl+0xdc/0x300 [ 695.584679][T30903] ? __pfx_sock_do_ioctl+0x10/0x10 [ 695.584700][T30903] sock_ioctl+0x576/0x790 [ 695.584717][T30903] ? __pfx_sock_ioctl+0x10/0x10 [ 695.584734][T30903] ? __fget_files+0x3a0/0x420 [ 695.584747][T30903] ? __fget_files+0x2a/0x420 [ 695.584760][T30903] ? bpf_lsm_file_ioctl+0x9/0x20 [ 695.584776][T30903] ? __pfx_sock_ioctl+0x10/0x10 [ 695.584791][T30903] __se_sys_ioctl+0xfc/0x170 [ 695.584809][T30903] do_syscall_64+0xfa/0xfa0 [ 695.584828][T30903] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.584845][T30903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.584859][T30903] ? clear_bhb_loop+0x60/0xb0 [ 695.584874][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.584888][T30903] RIP: 0033:0x7f5c3a38efc9 [ 695.584904][T30903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.584916][T30903] RSP: 002b:00007f5c3b21d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.584933][T30903] RAX: ffffffffffffffda RBX: 00007f5c3a5e6090 RCX: 00007f5c3a38efc9 [ 695.584944][T30903] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000d [ 695.584953][T30903] RBP: 00007f5c3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.584962][T30903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.584971][T30903] R13: 00007f5c3a5e6128 R14: 00007f5c3a5e6090 R15: 00007ffdf0043178 [ 695.584988][T30903] [ 695.905294][T30907] netlink: 'syz.1.7190': attribute type 1 has an invalid length. [ 696.009184][T30902] netlink: 'syz.0.7189': attribute type 1 has an invalid length. [ 696.058540][T30917] bond4: (slave ip6gretap1): making interface the new active one [ 696.066793][T30917] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.074646][T30917] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.083005][T30917] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link