last executing test programs: 2.290226728s ago: executing program 3 (id=3800): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={'rose0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) accept(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000580)=0x80) r2 = socket$isdn(0x22, 0x3, 0x10) r3 = accept4(r2, &(0x7f00000005c0)=@tipc=@name, &(0x7f0000000100)=0xfffffe9e, 0x0) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x15, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24002008}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="600200001100000428bd7000df25fe80000000000000000000000000001b000004d400002b001c00040003004e224e230000fe800000000000000000000000000029110103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480600003d1151deda041628a45f9699ff4d124829fdd836f8988b2fe03087e614f489f0193b9a6ef2bd69ac13aa155c74f71a1f150b136559946447fa8a3e2e898b5a28fddca21984dbe5b2657cf746585adeb5137fdb9f5de8c9eb74023f72a3dfab67622c191cfb2c098d9ed81959672002a61ee1955df5fcf1aa6d70ce220bb39bbe4d7557f105f643218aee82b2ea950915a2ea5e2b64f74c881d2280eb64d4a65952b8ca805d770aef0bc88a169d0558fb2af81158f5dc53b23c2d544ed5f0d1911a171197fbd70bab8f00000084000500fe800000000000000000000000000037000004d5330000000a000000fc0000000000000000000000000000000000000003010000080000000200000001800000fc020000000000000000000000000001000004d43c00000002000000ac1414aa0000000000000000000000000335000004014000000000000104000006000000080018001000000008001f000300000034001700060000002cbd70002abd70002dbd700029bd700080f50000049bffff040000000104000005000000020000000200000028001a00ac1414bb000000000000000000000000ff0100000000000000000000000000010a00000410000a0029bd700025bd70000200000008001d00880e0000"], 0x260}, 0x1, 0x0, 0x0, 0x40080}, 0x44) 2.185062731s ago: executing program 4 (id=3801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) (async) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=@gettaction={0xf0, 0x32, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd12}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xf0}}, 0x20008021) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000e00)={@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@deltaction={0x0, 0x31, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}]}, @TCA_ACT_TAB, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffff9}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5156}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffff67a}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xc3}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3964}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r7, 0x9}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)={r7, 0x1c, "5710d65c1289d73470e880812062e6c63c38bb241028acc89e14eeef"}, &(0x7f0000000600)=0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="57723dd93a294f380eae920ab9fe25e1ef18fa95b343b11df9f91bd81ca511e7b4bf770f439312ea9e10c05fb294ae1d6c80e6f5234c5e499cc7d6af52cdd839bb12211fc03152401582f7150932e9d6bf6866606e692663c28fe5449d3c163affc81b53215ddd1e149769c09dcdbc278538c1a925bf948bc128d976f3377dc2ab7ad0771050dbb14a30a838c680a6615a9c9d97f2d8ecc4636ee7df6248cbb8a93427796f7defc507d1269a4de8cd16e7b40ac3", 0xb4}, {&(0x7f0000000100)="71fe7628cfd93d6c5d2d8504d238b6cf61de241d7483a4bc9caa2ac828f1b77d89ffb12a7ae016f7a32dccd3c174582bdd8a7326555b1fbeadbc356e5b03004b56d1a74039f50b461d52329e317a50d8f3381ae609b05d3fb2ea60a16cc90c7aff6ee1c937b99ef49aeae77ae3abe451b0076310c24ed83dfe35265740656658df28abcfef7afe3213cf23f036a253b1fc2b3006e9c95b02eaffe8069a4e26dc6d79a5f6176fcad0260103db9fef946b807e34d993237cdd34b0fa842e661dffc5a786605ffc0df17b848684242f7caa76c1644484eeeeff38374adb4668dff868bf1cbac39deded9a3034c7", 0xec}, {&(0x7f0000000200)="c57e4fa7a850d6ba87e36a035fd6700586f94e54645aaf83ca9a23aac120a441fdeefe2c36050d872d6c5f288fcdb72277a475eb1a1945ba9447e67b1e3dff15", 0x40}, {&(0x7f00000002c0)="367d0b6dff0cec282ae0a6aad4413a800490223b5338edb40c906fb5da753878758261e0158d272d2955ad75113393a01f140b0936d43d7282e35fa2cad1463f1a4d93d51259ff6c3241d8c663fd5584c43975715a542b8922d8715de48eac773167d7dfb1387cf22f885c60a388b3bac4df82650b0f5a5d3dc240c39d5fea1c0cafb01695abbf3efc988fe3a0b16479990cf538356392f3280ac8c278079dd567e613f3aa2b5efb6b7ba8718ec6473e97149752c728bb4b", 0xb8}, {&(0x7f0000000380)="78bb200eebb631c4f586c4ac02969535dcb7a4880e34eb468cecf486ab865681334d249a90b81501276bab50d2e553e7df39ccbf17d8a22a3c8b49d9e72f9fa01e93d3c2d41e24e09aec1ceee484131115ecdac62da016df5439b7b52050a34f24999a480ca79ede0a096a20a1bed08e49a14b74afa0445b9e4d73bbad32fb8e64447212b7be9497b0c5d37f683aaad4171f54d1f769952eaaccb6", 0x9b}, {&(0x7f0000000240)="f3b631f14088c8aa1a959430081061f77ddb72a83b5f54b86a5ce226cf8baf916102ad3996c0cea0ce8fdfa4bdfabafeaa8b4d3e9ccdcbe643694e0a2f96a7", 0x3f}, {&(0x7f0000000440)="733450b9c78a5b5bcd763398b84a686f2e1b583048a556601225befa81eca21efb228af2774481ddf355b228a451f2b9c1542999b4e1cea18fc5acc5afde3584ca473722", 0x44}], 0x7, &(0x7f0000000540), 0x0, 0x4040}], 0x1, 0x2400c844) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20baff1ffbff1cccfeb03f09969700000034000701fcffdfff00000000015c25"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r2) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)={0x12c, r9, 0x300, 0x70bd26, 0x7, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0xc000000) 1.432542846s ago: executing program 0 (id=3806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68000000100003052dbd70200000000400000000", @ANYRES32=0x0, @ANYBLOB="0400040000000000400012800e00010069703665727370616e0000002c0002800400120014000700fc02000000000000000000000000000108000100", @ANYRES32=r6, @ANYBLOB="1300f70d0b00000008000a00", @ANYRES32=r6, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) r9 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @default}, [@bcast, @remote, @rose, @netrom, @null, @rose, @default, @bcast]}, &(0x7f00000001c0)=0x48) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000080)="5a000300010003", 0x7) connect$ax25(r9, &(0x7f0000000200)={{0x3, @null, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r11 = accept4(r7, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000100)=0x80, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 1.415831307s ago: executing program 4 (id=3808): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.4126406s ago: executing program 2 (id=3811): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) close(0xffffffffffffffff) 1.399765313s ago: executing program 2 (id=3812): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e20}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x81}, @NFTA_TUNNEL_KEY_IP={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @loopback}]}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0xe0}]}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "0e0b4d1ac2a03869280ae3e433b755b03a3809cf0d548178e24a38930f665611c7b96fe0520dba3b2e1c0d059cda8419d79a4cd67fc486b49fa0813f6db28589ba1f1b1655dabd5a44e8ba2eff3ed93276105da4038eb556502e02bd4b599fbbb1f19744e183a55986988f"}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x40800}, 0x4040001) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newroute={0x30, 0x18, 0x200, 0x5, 0x25dfdbff, {0xa, 0x0, 0x0, 0x3, 0x0, 0x7, 0xfe, 0x6, 0x1300}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c5}, 0x1) (async) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000400)={0x7e}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@get={0x110, 0x13, 0x300, 0x70bd25, 0x25dfdbfb, {{'ghash-clmulni\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0xffff7fff}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7}, {0x8}, {0x8, 0x1, 0xd30}, {0x8, 0x1, 0x430}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfd, {0x18}, [@typed={0x18, 0xf4, 0x0, 0x0, @binary="04c3831ea660b9f1a421254330b6ebe50b19617d"}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000740)={0x0, 0x7}) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2a0, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2257f811}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8b64}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x695}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcf50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x55}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8d}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x436e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000b40)={0x1, 0x1, 0x3}) (async) r6 = socket$inet6(0xa, 0x800, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000b80)={0x0, 0xf, 0x30, 0x4e, 0x3}, &(0x7f0000000bc0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000c00)={r7, 0xf2, "d72e6c8bf011d0b88a44565ca1ba7040fa33ea2f1b17ba5ad6993e672db4191c4ed27c06c7a15767786807158958eceb6937c77d80dba1a341e50223ed489bc84be8b6097a751424bf856e9bd015f34a1036611955b8d8b917e023346bfbb3505bd366425a02ff7e32c60e55bf33ecbf41ee4b28cbddb1bd867f65e8bd7e6f3fdfd563201d963db8a8a9edffa16f3dc9e6c24f49481172add210eaa235b8b6fc4ab207ef799ce20a7540448849119ea1cd81d78548a755a0d48fdc672fb8162faf59b4f9efcc430f32ba0f70e988dd5a8b5f78721660955be85bcab433104afbd5662af7207ca6731da8b2d5787732534990"}, &(0x7f0000000d00)=0xfa) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000d40)={0x0, 0xb, '\x00', [@jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x48, {0x2, 0x10, 0x1, 0x10, [0x6, 0xfffffffffffffff8, 0x6, 0x8000000000000001, 0x0, 0x5, 0x3, 0x40]}}]}, 0x68) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000fc0)=r8) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x4, 0x80010, r3, 0x9c74000) (async) sendto$inet6(r6, &(0x7f0000001000)="0ab186194504d1fd9223dd56ee4827d948daa71c45a2f00b4a0f703aa3116d089b117ee7be06387c5ab7b2e402d30a37111106bd5d967d4bd95867c4ec91078e8b2edb419fa87f3a434deecb8e019fe1e70173f699f91d60a007", 0x5a, 0x40, &(0x7f0000001080)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, 0x1c) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000001140)={&(0x7f00000010c0)=""/87, 0x57}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001640)={&(0x7f0000001180), 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x420, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x93, 0xfa, "d0a683386c76551d6ac350c9b2e20b26d277f96c3721a055feb6079ba973c50664d774196b145794235c88b4577c987cc6665d33ed19d727c02dc0237755c51a81bdc7936a5899f0f56a8cacc009d9814fd0a31fe5c793ebcb1596fd7ba9c344e5d88b52af6fb3e02ff840ce45272bf99f14c31bd0a3a8475df12d4b1bc8590e01c7c93793a24662345d01972e4b82"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xdd}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "50c62854067cbdea93ca503a13"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @NL80211_ATTR_IE={0x143, 0x2a, [@fast_bss_trans={0x37, 0xa4, {0xf, 0x4, "23e37b2b4d957047c69deedbddae1880", "523f44155545b7749156f23f5170aaeffc776b9f8a1f74ac29bef0a318c801f4", "d7598bb4c402e17f31d29d8d88179d5d435085f4a0fd5f0d6eb06b6cc9e0fae8", [{0x3, 0x25, "1e6a51d94a73fc0ca3789ec2425c17df2113ff245c593ae85ba292f62bc421860f846beef0"}, {0x3, 0x1, 's'}, {0x3, 0x9, "e6d2e8066a85a5ab6a"}, {0x2, 0x1b, "5d2add5d4f419390361d4067a78e01d216e4b6b3261ab318810102"}]}}, @measure_req={0x26, 0x42, {0x6, 0x7f, 0x7, "5c88f2a802974fddc2cb253dfe630044c4c1baf06ea88e49c9abb621ccef1cfa1c5a13eb920f080582461d2be3fc43823bc681cd4be88bb9d3c9fa2ab44ae0"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x4}}, @tim={0x5, 0x26, {0x0, 0x6a, 0x7, "0d1c0678a2698f7dec2462aa9268de1045cfa58d2fdbebb63a6c15838179d9fce3dccd"}}, @dsss={0x3, 0x1, 0x26}, @prep={0x83, 0x1f, {{}, 0xb9, 0x5, @device_a, 0x10000, @void, 0x10, 0x9, @device_a, 0x7}}]}, @NL80211_ATTR_IE={0x123, 0x2a, [@random={0x10, 0xda, "4871a7d6b6edbed298e4400bc8397418a4cdfd41734642257af019d25b95bd5338594cde4f62d3e2f114a8c1ab5995c8e85ee3c88ee1bc3b7a0dc488a99946421e18412af9a4f7ef121648f3bc6ed60763b2b04ce0374b76ffc59c913d8e4a04df8ad21c0726fbc1e29662a8576c84853c793139121422c7eb8ced260d050e98d53faac92a117e44de00dfe1e58cc37dddcb9d7cfa3af41e7f202f819fc954a5905c75c47e47871a71b78e6439bb348751a6ffe1bd303ab7ef49dc7067380ff7fed9cbe72da50b9fa2f52503bad37fe5efd6454065bb30f582d4"}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x1, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x4}}, @preq={0x82, 0x25, {{}, 0x2, 0xd1, 0x7, @broadcast, 0xa, @void, 0x5, 0x9, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x62}]}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x97, 0x8}}, @ht={0x2d, 0x1a, {0x470c, 0x0, 0x0, 0x0, {0x5, 0x2, 0x0, 0xbc, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0xff}}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@supported_rates={0x1, 0x8, [{0x1, 0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x18}, {0x30}, {0x3, 0x1}, {0x2}, {0x24, 0x1}]}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x29}}, @perr={0x84, 0x75, {0x9, 0x7, [{{}, @device_a, 0x9, @void, 0x23}, {{}, @device_a, 0x5, @void, 0x38}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_b, 0x97b3, @value, 0x2}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x25}, {{}, @device_a, 0x0, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x2c, @value=@device_b, 0x32}]}}, @erp={0x2a, 0x1}, @ibss={0x6, 0x2, 0x8}, @supported_rates={0x1, 0x6, [{0x3, 0x1}, {0x3}, {0x6}, {0x30}, {0x2, 0x1}, {0x2a}]}, @ibss={0x6, 0x2, 0x4}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x80}, 0x8011) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001680)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000016c0)={0x27, r9, 0xffffffffffffffff, 0x3f145e0291d6271d}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0), 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f8d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0xc001) 1.399162849s ago: executing program 3 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r1, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x144, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc32}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcfc2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf364}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x2004004) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b000000000000fdffff0700000008000300040001000c000180"], 0x28}}, 0x8000) 1.397807326s ago: executing program 1 (id=3814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4686}}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)=""/185, 0xb9}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f00000018c0)=""/265, 0x109}], 0x6}, 0x7feffffd}], 0x3, 0x400060a2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffff}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.328246655s ago: executing program 0 (id=3815): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000003c0)={{r0, 0x6, 0x3, 0x1e, 0x2, 0x2, 0x88c, 0x68ea, 0x9, 0x7ff, 0x7, 0x7, 0x1, 0x2, 0x5}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d616373656330"], 0x40}}, 0x0) 1.24755552s ago: executing program 0 (id=3816): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @link_local}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.215056821s ago: executing program 4 (id=3817): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="eb1e311e763e82af712be4a865a887ab8b120d3456a5f0d534e3a6c2a57776ca263fcf111b6cc7eeeb91394fecec883f42cd563064bac0f448e24fdd48c035dd5a26d4e78e8377e59d8567fdf6de389a12e74fb6ab02c89b9e5234a9cec9cadbac4168f7713c31b8cc7981f622d714155697d336508d93f23ec68726fe3a622e5651763bd1fa17e6dc529c6411c1b9206383cb237b906e494015c2bc96c019e0433c2d2f517a93ce035ae024090878eb9766bd5fdfebefa4c53134631c68e248fe75b033943db92b32784fcdc3ec91fef0774cfdb22bd73aa883e388b29f201564", 0xe1}, {&(0x7f0000000040)="c64789fcc864320b3d869aa786b004182bcda7e30015996bc60b5ad065ef977d6126ffb8525dbf0e782ba3aa69d819b3e0d4a59c8c262650cafba65256", 0x3d}, {&(0x7f0000000240)="56614ca5ac8bfccc6800d91aa8da2fd78c4c67779a9348f63261a55f131c3e5a82b0900ed0ec2aa46a82ad305a7061756091ceb88c18fda4af66b673ca9086d1d6dee212e023e0a3bf408588eccc27500ed55845b490dd0a1b9737fb835d4b6d5b53103bc60efc45d7481c81c7cefa3536706f2fea0c55bbb37f8ff0b722ab125266557503fcd0098066e101af25b1fa13840ec682e4116f81b5b5686066a668ae0b5ae4178f8220d4d229aa3c617222ff02820c7db77322b5dd63bf942fe134d0a830644d0a", 0xc6}, {&(0x7f0000000800)="442765c7ff8e5a6f0958b8ff3c4861adefadbdd70c3796456b082fcf498dd85450bc00cadff3d0c05753c689dc7529e551247be56eceb707e51697500b103b6a14fcfb074ef499ef9c41fce0425168513cb15f812ed01808c994593a9e2f8a9d1679f27f14e6", 0x66}], 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="640101000a0101010000000011000000000000000000000001000000fb0000000000000010000000000000000000000007000000"], 0x138}}, {{&(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000740)="848b787d2777766874e0acb1e600979362aef60983649bafd50582eadcf4", 0x1e}], 0x1, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x83}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}], 0x2, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00'}) r7 = accept4$unix(r1, &(0x7f0000000900)=@abs, &(0x7f0000000980)=0x6e, 0x80000) r8 = accept4$inet(r0, &(0x7f0000000a00)={0x2, 0x0, @private}, &(0x7f0000000a40)=0x10, 0x800) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000a80)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f00000009c0)='gretap0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) 1.160076555s ago: executing program 1 (id=3818): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xa, 0x19, 0x8, 0x7f, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009fffd0000000008000003000000040004"], 0x34}}, 0x84) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x34}, 0x20) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[], 0xd4}}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed000000000000fdffff7f851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000002408000000b00000e4467be998541800000000000000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 1.144846439s ago: executing program 3 (id=3819): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x21, 0x1, 0x3eb740bd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x44c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "b2b119345ae85ed4862684df6c4c96aeacb4f6f2e722781820eabc325003be7ea1e651d67a83b56c6dd9e4ce72a43a53c7e88b272d89686eaf4f60cbed15f234b898624f013e306395e49a35d475d15594ab45b2d677"}]}, @ETHTOOL_A_FEATURES_WANTED={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\x91-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '--}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'+[\xe8@\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff856f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,!\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}@$\'(\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*$/!&(:+](\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "bd4e4ba05c38bf3fa31fa2097808a1d2aec451a5e0fbc85697d1d4dd3f61b8669a85da4d629bacf5bb243bb950dbcaca11d60f90b8b9e3a23678164d928bf1572cfdb943569f2842e81b27231c15ff85e42266f4a4d24864bbae6e76610ae4a7708319f982ddb646fb6a2a1dfe188c51c6151a86698fffc9fa196c5b1882d4d367b0fb22ad40ad91cb7fc547e233dc540bf8bf6f452828c88e3cab88c7a32c9dadb6a8e73f209af2e9864b902a84"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "58e069285badcce15bd837a1299ff8059887f9ad8ed505597d2d7c44a4b5ce16a8094537969a417df63e5afcc087caab211e207909384e43"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "a8c0e467fb29d480f65c1830b885c396e7f660debfdc2a7607b7d6f2274b5d1a38435f92cfdb20a61594e188014b469d776ae4832aaf104f2a2202b7034d965440b3688561bf5e8c4d17b709676b21dd4bd291cc40b2f4fd45282b801da6db188e5196031e4d36ecabc75c05c667deace7e1e600706aa44688d7b6d5fdfea55f5ab9123dc8d4cc1143bd677721b8f2911ef7e9d87126ebcf65401358ed96f935e2977683ba5cabe6aeb7411ef0"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_FEATURES_WANTED={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "cd1c80874a169c91a0be8c81578662b9d1930a13277af7a407e5a1a2fb3199fe625916fd1fe758f14e0460ea94c03b98788c88c56b01cb4b3ed9d59d4843b7c644084619061bba427cf629b9b093ebc444c143059dc8e90e3a3fcc72ecb2864908b68f181e460e68a91588fcd98523085077857f2e5c767e116815d024f0590578fe32b071a132b35e20b47a57009abfb2511cee5a22da606617bc1db92a07067898a3bb9374cbdc55651bbcadf3a07b26ee089a"}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) 1.130962387s ago: executing program 2 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x28200132}, 0xc) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80020000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 991.316042ms ago: executing program 4 (id=3821): socket$nl_route(0x10, 0x3, 0x0) unshare(0x600) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettfilter={0x5c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xd}, {0x2, 0x2}, {0x9, 0xfff2}}}, 0x5c}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000780000000000019078ac1e0001ac1414aa0304907803120000470000000000000000875bb293e3c751735708b8bf2f0000ac14140a0000000044246af3e000000100000001ac1e010100007fffac1e000100000002ac1414180000000644240f51e0000001000000010a01010100000006ffffffff000001ffe000000200000000820a79d343642f631fe53aec5e848493c6cb87fe3b89cc71ed2fb8005eeb2c74f6b19a685336a0339e1d866598eb46117a02a99e4a3e6292920f1eb5a53e483574fc8b2bcd29d7858d1ad7e9144e"], 0x0) 960.026388ms ago: executing program 3 (id=3822): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x10001) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 949.809002ms ago: executing program 2 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x1c, r4, 0x903, 0x400, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x12e1d5b2e2604ef7}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r12, 0x89e4) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r8, @ANYBLOB="000127bd7000fedbdf25180000002400038008000200060000000800130006000000080002007807000008000200056d0000900002803400038008000100000600000008000200e00800000800e8000900000008000200080000000800010006ef0000040004004c00038008000200f7ffffff08000100da4e000008000200008000000800010001010000080002000100000008000200010000000800010001000100080002001804000008000100050000000c0002800800010007000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8940}, 0x4080) 844.187974ms ago: executing program 1 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x439, 0x70bd2b, 0x25dfdbfc, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x439, 0x70bd2b, 0x25dfdbfc, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) (async) 808.097601ms ago: executing program 0 (id=3825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 430.576308ms ago: executing program 1 (id=3826): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x7) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) 348.053495ms ago: executing program 4 (id=3827): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 345.664053ms ago: executing program 0 (id=3828): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 323.112422ms ago: executing program 3 (id=3829): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x96, 0x2583, 0xff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x20010, r0, 0x79af7000) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ee, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private2, @dev={0xac, 0x14, 0x14, 0x10}, 0xa, 0x3}}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x40, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0x88, @multicast2, 0x4e22, 0x3, 'sh\x00', 0x0, 0x0, 0x72}, 0x2c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000001c0)={@loopback, @broadcast, 0x1, "f0a91f5d84d839977097cc6d5e0c2761071e37e9c86bb2eccd296302a0daabe7", 0x7, 0xa2, 0xa6d2, 0x8}, 0x3c) getsockopt(r0, 0x6, 0xf40a, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) listen(r0, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1_virt_wifi\x00', 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x0, 0x5, [0x4, 0x8000, 0x1, 0x0, 0x2]}, &(0x7f00000003c0)=0x12) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x1, 0x1, 0xe, 0xf}, &(0x7f00000004c0)=0x98) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000500)=0x8000, 0x4) syz_emit_ethernet(0xe8, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x1c, 0x4, 0x1, 0x5, 0xda, 0x65, 0x0, 0x4, 0x89, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x13, 0xb0, [@multicast2, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ssrr={0x89, 0x7, 0xd5, [@private=0xa010101]}, @cipso={0x86, 0x41, 0x1, [{0x1, 0x3, "ef"}, {0x7, 0xa, "52b00ebf20693ed1"}, {0x7, 0xe, "131b23f56189d76467692695"}, {0x5, 0x3, "a7"}, {0x5, 0xc, "44560511c4bb4219c233"}, {0x0, 0x11, "6a6fd9de2981a3850bed9255255662"}]}]}}, "617597618069f406c406381fef88877065ffb61271877cc16adb9d76b87dce955e9ffa4a3f235df6c037701f0d9bff5a7202dc74a3b242dc1f938b397f9c802f21adbba162aa10b40400efc4db23ffb21385a5f2986baf3a04f4d2f0beff88c087b51a85a75acac71f74"}}}}, &(0x7f0000000640)={0x0, 0x3, [0xf59, 0x4a5, 0x9c4, 0x13f]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000680)={r4, 0x5}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000700)=@assoc_value={r5, 0x1}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000740)={r1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={r4, @in6={{0xa, 0x4e23, 0xa22, @remote, 0x10000}}, 0xffffffff, 0x1, 0x400, 0x6, 0x5, 0x4, 0x4}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000880)={r7, @in6={{0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x8, 0x0}, 0x8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x2f3, 0xa5, 0x8, 0x8205, r0, 0x8, '\x00', 0x0, r0, 0x2, 0x4, 0x5, 0xc, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0x3, &(0x7f0000000940)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @exit], &(0x7f0000000980)='GPL\x00', 0x60000000, 0x98, &(0x7f00000009c0)=""/152, 0x41000, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, r0, 0x8, &(0x7f0000000a80)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x5, &(0x7f0000000c00)=[r0, r0, r0, r6, r0, r10, r2], &(0x7f0000000c40)=[{0x4, 0x2, 0x3, 0xc}, {0x5, 0x1, 0xc, 0xa}, {0x1, 0x4, 0x0, 0x3}, {0x1, 0x5, 0x2, 0x6}, {0x5, 0x4, 0x10, 0x5}], 0x10, 0x10001}, 0x94) recvmsg$unix(r0, &(0x7f0000001200)={&(0x7f0000000d80), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e00)=""/245, 0xf5}, {&(0x7f0000000f00)=""/29, 0x1d}, {&(0x7f0000000f40)=""/181, 0xb5}, {&(0x7f0000001000)=""/34, 0x22}, {&(0x7f0000001040)=""/91, 0x5b}], 0x5, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x98}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001240)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'lblc\x00', 0x2a, 0x7, 0x4c}, {@rand_addr=0x64010101, 0x4e22, 0x2000, 0x3, 0x40, 0x7}}, 0x44) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0), 0x10) ioctl$SIOCAX25GETUID(r11, 0x89e0, &(0x7f0000001300)={0x3, @default, r12}) 241.134286ms ago: executing program 2 (id=3830): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) 170.429729ms ago: executing program 1 (id=3831): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r1, @ANYBLOB="08000100010000001400040074"], 0x54}}, 0x0) 169.912549ms ago: executing program 4 (id=3832): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x128}, 0x240000d0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x14, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) close(r0) 146.694909ms ago: executing program 3 (id=3833): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000003f8e92eb0007006ba10b00000066abc8726a6ce03f03974a321c056dc4ae66eb48d24f72feca4cecafa1828aa77d90"], 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x405c814) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x620a02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @empty}, 0x1c) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ba010202", @ANYRES16=r10, @ANYRES64], 0x1a0}, 0x1, 0x0, 0x0, 0x8081}, 0x14) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="05002aff000000000500290001000000"], 0x2c}}, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 59.814429ms ago: executing program 0 (id=3834): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 7.887634ms ago: executing program 1 (id=3835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001940)={0x0, @broadcast, @empty}, &(0x7f0000001980)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000001c00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)=@flushsa={0x1a8, 0x1c, 0x200, 0x70bd27, 0x25dfdbfe, {0x3c}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @policy={0xac, 0x7, {{@in6=@local, @in6=@remote, 0x4e20, 0x0, 0x4e21, 0x5, 0x0, 0x40, 0x20, 0x71, r2, r4}, {0x8000000000000000, 0x7, 0x6, 0xf, 0x7, 0x8000000000000000, 0x4, 0x7fffffff}, {0x9, 0x5, 0x5, 0x8}, 0x8, 0x6e6bbd, 0x2, 0x1, 0x6}}, @offload={0xc, 0x1c, {r5, 0x2}}, @migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in=@local, @in=@multicast1, 0x2b, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, @in=@private=0xa010100, @in=@loopback, 0x6c, 0x0, 0x0, 0x3503, 0x2, 0xa}]}, @tfcpad={0x8, 0x16, 0x8eb}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2c, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x2, [0x81, 0x7]}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x24000090) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)="b0cf30d88b3c0874e3137f3a0a927207a8255a29274c28f61625a94ad296a17abda69b647b3a9ad9d3f310e0b70691a2cbeba2f7d5a86c11a05a7147afbf153560f3a5d91c51472b60cf00b35649937d45b47cce0e0c25223435649f6db8d1b6a3605201b4a64c64e572e84e8930279d7bb6ed1fb2ad4704af3a41b7ae42b1d6a2517de0d6aa2e64869bd893df88a8a5622ae58dc70591529a24fc58ab57bf17efda8574a9d1cccf18ed", 0xaa}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f00000001c0)="619f91545fc617eea16e1c807d82d258e8d066fe63f701737fd01e06432a43a6503f54f064be88cf4a43daee998d6ebdc6a70842095aa7b95c2a18530eea16", 0x3f}, {&(0x7f0000000200)="ac4963af55f59e1cc7ed6ab92700feb52707e68defa174bfe685b78fdd5f7b9aeb0503085354403c2f9dc869b94c3144b82089e3d662ce39bfd58b40a90735823b435f03cf21a577e7dd3b0af6d3ebdb1ad6cbf6ac20574d11e0065961379678b1b9ded815464343495624141b3351638241a95fbb9ff37025bee70d7d7834da", 0x80}, {&(0x7f00000002c0)="e67da50ec2f3f6", 0x7}, {&(0x7f0000000300)="85e4c3a72ef1e925f77a28a68796b71bf98a505a9694419213e301ccb9afd1c471d2dd57bc2f3780c00b5b118319ee24dd7d54319841740823639e1d1b418e77238832d64e940d8abfb0a3fccc47b1020db546372dd0cab1334b8943ffc72fc8a403ee5003ec4c9b6dcdd4dfba06229989f7267e26", 0x75}, {&(0x7f0000000380)="e68b12e67775cbe8174cf25ca7bc2554a02b28aa5e4f3299b1c46423527804772db5fb8a72ded6c67bfbe450f68c0a5226cd127e97b52bd5a044507bd546d9fe03b65bf53e8657eb3c966104430fc60e3c5c21441df8ba4a7deafb65bb8cdfc8bef8cd86269f2992169f6beff73fee6ae72e1478cfa2f0172dfa680927a7704811a8363d7c5e3d49db1fa042585f06e61c5ee69de48b35c1a3a3e1928ac59e4fb10c9ef8f59fcd474073221dd065f469a376aad5e7ed28acf1eaa0e8583ad19702ee733c631534b7b7", 0xc9}, {&(0x7f0000000480)="ca827d47b5208f82f12e65edfc6af8ac99debea2408d9a4aab648a6fbbe8f3a815e095dabecde149229e12a9df96634cbe72c47384a4d538f05b20649410ad321079b5554984b4afc7bd0a0a", 0x4c}, {&(0x7f0000000500)="46bc6ed313f60e48a928e1218b81822b63874a7977f7fdd301cd9c217c17bb50d5b4b514d99c69a801172424e99b474c938530ed935b2eceaf03289cdc30bc42aa67f365bcad58230eaed620ba493311034b497b813d7ede533db57c890db18b70f3ff9242ab245db140385b3d4971b288920a7ed3164b670bc8bc08457e5e5ae3a25b2f278b9445c4d8ef8208ad7ebdb75e8171bea7fe1d7eff4f0105deb824dbfca87a3aade6c001fafb095cfd546de191b7f6718b731332247092aceb91d25454b0002356781385396ba4ead2bf11279d8204b61c693322e0627f84fa", 0xde}, {&(0x7f0000000600)="3d5673a9bebf999af8f362837bbded1f7cf5f2857fdfb65951de80fee1e94246748481d9b9e7a1cff055342d937c8e2ddbc9f992c39a0b15f1dae32f40c7b9593351fbadc28041d3c8fc65c67f050b53c1015082a7714962073abdade0c2c573b5f1fad41f6e144624cf11b4292319ea678c4805e8d503815de070d17fae57647b4fc0a8373809513114", 0x8a}], 0xa, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @private=0xa010100}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x38}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 0s ago: executing program 2 (id=3836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000020000000000000002168b8d415b0f26c59c2ab19825be06cf7e076fd691988782b30455a0d379b072e9be136719b6fdcb8e6fc23d6774cc5501bcaf52f44f5bf2ead515e446ef6c1f4481d5b32e880842cd1adc829f524b4a05e6770b96443b769560ae6988feff24dddf1a02a28fc1a80667b97e0213b56b3e83bf398c39a6fb8880ec8ecc921ad4b0907ef8966c73e79af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb, 0x10}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad160000400033001000000008021100000008021100000008021100000100000000f4ff000001002d1a40000b0000000000000000040003000b0000000600500000000304006c62a3212a84f182889f5876f4dfb4f11474b7fd7b0f332e7c90de51dd2737450363e3b764fd2cc0a6e6dd1a3af6e85fa4597d3d688617f330ca367d79f7f55b8a72161c96740a3c733d3c305072316989fbb56523ba41e46007f0a9bbeda871c6303da66fddb3f0cf8d5894cb59d5df7619f792512303992c87e7b4ba01d1ae84f8980f4f14bed5b9fec0c26afa65fde0fc467a3eb1"], 0x68}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000100)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x583b, 0x0, 0x2, 0xc, 0x1, 0x749}, 0x20) kernel console output (not intermixed with test programs): `syz.2.2135'. [ 264.163880][T13438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.387396][T13447] tipc: Enabled bearer , priority 10 [ 264.807465][T13470] tipc: New replicast peer: 0.0.0.0 [ 264.821337][T13470] tipc: Enabled bearer , priority 10 [ 265.033503][T13476] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 265.477614][T13503] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 265.491596][T13503] __nla_validate_parse: 35 callbacks suppressed [ 265.491619][T13503] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2157'. [ 265.508005][T13504] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2157'. [ 265.509740][ T2153] tipc: Node number set to 1710725374 [ 265.633720][T13506] netlink: 'syz.0.2158': attribute type 12 has an invalid length. [ 265.674078][T13510] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 265.786030][T13513] bond3: (slave gretap2): making interface the new active one [ 265.815567][T13513] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 265.831252][T13510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2160'. [ 265.844740][T13510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.042482][T13491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.063796][T13491] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.114660][T13491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.146597][T13491] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 266.194027][T13491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.203176][T13491] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 266.218448][T13491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.227241][T13491] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 266.402962][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 266.617131][T13564] netlink: 'syz.3.2171': attribute type 25 has an invalid length. [ 266.738410][T13569] netlink: 'syz.4.2174': attribute type 6 has an invalid length. [ 267.111956][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 267.145429][T13592] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 267.625783][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 267.656979][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'. [ 267.794834][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 267.916571][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 267.975115][T13653] bridge0: entered promiscuous mode [ 267.985971][T13653] macsec2: entered promiscuous mode [ 268.004072][T13653] macsec2: entered allmulticast mode [ 268.010011][T13653] bridge0: entered allmulticast mode [ 268.017688][T13653] bridge0: port 1(macsec2) entered blocking state [ 268.031403][T13653] bridge0: port 1(macsec2) entered disabled state [ 268.045848][T13653] bridge0: left allmulticast mode [ 268.050219][T13659] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 268.064795][T13653] bridge0: left promiscuous mode [ 268.246660][T13659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.988372][T13723] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2216'. [ 269.325678][T13748] bridge_slave_0: invalid flags given to default FDB implementation [ 269.419022][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.737056][T13775] syzkaller0: entered promiscuous mode [ 269.761079][T13775] syzkaller0: entered allmulticast mode [ 270.371942][T13806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.385242][T13802] batadv_slave_1: entered promiscuous mode [ 270.396872][T13802] debugfs: 'hsr1' already exists in 'hsr' [ 270.407088][T13802] Cannot create hsr debugfs directory [ 270.414397][T13802] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 270.426078][T13802] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.491487][T13815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.572016][T13813] __nla_validate_parse: 11 callbacks suppressed [ 270.572037][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 270.673421][T13815] bond9 (unregistering): Released all slaves [ 270.742771][T13819] vlan4: entered promiscuous mode [ 270.747875][T13819] bridge0: entered promiscuous mode [ 270.784534][T13827] openvswitch: netlink: IP tunnel TTL not specified. [ 270.792521][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 270.797918][T13827] openvswitch: netlink: IP tunnel TTL not specified. [ 270.886378][ T30] audit: type=1800 audit(1757263325.756:3): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2416 res=0 errno=0 [ 270.969509][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 271.003556][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 271.009403][T13840] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 271.022654][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 271.223386][T13854] delete_channel: no stack [ 271.235082][T13853] netlink: 'syz.3.2255': attribute type 33 has an invalid length. [ 271.244328][T13853] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 271.799598][T13880] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 272.111552][T13892] sctp: [Deprecated]: syz.4.2266 (pid 13892) Use of int in maxseg socket option. [ 272.111552][T13892] Use struct sctp_assoc_value instead [ 272.796918][T13915] syzkaller0: entered promiscuous mode [ 272.809316][T13915] syzkaller0: entered allmulticast mode [ 272.821269][T13927] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 273.215463][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 273.686794][T13944] netlink: 'syz.4.2283': attribute type 2 has an invalid length. [ 273.697064][T13944] netlink: 'syz.4.2283': attribute type 8 has an invalid length. [ 273.711887][T13944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2283'. [ 274.762166][T13929] netlink: 'syz.3.2280': attribute type 1 has an invalid length. [ 274.780003][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 274.807101][T13948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2284'. [ 274.847986][T13948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2284'. [ 275.067102][T13958] lo speed is unknown, defaulting to 1000 [ 275.164423][T13974] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 275.410845][T13978] team0: Device wireguard1 is of different type [ 275.666903][T13958] hsr0 speed is unknown, defaulting to 1000 [ 275.721799][T14000] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2300'. [ 275.953963][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 276.159919][T14023] IPv6: sit2: Disabled Multicast RS [ 276.171926][T14023] sit2: entered allmulticast mode [ 276.430303][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 276.457112][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 276.825480][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 276.846903][T14054] netlink: 'syz.1.2314': attribute type 23 has an invalid length. [ 277.253154][T14080] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 277.339509][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 277.359798][T14082] bond0: entered allmulticast mode [ 277.364980][T14082] bond_slave_0: entered allmulticast mode [ 277.371080][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 277.389262][T14082] bond_slave_1: entered allmulticast mode [ 277.413535][T14082] bridge_slave_1: entered allmulticast mode [ 277.420540][T14082] team0: entered allmulticast mode [ 277.421581][T14085] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2324'. [ 277.427431][T14082] team_slave_0: entered allmulticast mode [ 277.442133][T14082] team_slave_1: entered allmulticast mode [ 277.447924][T14082] dummy0: entered allmulticast mode [ 277.473926][T14082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.544146][T14093] 8021q: VLANs not supported on lo [ 277.548362][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 277.572717][ T2909] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 277.582288][T14095] tipc: Enabled bearer , priority 0 [ 277.594670][T14088] syzkaller0: entered promiscuous mode [ 277.601238][T14099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2328'. [ 277.604049][T14088] syzkaller0: entered allmulticast mode [ 277.632997][T14091] tipc: Resetting bearer [ 277.654269][T14087] tipc: Resetting bearer [ 277.696803][T14087] tipc: Disabling bearer [ 278.439688][T14139] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 278.497348][T14139] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 278.614976][T14140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.627320][T14140] bond6: (slave bond7): making interface the new active one [ 278.640112][T14140] bond6: (slave bond7): Enslaving as an active interface with an up link [ 278.664764][T14151] xt_time: unknown flags 0xf4 [ 278.687165][T14154] bond0: (slave team0): Releasing backup interface [ 278.707400][T14154] team0: left promiscuous mode [ 278.717549][T14154] team_slave_0: left promiscuous mode [ 278.727754][T14154] team_slave_1: left promiscuous mode [ 278.735722][T14154] dummy0: left promiscuous mode [ 278.743750][T14154] team0: left allmulticast mode [ 278.754332][T14154] team_slave_0: left allmulticast mode [ 278.760173][T14154] team_slave_1: left allmulticast mode [ 278.765810][T14154] dummy0: left allmulticast mode [ 278.793017][T14154] team0: Port device dummy0 removed [ 278.799718][T14154] bridge_slave_0: left allmulticast mode [ 278.805675][T14154] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.819846][T14154] bond0: (slave bridge_slave_1): Releasing backup interface [ 278.830679][T14154] bridge_slave_1: left promiscuous mode [ 278.836549][T14154] bridge_slave_1: left allmulticast mode [ 278.852072][T14154] bond0: (slave bond_slave_0): Releasing backup interface [ 278.866393][T14154] bond_slave_0: left promiscuous mode [ 278.872298][T14154] bond_slave_0: left allmulticast mode [ 278.881969][T14154] bond0: (slave bond_slave_1): Releasing backup interface [ 278.890581][T14154] bond_slave_1: left promiscuous mode [ 278.896153][T14154] bond_slave_1: left allmulticast mode [ 278.904923][T14154] team0: Port device team_slave_0 removed [ 278.913950][T14154] team0: Port device team_slave_1 removed [ 278.924941][T14154] bond1: (slave veth3): Releasing active interface [ 278.932251][T14154] gretap1: entered promiscuous mode [ 278.943756][T14154] bond1: (slave gretap1): Releasing active interface [ 278.951933][T14154] gretap1: left promiscuous mode [ 278.968686][T14154] bond3: (slave gretap2): Releasing backup interface [ 279.170599][T14166] : renamed from vlan0 [ 279.186938][T14180] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 279.195482][T14180] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 279.448386][T14192] tipc: Enabled bearer , priority 0 [ 279.554390][T14192] syzkaller0: entered promiscuous mode [ 279.567873][T14192] syzkaller0: entered allmulticast mode [ 279.579920][T14192] tipc: Resetting bearer [ 279.604667][T14190] tipc: Resetting bearer [ 281.207380][T14190] tipc: Disabling bearer [ 281.352070][T14213] bridge0: port 2(veth0_to_bridge) entered blocking state [ 281.377616][T14213] bridge0: port 2(veth0_to_bridge) entered disabled state [ 281.402287][T14213] veth0_to_bridge: entered allmulticast mode [ 281.420647][T14213] veth0_to_bridge: entered promiscuous mode [ 281.444521][T14213] __nla_validate_parse: 5 callbacks suppressed [ 281.444546][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2361'. [ 281.530558][T14228] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 281.603315][T14233] netlink: 'syz.0.2367': attribute type 33 has an invalid length. [ 281.645536][T14233] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 281.691965][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'. [ 281.805618][T14238] netlink: 'syz.1.2368': attribute type 11 has an invalid length. [ 281.842344][T14238] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2368'. [ 281.898955][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 282.084789][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 282.096271][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 282.171544][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 282.173136][T14262] bond9: entered promiscuous mode [ 282.186455][T14262] bond9: entered allmulticast mode [ 282.192927][T14262] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.201587][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 282.433344][T14288] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 282.462367][T14288] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2383'. [ 282.489072][T14288] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 282.506737][T14288] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 282.525208][T14297] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 282.616029][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 282.628194][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 282.692790][T14302] team0: Device vti0 is of different type [ 282.788141][T14308] syzkaller0: entered promiscuous mode [ 282.796197][T14310] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 282.818336][T14308] syzkaller0: entered allmulticast mode [ 282.834243][T14310] netlink: 'syz.2.2393': attribute type 44 has an invalid length. [ 282.845103][T14308] tipc: Enabled bearer , priority 0 [ 282.883226][T14308] sch_tbf: burst 11 is lower than device syzkaller0 mtu (1514) ! [ 282.924521][T14308] tipc: Resetting bearer [ 283.012678][T14308] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.036876][T14313] gretap1: entered promiscuous mode [ 283.046443][T14324] netlink: 'syz.4.2396': attribute type 2 has an invalid length. [ 283.082331][T14305] tipc: Resetting bearer [ 283.116681][T14305] tipc: Disabling bearer [ 283.188620][T14329] pim6reg: entered allmulticast mode [ 283.223584][T14331] pim6reg: left allmulticast mode [ 283.396808][T14343] tipc: Enabling of bearer rejected, failed to enable media [ 283.546420][T14348] syzkaller0: entered promiscuous mode [ 283.569062][T14348] syzkaller0: entered allmulticast mode [ 283.826022][T14357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.347614][T14397] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 284.372368][T14397] netlink: 'syz.2.2414': attribute type 10 has an invalid length. [ 284.615939][T14417] netlink: 'syz.0.2420': attribute type 10 has an invalid length. [ 284.733791][T14424] gretap1: entered promiscuous mode [ 284.739316][T14424] gretap1: entered allmulticast mode [ 285.093993][T14438] tipc: Enabled bearer , priority 0 [ 285.108058][T14438] syzkaller0: entered promiscuous mode [ 285.115358][T14438] syzkaller0: entered allmulticast mode [ 285.125053][T14438] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.164284][T14439] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.177964][T14438] tipc: Resetting bearer [ 285.188670][T14437] tipc: Resetting bearer [ 285.260144][T14437] tipc: Disabling bearer [ 285.626678][T14476] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 285.721945][T14479] bond9: (slave geneve2): making interface the new active one [ 285.731642][T14479] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 285.744504][T12070] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.774505][T12070] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.901916][T12070] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.945930][T12070] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 286.501766][T14525] __nla_validate_parse: 20 callbacks suppressed [ 286.501791][T14525] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2452'. [ 286.510367][T14516] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 286.639548][T14516] netlink: 'syz.4.2449': attribute type 10 has an invalid length. [ 286.668327][T14516] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2449'. [ 286.767475][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 286.888517][T14542] lo speed is unknown, defaulting to 1000 [ 287.264036][T14563] nbd1: detected capacity change from 0 to 63 [ 287.293997][T14567] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 287.427729][ T5870] block nbd1: Receive control failed (result -32) [ 287.542245][T14578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.557446][T14579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.582599][T14579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.633839][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 287.663879][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2465'. [ 287.739861][T14542] hsr0 speed is unknown, defaulting to 1000 [ 287.875563][T14594] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 287.919650][T14594] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2471'. [ 288.270405][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 288.659106][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2479'. [ 288.670994][T14631] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2479'. [ 288.812690][T14640] netlink: 'syz.2.2483': attribute type 6 has an invalid length. [ 288.873487][T14640] netlink: 'syz.2.2483': attribute type 6 has an invalid length. [ 289.102038][T14652] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2488'. [ 289.131863][T14654] ip6gre2: entered allmulticast mode [ 289.139530][T14652] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 289.156006][T14657] IPVS: set_ctl: invalid protocol: 46 172.30.1.1:20000 [ 289.229737][ T978] IPVS: starting estimator thread 0... [ 289.235913][T14664] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.345194][T14665] IPVS: using max 25 ests per chain, 60000 per kthread [ 289.589973][T14684] tipc: Enabling of bearer rejected, media not registered [ 291.077846][T14765] syzkaller0: entered allmulticast mode [ 291.178960][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 291.371568][T14785] openvswitch: netlink: Unknown key attributes 2 [ 291.383461][T14785] ip6gretap0: entered promiscuous mode [ 291.486448][T14790] IPVS: set_ctl: invalid protocol: 4 172.30.1.5:20003 [ 291.842184][T14816] wg1: entered promiscuous mode [ 291.847250][T14816] wg1: entered allmulticast mode [ 291.910890][T14819] netlink: ct family unspecified [ 291.916139][T14819] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.034543][T14823] vxcan1: tx address claim with different name [ 292.805461][T14863] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 292.932104][T14866] __nla_validate_parse: 12 callbacks suppressed [ 292.932125][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 293.145038][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 293.215648][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 293.225684][T14880] tipc: Enabled bearer , priority 0 [ 293.255331][T14880] tipc: Disabling bearer [ 293.287399][T14883] sctp: [Deprecated]: syz.3.2559 (pid 14883) Use of int in max_burst socket option. [ 293.287399][T14883] Use struct sctp_assoc_value instead [ 293.783778][T14912] veth0: entered promiscuous mode [ 293.791025][T14912] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 293.814115][T14912] team0: Device ipvlan1 failed to register rx_handler [ 293.871865][T14912] veth0: left promiscuous mode [ 294.034239][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 294.080414][T12069] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.093808][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 294.103770][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 294.126133][T12069] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.134749][T12069] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.146129][T12069] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.397768][T14954] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 294.402239][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2579'. [ 294.962470][T14995] syzkaller1: entered promiscuous mode [ 294.968009][T14995] syzkaller1: entered allmulticast mode [ 295.295775][T15010] nftables ruleset with unbound set [ 295.454429][T15020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2596'. [ 295.475291][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 295.714650][T15025] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.403756][T15067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.690811][T15082] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2617'. [ 296.711892][T15082] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 296.738949][T15082] openvswitch: netlink: Duplicate key (type 0). [ 297.585037][T15130] delete_channel: no stack [ 298.106787][T15168] tipc: Enabled bearer , priority 0 [ 298.118432][T15168] syzkaller0: entered promiscuous mode [ 298.135589][T15168] syzkaller0: entered allmulticast mode [ 298.221156][T15168] tipc: Resetting bearer [ 298.252161][T15176] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 298.299807][T15166] tipc: Resetting bearer [ 298.371176][T15166] tipc: Disabling bearer [ 298.395190][T15176] syzkaller1: entered promiscuous mode [ 298.401262][T15176] syzkaller1: entered allmulticast mode [ 298.421477][T15185] __nla_validate_parse: 5 callbacks suppressed [ 298.421498][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2654'. [ 298.760152][T15212] netlink: 'syz.1.2663': attribute type 27 has an invalid length. [ 298.796497][T15211] : entered promiscuous mode [ 298.904124][T15220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2665'. [ 299.248687][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.266040][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.312173][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 299.346834][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.374267][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.393066][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.423230][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.457412][T15236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2670'. [ 299.664417][T15257] nbd: couldn't find a device at index -28 [ 299.716825][T15259] sctp: [Deprecated]: syz.3.2674 (pid 15259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.716825][T15259] Use struct sctp_sack_info instead [ 300.032613][T15274] netlink: 'syz.4.2680': attribute type 5 has an invalid length. [ 300.060758][T15272] 8021q: adding VLAN 0 to HW filter on device bond11 [ 300.658156][T15297] syzkaller1: entered promiscuous mode [ 300.665074][T15297] syzkaller1: entered allmulticast mode [ 300.796694][T15306] gretap2: entered promiscuous mode [ 300.814477][T15306] gretap2: entered allmulticast mode [ 301.134978][T15333] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.145618][T15332] tipc: MTU too low for tipc bearer [ 301.663209][T15369] netlink: 'syz.4.2712': attribute type 3 has an invalid length. [ 301.715240][T15361] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 302.020853][T15386] netlink: 'syz.4.2716': attribute type 4 has an invalid length. [ 302.059538][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.125793][T15386] netlink: 'syz.4.2716': attribute type 4 has an invalid length. [ 302.165756][ T978] lo speed is unknown, defaulting to 1000 [ 302.172350][ T978] syz2: Port: 1 Link ACTIVE [ 302.180530][T15386] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 302.217093][ T43] lo speed is unknown, defaulting to 1000 [ 302.514291][T15356] syzkaller0: entered promiscuous mode [ 302.520510][T15356] syzkaller0: entered allmulticast mode [ 304.356503][T15422] tipc: Enabled bearer , priority 0 [ 304.451463][T15429] hsr_slave_0 (unregistering): left promiscuous mode [ 304.493508][T15422] tipc: Disabling bearer [ 304.645283][T15440] __nla_validate_parse: 48 callbacks suppressed [ 304.645306][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 304.729877][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 304.750709][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 304.761519][T15447] bridge_slave_0: entered promiscuous mode [ 304.875896][T15450] bpq0: left allmulticast mode [ 304.917361][T15454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2737'. [ 305.034980][T15460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.219997][T15477] delete_channel: no stack [ 305.412713][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 305.430240][T15489] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 305.452795][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 305.475032][T15489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2746'. [ 305.654731][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2751'. [ 305.963951][T15519] bond0: entered allmulticast mode [ 305.989599][T15519] ip6gretap1: entered allmulticast mode [ 306.000384][T15519] veth9: entered allmulticast mode [ 306.113906][T15536] netlink: 'syz.2.2760': attribute type 2 has an invalid length. [ 306.254149][T15542] bridge_slave_0: entered promiscuous mode [ 306.266330][T15544] netlink: 'syz.4.2763': attribute type 1 has an invalid length. [ 306.279352][T15544] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2763'. [ 306.332839][T15549] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 306.427331][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 306.710469][T15563] nbd2: detected capacity change from 0 to 127 [ 306.725432][ T5870] block nbd2: Receive control failed (result -32) [ 306.829628][T15577] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 308.158194][T15650] tipc: Enabling of bearer rejected, failed to enable media [ 308.511977][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.477881][T15718] bridge14: entered promiscuous mode [ 309.488975][T15718] bridge14: entered allmulticast mode [ 309.669348][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.680830][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.693687][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.705356][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.721002][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.736808][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.739276][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 309.768323][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.777617][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.794592][T15733] __nla_validate_parse: 6 callbacks suppressed [ 309.794611][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2819'. [ 309.819620][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.832700][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.986340][T15729] lo speed is unknown, defaulting to 1000 [ 310.056351][T15747] netlink: 'syz.0.2820': attribute type 4 has an invalid length. [ 310.065052][T15747] netlink: 'syz.0.2820': attribute type 4 has an invalid length. [ 310.103921][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 310.328266][T15759] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2824'. [ 310.399132][T15759] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2824'. [ 310.421176][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 310.453161][T15754] tipc: Enabled bearer , priority 0 [ 310.478018][T15754] syzkaller0: entered promiscuous mode [ 310.498637][T15754] syzkaller0: entered allmulticast mode [ 310.564692][T15729] hsr0 speed is unknown, defaulting to 1000 [ 310.568417][T15754] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.758173][T15775] openvswitch: netlink: Actions may not be safe on all matching packets [ 310.798066][T15753] tipc: Resetting bearer [ 310.903955][T15751] tipc: Resetting bearer [ 310.934183][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 310.962410][T15751] tipc: Disabling bearer [ 311.419512][T15729] chnl_net:caif_netlink_parms(): no params data found [ 311.543817][T15809] syzkaller0: entered promiscuous mode [ 311.551380][T15809] syzkaller0: entered allmulticast mode [ 311.664395][T15729] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.667320][T15821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.679076][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.699609][T15729] bridge_slave_0: entered allmulticast mode [ 311.708516][T15729] bridge_slave_0: entered promiscuous mode [ 311.724784][T15729] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.748639][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.764619][T15729] bridge_slave_1: entered allmulticast mode [ 311.783858][T15729] bridge_slave_1: entered promiscuous mode [ 311.884940][T15729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.899641][ T5870] Bluetooth: hci4: command tx timeout [ 311.912141][T15729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.001940][T15729] team0: Port device team_slave_0 added [ 312.012041][T15729] team0: Port device team_slave_1 added [ 312.153443][T15729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.164209][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.193896][T15838] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 312.195352][T15729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.285052][T15729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.299854][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.333959][T15729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.345412][T15842] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 312.515123][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 312.536579][T15854] netlink: 'syz.2.2852': attribute type 21 has an invalid length. [ 312.587736][T15857] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2854'. [ 312.644731][T15857] netlink: 'syz.0.2854': attribute type 12 has an invalid length. [ 312.663810][T15858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.666595][T15729] hsr_slave_0: entered promiscuous mode [ 312.709410][T15729] hsr_slave_1: entered promiscuous mode [ 312.724950][T15729] debugfs: 'hsr0' already exists in 'hsr' [ 312.748592][T15729] Cannot create hsr debugfs directory [ 313.113117][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 313.164341][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2862'. [ 313.274957][T15888] hsr_slave_0 (unregistering): left promiscuous mode [ 313.278201][T15894] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 313.344548][ T1044] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.370544][ T1044] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.615386][T15729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.640979][T15729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.660820][T15729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.692449][ T1044] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.756388][ T1044] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.843554][T15729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.868044][T15729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.893122][T15729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.979903][ T5870] Bluetooth: hci4: command tx timeout [ 314.025217][T15729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.043715][T15729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.058221][T15729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.234831][T15729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.251649][T15729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.273418][T15729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.310740][T15931] lo speed is unknown, defaulting to 1000 [ 314.344577][T15928] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 314.423581][T15945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.687883][T15729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.772041][T15729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.806762][T15729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.851753][T15729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.877538][T15931] hsr0 speed is unknown, defaulting to 1000 [ 314.920777][T15961] __nla_validate_parse: 8 callbacks suppressed [ 314.920799][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 314.971595][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 315.164565][T15979] macsec0: entered promiscuous mode [ 315.170957][T15979] macsec0: entered allmulticast mode [ 315.176386][T15979] veth1_macvtap: entered allmulticast mode [ 315.184600][T15979] bridge0: port 1(macsec0) entered blocking state [ 315.193129][T15979] bridge0: port 1(macsec0) entered disabled state [ 315.367702][T15729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.397015][T15984] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2887'. [ 315.414174][T15987] sock: sock_timestamping_bind_phc: sock not bind to device [ 315.525413][T15729] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.579988][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.587196][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.606282][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.613723][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.657020][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2891'. [ 315.720608][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 315.734628][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 315.746969][T15994] IPVS: sed: FWM 3 0x00000003 - no destination available [ 315.765255][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 315.796257][T15992] bond0: (slave bridge_slave_1): Releasing backup interface [ 316.060606][ T5870] Bluetooth: hci4: command tx timeout [ 316.134744][T16004] tipc: Enabled bearer , priority 0 [ 316.147901][T16004] syzkaller0: entered promiscuous mode [ 316.155138][T16004] syzkaller0: entered allmulticast mode [ 316.190826][T16004] tipc: Resetting bearer [ 316.194583][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 316.230490][T16002] tipc: Resetting bearer [ 316.244725][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 316.279930][T16009] netlink: 'syz.0.2895': attribute type 6 has an invalid length. [ 316.307570][T16002] tipc: Disabling bearer [ 316.477059][T15729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.514207][T16027] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2899'. [ 316.556232][T16027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2899'. [ 316.662601][T15729] veth0_vlan: entered promiscuous mode [ 316.687195][T15729] veth1_vlan: entered promiscuous mode [ 316.732563][T15729] veth0_macvtap: entered promiscuous mode [ 316.763853][T15729] veth1_macvtap: entered promiscuous mode [ 316.806500][T15729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.810017][T16037] netlink: 'syz.2.2902': attribute type 10 has an invalid length. [ 316.821844][T15729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.842650][T16039] netlink: 'syz.4.2903': attribute type 2 has an invalid length. [ 316.855852][T16037] sctp: [Deprecated]: syz.2.2902 (pid 16037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.855852][T16037] Use struct sctp_sack_info instead [ 316.856678][T16039] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 316.885409][T12068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.900259][T12068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.953077][T12068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.991310][T12068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.071502][T16044] macsec1: entered promiscuous mode [ 317.081520][T16044] macsec1: entered allmulticast mode [ 317.114741][T16044] bridge0: entered allmulticast mode [ 317.124055][T16044] bridge0: port 1(macsec1) entered blocking state [ 317.130968][T16044] bridge0: port 1(macsec1) entered disabled state [ 317.147173][T16044] bridge0: left allmulticast mode [ 317.371813][T10216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.390733][T10216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.425642][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509032][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.542059][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.662432][T16067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.747516][T16069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.759828][T16069] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.773456][T16069] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 317.777931][T16076] netlink: 'syz.3.2803': attribute type 13 has an invalid length. [ 317.789674][T16076] netlink: 'syz.3.2803': attribute type 58 has an invalid length. [ 317.862527][T16074] hsr_slave_1 (unregistering): left promiscuous mode [ 318.141785][ T5870] Bluetooth: hci4: command tx timeout [ 318.852746][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.878600][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.888537][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.900484][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.918010][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.004175][T16105] lo speed is unknown, defaulting to 1000 [ 319.256633][ T2913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.285568][ T2913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.394043][ T2913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.423074][ T2913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.495040][T16105] hsr0 speed is unknown, defaulting to 1000 [ 319.533035][ T2913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.544330][ T2913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.564151][T16113] netlink: 'syz.3.2923': attribute type 1 has an invalid length. [ 319.584668][T16130] netlink: 'syz.4.2927': attribute type 18 has an invalid length. [ 319.811683][ T2913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.859907][ T2913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.985410][T16144] __nla_validate_parse: 9 callbacks suppressed [ 319.985431][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2932'. [ 320.003536][T16146] netlink: 'syz.0.2933': attribute type 83 has an invalid length. [ 320.369544][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2940'. [ 320.385356][T16162] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.412127][T16149] team0: Device macvtap1 is already an upper device of the team interface [ 320.431143][T16142] syzkaller1: entered promiscuous mode [ 320.436923][T16142] syzkaller1: entered allmulticast mode [ 320.484687][T16160] lo speed is unknown, defaulting to 1000 [ 320.837704][T16160] hsr0 speed is unknown, defaulting to 1000 [ 320.901997][T16177] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2943'. [ 321.019091][ T5870] Bluetooth: hci5: command tx timeout [ 321.207241][T16180] lo speed is unknown, defaulting to 1000 [ 321.232958][ T2913] bridge0: port 1(macsec0) entered disabled state [ 321.721626][T16203] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 322.162896][ T2913] bond0 (unregistering): Released all slaves [ 322.283028][ T2913] bond1 (unregistering): Released all slaves [ 322.404776][ T2913] bond2 (unregistering): Released all slaves [ 322.526269][ T2913] bond3 (unregistering): Released all slaves [ 322.541120][ T2913] bond4 (unregistering): Released all slaves [ 322.558642][ T2913] bond5 (unregistering): Released all slaves [ 322.577848][ T2913] bond6 (unregistering): (slave bond7): Releasing backup interface [ 322.587620][ T2913] bond6 (unregistering): Released all slaves [ 322.715673][ T2913] bond7 (unregistering): Released all slaves [ 322.838077][ T2913] bond8 (unregistering): Released all slaves [ 322.853771][ T2913] bond9 (unregistering): Released all slaves [ 322.866737][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 322.888546][T16105] chnl_net:caif_netlink_parms(): no params data found [ 322.950807][T16180] hsr0 speed is unknown, defaulting to 1000 [ 323.097797][ T2913] tipc: Disabling bearer [ 323.099208][ T5870] Bluetooth: hci5: command tx timeout [ 323.132511][ T2913] tipc: Disabling bearer [ 323.164320][ T2913] tipc: Left network mode [ 323.240552][T16217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.262527][T16218] sctp: [Deprecated]: syz.4.2952 (pid 16218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.262527][T16218] Use struct sctp_sack_info instead [ 323.292426][T16218] sctp: [Deprecated]: syz.4.2952 (pid 16218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.292426][T16218] Use struct sctp_sack_info instead [ 323.310290][T16217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.707628][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.735608][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.755984][T16105] bridge_slave_0: entered allmulticast mode [ 323.798303][T16105] bridge_slave_0: entered promiscuous mode [ 323.839706][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.846982][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.874293][T16105] bridge_slave_1: entered allmulticast mode [ 323.895565][T16105] bridge_slave_1: entered promiscuous mode [ 324.095204][T16241] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2959'. [ 324.105694][T16241] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 324.115100][T16241] openvswitch: netlink: Message has 6332 unknown bytes. [ 324.173176][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.242319][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.595632][T16105] team0: Port device team_slave_0 added [ 324.671209][ T2913] veth1_macvtap: left allmulticast mode [ 324.770696][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 324.815304][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 324.848477][T16273] netlink: 'syz.3.2966': attribute type 5 has an invalid length. [ 325.179070][ T5870] Bluetooth: hci5: command tx timeout [ 325.418153][T16105] team0: Port device team_slave_1 added [ 325.480970][T16272] veth0_to_bridge: left allmulticast mode [ 325.505197][T16272] veth0_to_bridge: left promiscuous mode [ 325.513166][T16272] bridge0: port 2(veth0_to_bridge) entered disabled state [ 325.563011][T16272] batadv1: left allmulticast mode [ 325.568201][T16272] batadv1: left promiscuous mode [ 325.577755][T16272] bridge0: port 1(batadv1) entered disabled state [ 325.658431][T16278] netlink: 'syz.3.2970': attribute type 2 has an invalid length. [ 325.690465][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.697778][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.763341][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.777629][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.785356][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.804100][T16284] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2972'. [ 325.813060][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.830729][T16284] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2972'. [ 325.835427][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 325.848562][T16284] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2972'. [ 325.870262][T16279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2970'. [ 325.891943][T16281] netem: change failed [ 325.913112][T16288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.985489][T16285] dummy0: entered promiscuous mode [ 325.994737][T16285] dummy0: left promiscuous mode [ 326.127014][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2973'. [ 326.243853][T16105] hsr_slave_0: entered promiscuous mode [ 326.290249][T16105] hsr_slave_1: entered promiscuous mode [ 326.317445][T16105] debugfs: 'hsr0' already exists in 'hsr' [ 326.345901][T16105] Cannot create hsr debugfs directory [ 326.487810][ T2913] IPVS: stop unused estimator thread 0... [ 326.543697][T16314] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2979'. [ 326.793011][T16319] IPVS: Unknown mcast interface: vcan0 [ 326.864108][T16320] geneve2: entered promiscuous mode [ 326.876396][T16320] geneve2: entered allmulticast mode [ 326.916730][T12069] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.994467][T16328] netlink: 'syz.4.2985': attribute type 6 has an invalid length. [ 327.050281][T12069] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.185064][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 327.243773][T16333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.259496][ T5870] Bluetooth: hci5: command tx timeout [ 327.265676][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 327.292127][T16351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2987'. [ 327.316032][T12069] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.338316][T12069] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.517182][T16333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.569688][T16356] netlink: 'syz.0.2992': attribute type 8 has an invalid length. [ 327.681114][T16333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.816418][T16333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.873746][T16369] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 328.053294][T16105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.093540][T16378] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 328.102915][T16378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.109982][T16377] netlink: 'syz.0.3000': attribute type 17 has an invalid length. [ 328.115978][T16378] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 328.128123][T12068] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.140559][T16105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.199789][T16378] 8021q: adding VLAN 0 to HW filter on device bond12 [ 328.226001][T16105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.284490][T12069] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.305003][T12069] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.308024][T16384] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 328.345798][T16105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.417819][T12068] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.731192][T16105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.792053][T16105] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.810400][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.817676][T12069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.836272][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.843867][T12069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.265266][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.431947][T16105] veth0_vlan: entered promiscuous mode [ 329.523422][T16105] veth1_vlan: entered promiscuous mode [ 329.650679][T16105] veth0_macvtap: entered promiscuous mode [ 329.681942][T16105] veth1_macvtap: entered promiscuous mode [ 329.766045][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.806941][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.867348][T16443] bridge6: entered promiscuous mode [ 329.875199][T16443] bridge6: entered allmulticast mode [ 329.882990][T16445] lo speed is unknown, defaulting to 1000 [ 329.957742][T16455] lo: left allmulticast mode [ 329.965337][T12068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.999717][T12068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.008573][T12068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.068933][T12068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.208039][T16461] xt_limit: Overflow, try lower: 271964/0 [ 330.257287][T16445] hsr0 speed is unknown, defaulting to 1000 [ 330.454880][T12068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.499547][T12068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.666269][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.697701][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.857024][T16479] unknown channel width for channel at 909000KHz? [ 331.319464][T16501] __nla_validate_parse: 8 callbacks suppressed [ 331.319483][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 331.543340][T16505] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 331.607953][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 332.169927][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.183147][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.191947][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.210643][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.215608][T16530] sctp: [Deprecated]: syz.0.3042 (pid 16530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.215608][T16530] Use struct sctp_sack_info instead [ 332.241289][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.326193][T16526] lo speed is unknown, defaulting to 1000 [ 332.483370][T16534] lo speed is unknown, defaulting to 1000 [ 332.677689][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 332.810772][T16526] hsr0 speed is unknown, defaulting to 1000 [ 332.901200][T16540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3045'. [ 332.930806][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 332.950934][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.014014][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.046960][T16561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.053283][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.111704][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.141510][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.263382][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.302901][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.349873][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.372405][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.415609][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.447194][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.526476][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.552229][T16576] delete_channel: no stack [ 333.574870][T16558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.615882][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.642108][T16569] syzkaller0: entered promiscuous mode [ 333.645932][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 333.647694][T16569] syzkaller0: entered allmulticast mode [ 333.704873][T16558] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 334.313838][ T5185] Bluetooth: hci2: command tx timeout [ 335.681768][T16526] chnl_net:caif_netlink_parms(): no params data found [ 335.807881][T16589] netlink: 'syz.1.3057': attribute type 8 has an invalid length. [ 335.933600][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.961393][T16526] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.979168][T16526] bridge_slave_0: entered allmulticast mode [ 335.987670][T16526] bridge_slave_0: entered promiscuous mode [ 336.008977][T16605] openvswitch: netlink: Tunnel attr 2 has unexpected len 16 expected 4 [ 336.018530][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.026338][T16526] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.028399][T16606] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.034438][T16605] openvswitch: netlink: Tunnel attr 2 has unexpected len 16 expected 4 [ 336.052054][T16526] bridge_slave_1: entered allmulticast mode [ 336.081079][T16526] bridge_slave_1: entered promiscuous mode [ 336.221795][T16526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.255762][T16608] netlink: 'syz.4.3063': attribute type 83 has an invalid length. [ 336.329635][T16526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.379469][ T5185] Bluetooth: hci2: command tx timeout [ 336.430279][T16614] __nla_validate_parse: 27 callbacks suppressed [ 336.430298][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 336.939528][T16634] netlink: 'syz.4.3070': attribute type 6 has an invalid length. [ 336.975560][T16526] team0: Port device team_slave_0 added [ 336.993643][T16526] team0: Port device team_slave_1 added [ 337.161797][T16526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.173699][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.243562][T16526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.270485][T16648] netlink: 'syz.4.3075': attribute type 83 has an invalid length. [ 337.279464][T16526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.287629][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.339532][T16526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.573216][T16526] hsr_slave_0: entered promiscuous mode [ 337.583286][T16526] hsr_slave_1: entered promiscuous mode [ 337.592944][T16526] debugfs: 'hsr0' already exists in 'hsr' [ 337.599279][T16526] Cannot create hsr debugfs directory [ 337.746042][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 337.803768][T16672] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3085'. [ 337.815487][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 337.823588][T16670] team0: Device ip6gre1 is of different type [ 337.848221][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.856940][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.886327][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.911155][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.123591][T16526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.274740][T16526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.351032][T16687] netlink: 'syz.0.3091': attribute type 7 has an invalid length. [ 338.391225][T16526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.464197][ T5185] Bluetooth: hci2: command tx timeout [ 338.506620][T16526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.036875][T16725] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3102'. [ 339.093451][T16526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.128400][T16526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.142459][T16526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.182164][T16526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.247254][T16728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 339.267060][T16728] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.280317][T16728] gretap3: entered promiscuous mode [ 339.287654][T16728] gretap3: entered allmulticast mode [ 339.666661][T16526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.744437][T16526] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.800507][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.807764][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.840278][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.847590][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.965110][T16526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.024703][T16526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.400369][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3118'. [ 340.549439][ T5185] Bluetooth: hci2: command tx timeout [ 340.590147][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3119'. [ 341.048046][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 341.052332][T16526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.286282][T16526] veth0_vlan: entered promiscuous mode [ 341.297597][T16800] syzkaller1: entered promiscuous mode [ 341.304706][T16800] syzkaller1: entered allmulticast mode [ 341.660137][T16526] veth1_vlan: entered promiscuous mode [ 341.816734][T16526] veth0_macvtap: entered promiscuous mode [ 341.881554][T16526] veth1_macvtap: entered promiscuous mode [ 341.950823][T16838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3129'. [ 341.987931][T16838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3129'. [ 342.071720][T16526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.112322][T16526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.145013][T12069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.166943][T12069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.211835][T12069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.234253][T12069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.454645][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.480003][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.547519][T12070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.556583][T12070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.760518][T16850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 344.115864][T16885] netem: unknown loss type 0 [ 344.120903][T16885] netem: change failed [ 344.338041][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.361223][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.375283][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.387082][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.401755][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.620036][T16897] lo speed is unknown, defaulting to 1000 [ 344.810841][ T6932] IPVS: starting estimator thread 0... [ 344.884455][T16926] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 344.900114][T16920] IPVS: using max 24 ests per chain, 57600 per kthread [ 344.944410][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 344.974989][T16926] netlink: 'syz.2.3156': attribute type 4 has an invalid length. [ 345.019969][T16927] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3156'. [ 345.273669][T16936] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3161'. [ 345.320584][T16897] hsr0 speed is unknown, defaulting to 1000 [ 345.524142][T16942] pim6reg1: entered promiscuous mode [ 345.535181][T16942] pim6reg1: entered allmulticast mode [ 345.632384][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'. [ 345.642836][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 346.016940][T16964] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3170'. [ 346.103502][T16973] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 346.133356][T16973] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3172'. [ 346.158613][T16973] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 346.193731][T16897] chnl_net:caif_netlink_parms(): no params data found [ 346.354250][T16985] netlink: 'syz.0.3175': attribute type 4 has an invalid length. [ 346.458993][ T5185] Bluetooth: hci1: command tx timeout [ 346.466094][T16897] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.477786][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.486860][T16897] bridge_slave_0: entered allmulticast mode [ 346.495856][T16897] bridge_slave_0: entered promiscuous mode [ 346.506361][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.514088][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.521650][T16897] bridge_slave_1: entered allmulticast mode [ 346.531206][T16897] bridge_slave_1: entered promiscuous mode [ 346.587783][T16897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.603539][T16897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.661482][T16897] team0: Port device team_slave_0 added [ 346.672641][T16897] team0: Port device team_slave_1 added [ 346.767871][T16897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.789855][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.819235][T16897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.835669][T16897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.846317][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.874606][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 346.894301][T16897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.920821][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'. [ 347.142069][T17023] netlink: 'syz.2.3184': attribute type 2 has an invalid length. [ 347.177494][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 347.194031][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 347.386528][T16897] hsr_slave_0: entered promiscuous mode [ 347.401210][T16897] hsr_slave_1: entered promiscuous mode [ 347.422395][T16897] debugfs: 'hsr0' already exists in 'hsr' [ 347.428406][T16897] Cannot create hsr debugfs directory [ 347.612727][T17030] syzkaller0: entered promiscuous mode [ 347.618471][T17030] syzkaller0: entered allmulticast mode [ 347.676143][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 348.540909][ T5185] Bluetooth: hci1: command tx timeout [ 349.588661][T17049] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3192'. [ 349.706241][T17057] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 349.788612][T17064] tipc: Enabled bearer , priority 0 [ 349.802551][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'. [ 349.817617][T17068] bridge_slave_1: left allmulticast mode [ 349.823793][T17068] bridge_slave_1: left promiscuous mode [ 349.830548][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.843061][T17068] bridge_slave_0: left allmulticast mode [ 349.849740][T17068] bridge_slave_0: left promiscuous mode [ 349.855764][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.863909][T17064] netlink: 'syz.0.3193': attribute type 10 has an invalid length. [ 349.943662][T17061] tipc: Resetting bearer [ 350.018272][T17068] pim6reg1: entered promiscuous mode [ 350.024295][T17068] pim6reg1: entered allmulticast mode [ 350.037760][T16897] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.105776][T17060] tipc: Disabling bearer [ 350.122078][T16897] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.181546][T16897] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.225814][T17074] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 350.237273][T17074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3196'. [ 350.248674][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 350.254509][T16897] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.597196][T16897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.620963][ T5185] Bluetooth: hci1: command tx timeout [ 350.624032][T17087] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3201'. [ 350.689335][T16897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.727653][T16897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.855128][T17095] dvmrp0: entered allmulticast mode [ 350.904224][T16897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.948461][T17104] netlink: 'syz.0.3204': attribute type 12 has an invalid length. [ 350.965096][T17104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3204'. [ 351.066620][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3205'. [ 351.377177][T16897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.424864][T16897] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.452703][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.460064][T12069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.472710][T17129] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.537415][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.544665][T12068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.652670][T17132] netlink: 'syz.3.3211': attribute type 7 has an invalid length. [ 351.698059][T17132] : entered promiscuous mode [ 352.022709][T17144] pim6reg527: entered allmulticast mode [ 352.207091][T16897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.650633][T17168] __nla_validate_parse: 1 callbacks suppressed [ 352.650655][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 352.668528][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3220'. [ 352.671365][T17136] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.699397][ T5185] Bluetooth: hci1: command tx timeout [ 352.745087][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.761851][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.779517][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.815319][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.867427][T17175] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3222'. [ 352.925447][T17175] unknown channel width for channel at 909000KHz? [ 352.942320][T17175] unknown channel width for channel at 909000KHz? [ 352.987883][T16897] veth0_vlan: entered promiscuous mode [ 353.013728][T17175] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 353.164171][T17183] gtp1: entered promiscuous mode [ 353.202777][T17183] gtp1: entered allmulticast mode [ 353.232606][T16897] veth1_vlan: entered promiscuous mode [ 353.525797][T16897] veth0_macvtap: entered promiscuous mode [ 353.560480][T16897] veth1_macvtap: entered promiscuous mode [ 353.602913][T16897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.655364][T16897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.700705][T12069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.730787][T12069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.754465][T12069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.778928][T12069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.942113][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.970416][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.070219][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.100756][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.173475][T17203] netlink: 'syz.2.3230': attribute type 10 has an invalid length. [ 354.229241][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3230'. [ 354.338419][T17203] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 354.380687][T17206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3139'. [ 354.907050][T17159] syz.1.3217: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 354.951726][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.1.3217 Not tainted syzkaller #0 PREEMPT(full) [ 354.951760][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.951772][T17159] Call Trace: [ 354.951781][T17159] [ 354.951790][T17159] dump_stack_lvl+0x189/0x250 [ 354.951826][T17159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.951850][T17159] ? __pfx__printk+0x10/0x10 [ 354.951879][T17159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.951904][T17159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.951930][T17159] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 354.951957][T17159] warn_alloc+0x214/0x310 [ 354.951995][T17159] ? __pfx_warn_alloc+0x10/0x10 [ 354.952037][T17159] ? __get_vm_area_node+0x28f/0x300 [ 354.952066][T17159] ? hash_netport4_resize+0x235/0x1b60 [ 354.952093][T17159] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 354.952159][T17159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.952197][T17159] ? rcu_is_watching+0x15/0xb0 [ 354.952219][T17159] ? hash_netport4_resize+0x235/0x1b60 [ 354.952240][T17159] ? hash_netport4_resize+0x235/0x1b60 [ 354.952258][T17159] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 354.952288][T17159] ? hash_netport4_resize+0x235/0x1b60 [ 354.952319][T17159] hash_netport4_resize+0x235/0x1b60 [ 354.952348][T17159] ? hash_netport4_uadt+0xc97/0xf30 [ 354.952377][T17159] ? __pfx_hash_netport4_add+0x10/0x10 [ 354.952400][T17159] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 354.952435][T17159] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 354.952472][T17159] call_ad+0x44e/0xb00 [ 354.952511][T17159] ? __pfx_call_ad+0x10/0x10 [ 354.952556][T17159] ? __nla_parse+0x40/0x60 [ 354.952593][T17159] ip_set_ad+0x791/0x930 [ 354.952632][T17159] ? __pfx_ip_set_ad+0x10/0x10 [ 354.952709][T17159] nfnetlink_rcv_msg+0xb4a/0x1130 [ 354.952739][T17159] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 354.952790][T17159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 354.952814][T17159] ? kasan_save_free_info+0x46/0x50 [ 354.952898][T17159] netlink_rcv_skb+0x205/0x470 [ 354.952930][T17159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 354.952959][T17159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.953004][T17159] ? bpf_lsm_capable+0x9/0x20 [ 354.953030][T17159] ? security_capable+0x7e/0x2e0 [ 354.953069][T17159] nfnetlink_rcv+0x26a/0x2520 [ 354.953100][T17159] ? __dev_queue_xmit+0x1d79/0x3b50 [ 354.953138][T17159] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.953178][T17159] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 354.953205][T17159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.953246][T17159] ? ref_tracker_free+0x63a/0x7d0 [ 354.953273][T17159] ? __asan_memcpy+0x40/0x70 [ 354.953295][T17159] ? __pfx_ref_tracker_free+0x10/0x10 [ 354.953351][T17159] ? skb_clone+0x246/0x3a0 [ 354.953378][T17159] ? __netlink_deliver_tap+0x807/0x850 [ 354.953408][T17159] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.953453][T17159] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.953499][T17159] netlink_unicast+0x82c/0x9e0 [ 354.953538][T17159] ? __pfx_netlink_unicast+0x10/0x10 [ 354.953568][T17159] ? netlink_sendmsg+0x642/0xb30 [ 354.953584][T17159] ? skb_put+0x11b/0x210 [ 354.953610][T17159] netlink_sendmsg+0x805/0xb30 [ 354.953641][T17159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.953666][T17159] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.953689][T17159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.953710][T17159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.953731][T17159] __sock_sendmsg+0x21c/0x270 [ 354.953763][T17159] ____sys_sendmsg+0x505/0x830 [ 354.953793][T17159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.953828][T17159] ? import_iovec+0x74/0xa0 [ 354.953857][T17159] ___sys_sendmsg+0x21f/0x2a0 [ 354.953882][T17159] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.953952][T17159] ? __fget_files+0x2a/0x420 [ 354.953969][T17159] ? __fget_files+0x3a0/0x420 [ 354.954001][T17159] __x64_sys_sendmsg+0x19b/0x260 [ 354.954028][T17159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.954064][T17159] ? rcu_is_watching+0x15/0xb0 [ 354.954090][T17159] ? do_syscall_64+0xbe/0x3b0 [ 354.954115][T17159] do_syscall_64+0xfa/0x3b0 [ 354.954131][T17159] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.954160][T17159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.954179][T17159] ? clear_bhb_loop+0x60/0xb0 [ 354.954204][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.954223][T17159] RIP: 0033:0x7fc51198ebe9 [ 354.954242][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.954260][T17159] RSP: 002b:00007fc50fbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.954283][T17159] RAX: ffffffffffffffda RBX: 00007fc511bc5fa0 RCX: 00007fc51198ebe9 [ 354.954297][T17159] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 354.954310][T17159] RBP: 00007fc511a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 354.954322][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.954333][T17159] R13: 00007fc511bc6038 R14: 00007fc511bc5fa0 R15: 00007ffcbe622518 [ 354.954376][T17159] [ 354.957670][T17222] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3236'. [ 355.002201][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3237'. [ 355.015868][T17159] Mem-Info: [ 355.353930][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.369497][T17159] active_anon:3779 inactive_anon:0 isolated_anon:0 [ 355.369497][T17159] active_file:2949 inactive_file:39956 isolated_file:0 [ 355.369497][T17159] unevictable:768 dirty:43 writeback:0 [ 355.369497][T17159] slab_reclaimable:12679 slab_unreclaimable:119915 [ 355.369497][T17159] mapped:29966 shmem:1408 pagetables:974 [ 355.369497][T17159] sec_pagetables:0 bounce:0 [ 355.369497][T17159] kernel_misc_reclaimable:0 [ 355.369497][T17159] free:1307675 free_pcp:13306 free_cma:0 [ 355.384204][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.417927][T17159] Node 0 active_anon:15116kB inactive_anon:0kB active_file:11796kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119864kB dirty:172kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13592kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.422770][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.483149][T17159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.495567][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.538365][T17159] Node 0 [ 355.550311][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.664641][T17159] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.704410][T17159] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 355.719917][T17159] Node 0 DMA32 free:1322864kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14968kB inactive_anon:0kB active_file:11796kB inactive_file:158060kB unevictable:1536kB writepending:168kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:40936kB local_pcp:22024kB free_cma:0kB [ 355.808550][T17159] lowmem_reserve[]: 0 0 1 1 1 [ 355.814571][T17159] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 355.845431][T17235] bond1: entered allmulticast mode [ 355.845892][T17235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.861532][T17159] lowmem_reserve[]: 0 0 0 0 0 [ 355.866418][T17159] Node 1 Normal free:3892412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12576kB local_pcp:6528kB free_cma:0kB [ 355.927887][T17159] lowmem_reserve[]: 0 0 0 0 0 [ 355.934212][T17159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.947748][T17159] Node 0 DMA32: 636*4kB (ME) 172*8kB (UME) 31*16kB (M) 8*32kB (UME) 4*64kB (UME) 2*128kB (ME) 6*256kB (ME) 6*512kB (ME) 6*1024kB (UME) 8*2048kB (M) 315*4096kB (UM) = 1322560kB [ 355.966369][T17159] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 355.979616][T17159] Node 1 Normal: 201*4kB (UME) 45*8kB (UME) 45*16kB (UME) 167*32kB (UME) 46*64kB (UME) 4*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3892412kB [ 356.000603][T17159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.012301][T17159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.055531][T17159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.081670][T17159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.092063][T17159] 44260 total pagecache pages [ 356.124965][T17229] lo speed is unknown, defaulting to 1000 [ 356.179610][T17159] 0 pages in swap cache [ 356.183858][T17159] Free swap = 124996kB [ 356.188123][T17159] Total swap = 124996kB [ 356.243917][T17159] 2097051 pages RAM [ 356.248174][T17159] 0 pages HighMem/MovableOnly [ 356.297214][T17159] 425667 pages reserved [ 356.302757][T17159] 0 pages cma reserved [ 356.437414][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'. [ 356.472656][T17258] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 356.500204][T17258] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 356.519696][T17258] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 356.534919][T17258] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3244'. [ 356.546992][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 356.988686][T17229] hsr0 speed is unknown, defaulting to 1000 [ 357.490896][T17299] netlink: 'syz.3.3257': attribute type 10 has an invalid length. [ 357.537769][T17299] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.610120][T17299] bond0: (slave team0): Enslaving as an active interface with an up link [ 357.741416][ T5870] Bluetooth: hci0: command tx timeout [ 357.769976][T17229] chnl_net:caif_netlink_parms(): no params data found [ 357.957669][T17315] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 357.988561][T17320] netlink: 'syz.4.3261': attribute type 21 has an invalid length. [ 357.997621][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.013189][T17313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.026530][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.050413][T17313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.116916][T17317] tipc: Started in network mode [ 358.122614][T17317] tipc: Node identity 2e823316426, cluster identity 4711 [ 358.133999][T17317] tipc: Enabled bearer , priority 0 [ 358.151066][T17315] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 358.212096][T17308] syzkaller0: entered promiscuous mode [ 358.228037][T17308] syzkaller0: entered allmulticast mode [ 358.373845][T17308] tipc: Resetting bearer [ 358.411748][T17229] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.424364][T17229] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.435180][T17229] bridge_slave_0: entered allmulticast mode [ 358.444230][T17229] bridge_slave_0: entered promiscuous mode [ 358.457222][T17307] tipc: Resetting bearer [ 358.495726][T17307] tipc: Disabling bearer [ 358.511305][T17229] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.520548][T17229] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.529654][T17229] bridge_slave_1: entered allmulticast mode [ 358.537084][T17229] bridge_slave_1: entered promiscuous mode [ 358.682389][T17229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.718515][T17229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.814701][T17351] __nla_validate_parse: 1 callbacks suppressed [ 358.814725][T17351] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3268'. [ 358.931942][T17360] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 358.943027][T17229] team0: Port device team_slave_0 added [ 358.956422][T17229] team0: Port device team_slave_1 added [ 359.125554][T17370] netlink: 'syz.1.3274': attribute type 21 has an invalid length. [ 359.215818][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 359.426826][T17229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.458264][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.546602][T17229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.586968][T17229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.620059][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.672726][T17229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.819876][ T5870] Bluetooth: hci0: command tx timeout [ 359.848398][T17403] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 360.013162][T17406] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 360.027043][T17406] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 360.111785][T17405] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 360.124705][T17405] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 360.251921][T17229] hsr_slave_0: entered promiscuous mode [ 360.275720][T17229] hsr_slave_1: entered promiscuous mode [ 360.302359][T17229] debugfs: 'hsr0' already exists in 'hsr' [ 360.331847][T17229] Cannot create hsr debugfs directory [ 360.518828][T17425] netlink: 'syz.3.3284': attribute type 25 has an invalid length. [ 360.569688][T17427] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3285'. [ 360.590001][T17427] gretap0: entered promiscuous mode [ 360.978548][T17446] blkio.reset_stats is deprecated [ 361.007364][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3290'. [ 361.500979][T17466] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 361.513687][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3296'. [ 361.899750][ T5870] Bluetooth: hci0: command tx timeout [ 362.214948][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.295097][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.913579][T17483] team0: Device vti0 is of different type [ 363.148377][ T59] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.159945][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.177010][T17494] tipc: Started in network mode [ 363.185115][T17494] tipc: Node identity ac14142f, cluster identity 4711 [ 363.208550][T17494] tipc: New replicast peer: 0.0.0.0 [ 363.250094][T17494] tipc: Enabled bearer , priority 10 [ 363.264657][ T59] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.309338][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.339879][ T59] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.372197][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.395734][T17508] !: renamed from dummy0 (while UP) [ 363.423859][T17511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3304'. [ 363.434118][ T59] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.452070][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.573318][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 363.695561][T17229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.748184][T17229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.796328][T17229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.845659][T17229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.979978][ T5870] Bluetooth: hci0: command tx timeout [ 364.017152][T17544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.362429][T17229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.379915][T17478] tipc: Node number set to 2886997039 [ 364.458300][T17229] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.559905][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.567163][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.621809][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.629107][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.746310][T17587] netlink: 'syz.2.3324': attribute type 21 has an invalid length. [ 364.850669][T17587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3324'. [ 364.896180][T17592] syzkaller1: entered promiscuous mode [ 364.907662][T17592] syzkaller1: entered allmulticast mode [ 365.014096][T17599] netlink: 'syz.2.3328': attribute type 83 has an invalid length. [ 365.252139][T17229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.329452][T17613] netlink: 'syz.3.3331': attribute type 12 has an invalid length. [ 365.337331][T17613] netlink: 'syz.3.3331': attribute type 29 has an invalid length. [ 365.347267][T17613] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3331'. [ 365.366553][T17613] netlink: 'syz.3.3331': attribute type 2 has an invalid length. [ 365.375600][T17613] netlink: 'syz.3.3331': attribute type 3 has an invalid length. [ 365.479979][T17229] veth0_vlan: entered promiscuous mode [ 365.518136][T17229] veth1_vlan: entered promiscuous mode [ 365.637317][T17229] veth0_macvtap: entered promiscuous mode [ 365.679737][T17229] veth1_macvtap: entered promiscuous mode [ 365.746878][T17229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.874715][T17229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.912152][T12068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.932348][T12068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.011061][ T2913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.046353][ T2913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.059638][ T5870] Bluetooth: hci0: command tx timeout [ 366.186745][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3341'. [ 366.195229][T17647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3342'. [ 366.353634][T17654] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 366.368995][T12070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.389598][T17654] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3345'. [ 366.395816][T12070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.528282][T12070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.556741][T17661] netlink: 'syz.3.3347': attribute type 13 has an invalid length. [ 366.582982][T12070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.588295][T17663] macvtap1: entered promiscuous mode [ 366.613659][T17663] vlan0: entered promiscuous mode [ 366.624228][T17663] macvtap1: entered allmulticast mode [ 366.641030][T17663] vlan0: entered allmulticast mode [ 366.646213][T17663] veth0_vlan: entered allmulticast mode [ 366.697402][T17665] macvtap2: entered promiscuous mode [ 366.710760][T17665] macvtap2: entered allmulticast mode [ 366.853954][T17673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3351'. [ 366.953900][T17676] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3352'. [ 366.986300][T17676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3352'. [ 367.043156][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3354'. [ 367.097150][T17689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 367.403262][T17686] veth1_to_bond: entered allmulticast mode [ 367.430538][T17700] netlink: 'syz.1.3358': attribute type 8 has an invalid length. [ 367.479961][T17689] bond0: (slave bond_slave_1): Releasing backup interface [ 367.558533][T17706] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 367.588649][T17689] veth1_to_bond (unregistering): left allmulticast mode [ 368.252416][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.260217][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.448599][T17734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.479970][T17734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.620394][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.630109][T17759] openvswitch: netlink: Flow key attr not present in new flow. [ 368.736366][ T2913] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.777962][ T2913] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.816716][ T2913] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.827796][ T2913] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.845671][ T2913] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.866355][ T2913] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.877830][ T2913] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.919491][ T2913] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.935794][T17765] team0: Cannot enslave team device to itself [ 369.058020][T17776] netlink: 'syz.0.3381': attribute type 4 has an invalid length. [ 369.087191][T17782] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 369.431317][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.447730][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.459587][T17478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.545355][T17810] IPVS: Error connecting to the multicast addr [ 369.709590][T17478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.839581][T17478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.983310][T17832] netlink: 'syz.3.3399': attribute type 4 has an invalid length. [ 369.990323][T17836] __nla_validate_parse: 18 callbacks suppressed [ 369.990345][T17836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3400'. [ 370.733693][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 370.869027][T17874] syzkaller1: entered promiscuous mode [ 370.874578][T17874] syzkaller1: entered allmulticast mode [ 370.892946][T17877] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3412'. [ 370.903612][T17877] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3412'. [ 371.370193][T17875] netlink: 'syz.2.3408': attribute type 4 has an invalid length. [ 371.957369][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3422'. [ 372.015623][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 372.476360][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 372.529703][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 372.539941][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 372.549030][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3436'. [ 372.561504][T17954] bridge_slave_1: left allmulticast mode [ 372.567193][T17954] bridge_slave_1: left promiscuous mode [ 372.596707][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.642679][T17954] bridge_slave_0: left allmulticast mode [ 372.665964][T17954] bridge_slave_0: left promiscuous mode [ 372.688018][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.835717][T17978] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 373.067670][T17995] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 373.111005][T17995] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 373.339916][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.572167][T18019] netlink: 'syz.3.3452': attribute type 7 has an invalid length. [ 373.600769][T18019] netlink: 'syz.3.3452': attribute type 8 has an invalid length. [ 374.391435][T18070] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 374.652999][T18092] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 375.037885][T18106] nla_validate_range_unsigned: 23 callbacks suppressed [ 375.037904][T18106] netlink: 'syz.0.3481': attribute type 11 has an invalid length. [ 375.038102][T18107] __nla_validate_parse: 16 callbacks suppressed [ 375.038115][T18107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3482'. [ 375.235557][T18111] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 375.279467][T18111] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3483'. [ 375.457009][T18120] netlink: 'syz.4.3486': attribute type 3 has an invalid length. [ 375.524012][T18128] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3490'. [ 375.537694][T18122] netlink: 'syz.1.3487': attribute type 1 has an invalid length. [ 376.156281][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 376.295405][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 376.309735][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 376.426541][T18186] netlink: 'syz.3.3503': attribute type 13 has an invalid length. [ 376.438999][T18186] macvtap0: entered allmulticast mode [ 376.447003][T18186] macvtap0: refused to change device tx_queue_len [ 376.551037][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 376.567420][T18197] 8021q: VLANs not supported on ip6_vti0 [ 376.736327][T18208] netlink: 'syz.3.3510': attribute type 83 has an invalid length. [ 376.885044][T18218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3512'. [ 377.026853][T18223] pimreg3: entered allmulticast mode [ 377.125545][T18226] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3515'. [ 377.187211][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3518'. [ 378.445356][T18298] pim6reg: entered allmulticast mode [ 378.490266][T18298] pim6reg: left allmulticast mode [ 378.863231][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.378649][T18304] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 379.396016][T18304] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 379.421275][T18304] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 380.750352][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.754601][T18391] __nla_validate_parse: 5 callbacks suppressed [ 380.754621][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 380.858587][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 380.876342][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 380.968462][T18409] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3569'. [ 381.006873][T18410] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3569'. [ 381.036744][T18409] delete_channel: no stack [ 381.419045][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.009407][T18444] netlink: 'syz.4.3582': attribute type 12 has an invalid length. [ 382.279819][T18448] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3583'. [ 382.309359][T18450] tipc: Started in network mode [ 382.329301][T18450] tipc: Node identity fe9e29370181, cluster identity 4711 [ 382.344440][T18450] tipc: Enabled bearer , priority 0 [ 382.364883][T18447] lo speed is unknown, defaulting to 1000 [ 382.365337][T18456] syzkaller0: entered promiscuous mode [ 382.376578][T18456] syzkaller0: entered allmulticast mode [ 382.514586][T18454] tipc: Resetting bearer [ 382.543897][T18460] block nbd3: Unsupported socket: shutdown callout must be supported. [ 382.563455][T18449] tipc: Resetting bearer [ 382.634222][T18449] tipc: Disabling bearer [ 382.646343][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3588'. [ 382.661671][T18459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3586'. [ 382.675997][T18447] hsr0 speed is unknown, defaulting to 1000 [ 383.182346][T18472] netlink: 'syz.0.3591': attribute type 2 has an invalid length. [ 383.964010][T18519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3602'. [ 384.306558][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 384.347514][T18533] bridge_slave_1: left allmulticast mode [ 384.373147][T18533] bridge_slave_1: left promiscuous mode [ 384.394150][T18533] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.478545][T18533] bridge_slave_0: left allmulticast mode [ 384.486871][T18533] bridge_slave_0: left promiscuous mode [ 384.502662][T18533] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.818640][ T5948] IPVS: starting estimator thread 0... [ 384.819741][T18560] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.912129][T18565] IPVS: using max 24 ests per chain, 57600 per kthread [ 385.833354][T18611] __nla_validate_parse: 4 callbacks suppressed [ 385.833375][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 386.335938][T18639] netlink: 'syz.0.3638': attribute type 2 has an invalid length. [ 386.596085][T18649] 8021q: VLANs not supported on ip6gre0 [ 386.634036][T18651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3643'. [ 386.643135][T18649] IPVS: Unknown mcast interface: vxcan1 [ 386.796496][T18661] bond0: (slave bond_slave_0): Releasing backup interface [ 386.812925][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3646'. [ 386.815821][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'. [ 386.866969][T18661] team0: Port device team_slave_0 removed [ 386.951551][T18661] team0: Port device team_slave_1 removed [ 386.958566][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.985158][T18661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.995303][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.003036][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.053597][T18671] netlink: 'syz.3.3649': attribute type 1 has an invalid length. [ 387.066681][T18671] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3649'. [ 387.468040][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 387.493485][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 387.567932][T18689] netlink: 'syz.3.3653': attribute type 12 has an invalid length. [ 387.624299][T18689] netlink: 'syz.3.3653': attribute type 11 has an invalid length. [ 387.636468][T18691] syzkaller0: entered promiscuous mode [ 387.661165][T18691] syzkaller0: entered allmulticast mode [ 387.831561][T18691] tipc: Enabled bearer , priority 0 [ 387.846297][T18691] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 387.894897][T18691] tipc: Resetting bearer [ 387.932284][T18690] tipc: Resetting bearer [ 387.969776][ T5948] IPVS: starting estimator thread 0... [ 387.976172][T18715] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 388.006379][T18690] tipc: Disabling bearer [ 388.061169][T18716] IPVS: using max 25 ests per chain, 60000 per kthread [ 388.226978][T18729] Bluetooth: MGMT ver 1.23 [ 388.337720][T18731] Bluetooth: MGMT ver 1.23 [ 388.843646][T18754] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3674'. [ 388.856237][T18755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3673'. [ 389.005395][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 389.027189][T18754] lo speed is unknown, defaulting to 1000 [ 389.244741][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.303498][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.324033][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.353782][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.445907][T18778] veth0: entered promiscuous mode [ 389.679936][T18794] tipc: Started in network mode [ 389.687272][T18794] tipc: Node identity , cluster identity 4711 [ 389.718061][T18794] tipc: Failed to obtain node identity [ 389.741620][T18794] tipc: Enabling of bearer rejected, failed to enable media [ 389.814249][T18799] netlink: 'syz.4.3686': attribute type 12 has an invalid length. [ 389.846071][T18795] syzkaller0: entered promiscuous mode [ 389.852509][T18795] syzkaller0: entered allmulticast mode [ 389.859835][T18754] hsr0 speed is unknown, defaulting to 1000 [ 392.138458][T18812] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 392.142737][T18815] tipc: Enabling of bearer rejected, failed to enable media [ 392.241610][T18834] openvswitch: netlink: Message has -1 unknown bytes. [ 392.372680][T18840] veth0: entered promiscuous mode [ 392.390267][T18841] __nla_validate_parse: 5 callbacks suppressed [ 392.390290][T18841] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3695'. [ 392.598110][T18851] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 392.675174][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 392.745173][T18851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.754216][T18837] veth0: left promiscuous mode [ 392.821157][T18855] vlan2: entered allmulticast mode [ 392.826504][T18855] veth1: entered allmulticast mode [ 392.940904][T18862] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 392.968297][T18862] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3699'. [ 393.004038][T18862] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 393.010752][T18868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3701'. [ 393.373449][T18884] tipc: Enabled bearer , priority 0 [ 393.404862][T18884] syzkaller0: entered promiscuous mode [ 393.413115][T18884] syzkaller0: entered allmulticast mode [ 393.503047][T18884] tipc: Resetting bearer [ 393.548574][T18882] tipc: Resetting bearer [ 393.638243][T18882] tipc: Disabling bearer [ 393.959382][T18912] nbd3: detected capacity change from 0 to 127 [ 393.968435][ T5870] block nbd3: Receive control failed (result -32) [ 394.184224][T18928] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 394.418047][T18932] netlink: zone id is out of range [ 394.455956][T18932] netlink: zone id is out of range [ 394.506740][T18932] netlink: zone id is out of range [ 394.518578][T18932] netlink: zone id is out of range [ 394.535210][T18932] netlink: zone id is out of range [ 394.542730][T18932] netlink: zone id is out of range [ 394.574741][T18932] netlink: zone id is out of range [ 394.636186][T18932] netlink: zone id is out of range [ 394.936856][T18950] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3724'. [ 394.952557][T18960] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 395.110991][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3730'. [ 395.143853][T18972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3726'. [ 395.186386][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 395.242442][T18968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.252901][T18968] bond3: (slave bond4): making interface the new active one [ 395.271076][T18968] bond3: (slave bond4): Enslaving as an active interface with an up link [ 395.296398][T18972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.316131][T18966] vlan2: entered promiscuous mode [ 395.323023][T18966] dummy0: entered promiscuous mode [ 395.351327][T18966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3730'. [ 395.377086][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 395.453283][T18987] netlink: 'syz.3.3735': attribute type 1 has an invalid length. [ 395.468608][T18987] pim6reg527: entered allmulticast mode [ 395.646919][T18999] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 396.087990][T19021] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 396.099325][T19021] CPU: 1 UID: 0 PID: 19021 Comm: syz.2.3747 Not tainted syzkaller #0 PREEMPT(full) [ 396.099355][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.099367][T19021] Call Trace: [ 396.099375][T19021] [ 396.099384][T19021] dump_stack_lvl+0x189/0x250 [ 396.099420][T19021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.099445][T19021] ? __pfx__printk+0x10/0x10 [ 396.099477][T19021] ? kernfs_path_from_node+0x2f/0x290 [ 396.099499][T19021] ? kernfs_path_from_node+0x250/0x290 [ 396.099517][T19021] ? kernfs_path_from_node+0x2f/0x290 [ 396.099543][T19021] sysfs_warn_dup+0x8e/0xa0 [ 396.099561][T19021] sysfs_do_create_link_sd+0xc0/0x110 [ 396.099584][T19021] device_add_class_symlinks+0x1cf/0x240 [ 396.099611][T19021] device_add+0x475/0xb50 [ 396.099636][T19021] wiphy_register+0x1ba6/0x28d0 [ 396.099686][T19021] ? __pfx_wiphy_register+0x10/0x10 [ 396.099713][T19021] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 396.099748][T19021] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 396.099778][T19021] ieee80211_register_hw+0x3484/0x4100 [ 396.099830][T19021] ? ieee80211_register_hw+0x1411/0x4100 [ 396.099868][T19021] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 396.099898][T19021] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.099937][T19021] ? __hrtimer_setup+0x187/0x210 [ 396.099955][T19021] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 396.099989][T19021] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 396.100055][T19021] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 396.100080][T19021] ? trace_kmalloc+0x1f/0xd0 [ 396.100103][T19021] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 396.100130][T19021] ? kstrndup+0xbf/0x160 [ 396.100164][T19021] hwsim_new_radio_nl+0xea4/0x1b10 [ 396.100200][T19021] ? __pfx___nla_validate_parse+0x10/0x10 [ 396.100250][T19021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.100294][T19021] ? __nla_parse+0x40/0x60 [ 396.100329][T19021] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 396.100366][T19021] genl_family_rcv_msg_doit+0x212/0x300 [ 396.100400][T19021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.100442][T19021] ? bpf_lsm_capable+0x9/0x20 [ 396.100467][T19021] ? security_capable+0x7e/0x2e0 [ 396.100506][T19021] genl_rcv_msg+0x60e/0x790 [ 396.100538][T19021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.100560][T19021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.100605][T19021] netlink_rcv_skb+0x205/0x470 [ 396.100631][T19021] ? __lock_acquire+0xab9/0xd20 [ 396.100661][T19021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.100687][T19021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.100743][T19021] ? down_read+0x1ad/0x2e0 [ 396.100767][T19021] genl_rcv+0x28/0x40 [ 396.100788][T19021] netlink_unicast+0x82c/0x9e0 [ 396.100838][T19021] ? __pfx_netlink_unicast+0x10/0x10 [ 396.100869][T19021] ? netlink_sendmsg+0x642/0xb30 [ 396.100885][T19021] ? skb_put+0x11b/0x210 [ 396.100911][T19021] netlink_sendmsg+0x805/0xb30 [ 396.100943][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.100967][T19021] ? aa_sock_msg_perm+0xf1/0x1d0 [ 396.100989][T19021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.101010][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.101030][T19021] __sock_sendmsg+0x21c/0x270 [ 396.101064][T19021] ____sys_sendmsg+0x505/0x830 [ 396.101095][T19021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.101132][T19021] ? import_iovec+0x74/0xa0 [ 396.101161][T19021] ___sys_sendmsg+0x21f/0x2a0 [ 396.101188][T19021] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.101261][T19021] ? __fget_files+0x2a/0x420 [ 396.101277][T19021] ? __fget_files+0x3a0/0x420 [ 396.101310][T19021] __x64_sys_sendmsg+0x19b/0x260 [ 396.101337][T19021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.101375][T19021] ? rcu_is_watching+0x15/0xb0 [ 396.101402][T19021] ? do_syscall_64+0xbe/0x3b0 [ 396.101427][T19021] do_syscall_64+0xfa/0x3b0 [ 396.101444][T19021] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.101472][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.101491][T19021] ? clear_bhb_loop+0x60/0xb0 [ 396.101517][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.101535][T19021] RIP: 0033:0x7f6ed2b8ebe9 [ 396.101555][T19021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.101572][T19021] RSP: 002b:00007f6ed3a16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.101594][T19021] RAX: ffffffffffffffda RBX: 00007f6ed2dc5fa0 RCX: 00007f6ed2b8ebe9 [ 396.101609][T19021] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 396.101621][T19021] RBP: 00007f6ed2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.101633][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.101644][T19021] R13: 00007f6ed2dc6038 R14: 00007f6ed2dc5fa0 R15: 00007ffc60a2d268 [ 396.101682][T19021] [ 396.932287][T19053] netlink: 'syz.1.3752': attribute type 4 has an invalid length. [ 396.983780][T19046] netlink: 'syz.1.3752': attribute type 4 has an invalid length. [ 397.419107][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.509765][T19073] syzkaller0: create flow: hash 671435884 index 1 [ 397.591607][T19078] __nla_validate_parse: 4 callbacks suppressed [ 397.591628][T19078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3760'. [ 397.628553][T19080] netlink: 'syz.0.3757': attribute type 21 has an invalid length. [ 397.648551][T19080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3757'. [ 397.701133][T19068] netlink: 'syz.0.3757': attribute type 21 has an invalid length. [ 397.721322][T19068] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3757'. [ 397.740782][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 397.807150][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 397.904342][T19094] net_ratelimit: 6 callbacks suppressed [ 397.904365][T19094] openvswitch: netlink: Duplicate or invalid key (type 0). [ 397.922648][T19094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.006878][T19080] netlink: 'syz.0.3757': attribute type 4 has an invalid length. [ 398.015960][T19080] netlink: 'syz.0.3757': attribute type 5 has an invalid length. [ 398.026144][T19080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3757'. [ 398.036437][T19068] netlink: 'syz.0.3757': attribute type 4 has an invalid length. [ 398.045007][T19068] netlink: 'syz.0.3757': attribute type 5 has an invalid length. [ 398.054100][T19068] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3757'. [ 398.143839][T19066] syzkaller0: delete flow: hash 671435884 index 1 [ 398.325938][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 400.300779][T19115] chnl_net:caif_netlink_parms(): no params data found [ 400.373720][T19117] syzkaller0: entered promiscuous mode [ 400.380327][ T5948] page_pool_release_retry() stalled pool shutdown: id 63, 1 inflight 60 sec [ 400.406241][T19117] syzkaller0: entered allmulticast mode [ 400.644682][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3774'. [ 402.601723][T19140] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 402.740886][T19147] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3779'. [ 402.831609][T19159] netlink: 'syz.4.3782': attribute type 3 has an invalid length. [ 402.845194][T19159] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3782'. [ 403.337987][T19184] tipc: Enabled bearer , priority 0 [ 403.347590][T19184] syzkaller0: entered promiscuous mode [ 403.354100][T19184] syzkaller0: entered allmulticast mode [ 403.484870][T19185] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.533453][T19185] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.694591][T19198] tipc: Resetting bearer [ 403.739976][T19179] tipc: Resetting bearer [ 403.840342][T19179] tipc: Disabling bearer [ 404.039184][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3797'. [ 404.072450][T19213] gtp0: entered promiscuous mode [ 404.077463][T19213] gtp0: entered allmulticast mode [ 404.100210][T19211] veth1_macvtap: left promiscuous mode [ 404.315484][T19235] IPVS: Unknown mcast interface: vcan0 [ 404.609961][T19275] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 404.649620][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 404.697223][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3808'. [ 404.785222][T19275] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.809890][T19275] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 404.846570][T19275] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 404.993856][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 405.062962][T19291] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 405.090457][T19291] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 405.272730][T19304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3819'. [ 405.286213][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3818'. [ 405.297035][T19301] syzkaller0: refused to change device tx_queue_len [ 405.309718][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 405.339070][T19301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3816'. [ 405.793075][T19310] team0 (unregistering): Port device team_slave_0 removed [ 405.807380][T19310] team0 (unregistering): Port device team_slave_1 removed [ 406.064724][T19337] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20002 [ 406.081718][T19337] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 406.123572][T19335] gtp0: entered promiscuous mode [ 406.128589][T19335] gtp0: entered allmulticast mode [ 406.294065][T19345] netlink: 'syz.4.3832': attribute type 9 has an invalid length. [ 406.357031][T19345] netlink: 'syz.4.3832': attribute type 9 has an invalid length. [ 406.417497][T19354] ------------[ cut here ]------------ [ 406.423495][T19354] WARNING: CPU: 1 PID: 19354 at net/ipv4/route.c:1269 ip_rt_bug+0x2c/0x110 [ 406.432212][T19354] Modules linked in: [ 406.436510][T19354] CPU: 1 UID: 0 PID: 19354 Comm: syz.1.3835 Not tainted syzkaller #0 PREEMPT(full) [ 406.445984][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.456125][T19354] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 406.461159][T19354] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 406.481346][T19354] RSP: 0018:ffffc9000f8df180 EFLAGS: 00010286 [ 406.487459][T19354] RAX: 1add48e5d2495900 RBX: ffff888078e96c80 RCX: 1add48e5d2495900 [ 406.495521][T19354] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 406.503683][T19354] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 406.511812][T19354] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 406.519852][T19354] R13: dffffc0000000000 R14: ffff888078e96c80 R15: ffff888145282300 [ 406.527942][T19354] FS: 00007fc50fbf66c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 406.536971][T19354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.543643][T19354] CR2: 000000110c37e962 CR3: 000000004df14000 CR4: 00000000003526f0 [ 406.551786][T19354] Call Trace: [ 406.555109][T19354] [ 406.558170][T19354] ip_push_pending_frames+0xbe/0x150 [ 406.563604][T19354] __icmp_send+0xf87/0x12d0 [ 406.568195][T19354] ? __icmp_send+0x1b9/0x12d0 [ 406.573138][T19354] ? __pfx___icmp_send+0x10/0x10 [ 406.578311][T19354] ? ip_route_input_noref+0x98/0x250 [ 406.583784][T19354] ? __pfx_ip_route_input_noref+0x10/0x10 [ 406.589598][T19354] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 406.594834][T19354] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 406.594921][T19355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.600112][T19354] ip_options_compile+0x80/0xb0 [ 406.600201][T19354] ip_rcv_finish_core+0xaa2/0x1c00 [ 406.600239][T19354] ip_rcv_finish+0x14c/0x2f0 [ 406.600265][T19354] NF_HOOK+0x309/0x3a0 [ 406.600297][T19354] ? __pfx_ip_rcv_finish+0x10/0x10 [ 406.600316][T19354] ? NF_HOOK+0x9a/0x3a0 [ 406.600345][T19354] ? __pfx_NF_HOOK+0x10/0x10 [ 406.600373][T19354] ? ip_rcv_core+0x7f7/0xd00 [ 406.600415][T19354] ? __pfx_ip_rcv_finish+0x10/0x10 [ 406.600446][T19354] ? __pfx_ip_rcv+0x10/0x10 [ 406.600474][T19354] __netif_receive_skb+0x143/0x380 [ 406.600512][T19354] ? netif_receive_skb+0x115/0x790 [ 406.600541][T19354] netif_receive_skb+0x1cb/0x790 [ 406.600569][T19354] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 406.600593][T19354] ? __pfx_netif_receive_skb+0x10/0x10 [ 406.600628][T19354] ? tun_rx_batched+0x160/0x730 [ 406.600652][T19354] tun_rx_batched+0x1b9/0x730 [ 406.600673][T19354] ? __lock_acquire+0xab9/0xd20 [ 406.600709][T19354] ? __pfx_tun_rx_batched+0x10/0x10 [ 406.600735][T19354] ? tun_get_user+0x266c/0x3e20 [ 406.600773][T19354] tun_get_user+0x2aa2/0x3e20 [ 406.600804][T19354] ? tun_get_user+0x6f6/0x3e20 [ 406.600827][T19354] ? tun_get_user+0x266c/0x3e20 [ 406.600854][T19354] ? aa_file_perm+0x44d/0x1550 [ 406.600876][T19354] ? __pfx_tun_get_user+0x10/0x10 [ 406.600922][T19354] ? ref_tracker_alloc+0x318/0x460 [ 406.600951][T19354] ? __lock_acquire+0xab9/0xd20 [ 406.600982][T19354] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 406.601019][T19354] ? tun_get+0x1c/0x2f0 [ 406.601047][T19354] ? tun_get+0x1c/0x2f0 [ 406.601067][T19354] ? tun_get+0x1c/0x2f0 [ 406.601094][T19354] tun_chr_write_iter+0x113/0x200 [ 406.601120][T19354] vfs_write+0x5c6/0xb30 [ 406.601154][T19354] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 406.601177][T19354] ? __pfx_vfs_write+0x10/0x10 [ 406.601217][T19354] ? __fget_files+0x2a/0x420 [ 406.601248][T19354] ksys_write+0x145/0x250 [ 406.601278][T19354] ? __pfx_ksys_write+0x10/0x10 [ 406.601303][T19354] ? rcu_is_watching+0x15/0xb0 [ 406.601333][T19354] ? do_syscall_64+0xbe/0x3b0 [ 406.601360][T19354] do_syscall_64+0xfa/0x3b0 [ 406.601377][T19354] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.820303][T19354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.826433][T19354] ? clear_bhb_loop+0x60/0xb0 [ 406.831190][T19354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.837193][T19354] RIP: 0033:0x7fc51198d69f [ 406.841677][T19354] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 406.861343][T19354] RSP: 002b:00007fc50fbf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 406.869810][T19354] RAX: ffffffffffffffda RBX: 00007fc511bc5fa0 RCX: 00007fc51198d69f [ 406.877815][T19354] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 406.885860][T19354] RBP: 00007fc511a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.893986][T19354] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 406.902022][T19354] R13: 00007fc511bc6038 R14: 00007fc511bc5fa0 R15: 00007ffcbe622518 [ 406.910080][T19354] [ 406.913126][T19354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.920530][T19354] CPU: 1 UID: 0 PID: 19354 Comm: syz.1.3835 Not tainted syzkaller #0 PREEMPT(full) [ 406.929915][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.939966][T19354] Call Trace: [ 406.943243][T19354] [ 406.946179][T19354] dump_stack_lvl+0x99/0x250 [ 406.950774][T19354] ? __asan_memcpy+0x40/0x70 [ 406.955362][T19354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.960570][T19354] ? __pfx__printk+0x10/0x10 [ 406.965188][T19354] vpanic+0x281/0x750 [ 406.969181][T19354] ? __pfx__printk+0x10/0x10 [ 406.973801][T19354] ? __pfx_vpanic+0x10/0x10 [ 406.978332][T19354] ? is_bpf_text_address+0x26/0x2b0 [ 406.983537][T19354] panic+0xb9/0xc0 [ 406.987257][T19354] ? __pfx_panic+0x10/0x10 [ 406.991687][T19354] __warn+0x31b/0x4b0 [ 406.995746][T19354] ? ip_rt_bug+0x2c/0x110 [ 407.000094][T19354] ? ip_rt_bug+0x2c/0x110 [ 407.004455][T19354] report_bug+0x2be/0x4f0 [ 407.008812][T19354] ? ip_rt_bug+0x2c/0x110 [ 407.013236][T19354] ? ip_rt_bug+0x2c/0x110 [ 407.017571][T19354] ? ip_rt_bug+0x2e/0x110 [ 407.021944][T19354] handle_bug+0x84/0x160 [ 407.026232][T19354] exc_invalid_op+0x1a/0x50 [ 407.030833][T19354] asm_exc_invalid_op+0x1a/0x20 [ 407.035691][T19354] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 407.040645][T19354] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 407.060341][T19354] RSP: 0018:ffffc9000f8df180 EFLAGS: 00010286 [ 407.066423][T19354] RAX: 1add48e5d2495900 RBX: ffff888078e96c80 RCX: 1add48e5d2495900 [ 407.074484][T19354] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 407.082468][T19354] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 407.090441][T19354] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 407.098417][T19354] R13: dffffc0000000000 R14: ffff888078e96c80 R15: ffff888145282300 [ 407.106423][T19354] ip_push_pending_frames+0xbe/0x150 [ 407.111746][T19354] __icmp_send+0xf87/0x12d0 [ 407.116287][T19354] ? __icmp_send+0x1b9/0x12d0 [ 407.121098][T19354] ? __pfx___icmp_send+0x10/0x10 [ 407.126071][T19354] ? ip_route_input_noref+0x98/0x250 [ 407.131472][T19354] ? __pfx_ip_route_input_noref+0x10/0x10 [ 407.137217][T19354] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 407.142634][T19354] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 407.147835][T19354] ip_options_compile+0x80/0xb0 [ 407.152703][T19354] ip_rcv_finish_core+0xaa2/0x1c00 [ 407.157827][T19354] ip_rcv_finish+0x14c/0x2f0 [ 407.162419][T19354] NF_HOOK+0x309/0x3a0 [ 407.166531][T19354] ? __pfx_ip_rcv_finish+0x10/0x10 [ 407.171648][T19354] ? NF_HOOK+0x9a/0x3a0 [ 407.175821][T19354] ? __pfx_NF_HOOK+0x10/0x10 [ 407.180435][T19354] ? ip_rcv_core+0x7f7/0xd00 [ 407.185036][T19354] ? __pfx_ip_rcv_finish+0x10/0x10 [ 407.190243][T19354] ? __pfx_ip_rcv+0x10/0x10 [ 407.194752][T19354] __netif_receive_skb+0x143/0x380 [ 407.199879][T19354] ? netif_receive_skb+0x115/0x790 [ 407.205001][T19354] netif_receive_skb+0x1cb/0x790 [ 407.210043][T19354] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 407.215858][T19354] ? __pfx_netif_receive_skb+0x10/0x10 [ 407.221342][T19354] ? tun_rx_batched+0x160/0x730 [ 407.226314][T19354] tun_rx_batched+0x1b9/0x730 [ 407.231057][T19354] ? __lock_acquire+0xab9/0xd20 [ 407.236028][T19354] ? __pfx_tun_rx_batched+0x10/0x10 [ 407.241240][T19354] ? tun_get_user+0x266c/0x3e20 [ 407.246104][T19354] tun_get_user+0x2aa2/0x3e20 [ 407.250790][T19354] ? tun_get_user+0x6f6/0x3e20 [ 407.255558][T19354] ? tun_get_user+0x266c/0x3e20 [ 407.260416][T19354] ? aa_file_perm+0x44d/0x1550 [ 407.265183][T19354] ? __pfx_tun_get_user+0x10/0x10 [ 407.270346][T19354] ? ref_tracker_alloc+0x318/0x460 [ 407.275473][T19354] ? __lock_acquire+0xab9/0xd20 [ 407.280335][T19354] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 407.285812][T19354] ? tun_get+0x1c/0x2f0 [ 407.289973][T19354] ? tun_get+0x1c/0x2f0 [ 407.294126][T19354] ? tun_get+0x1c/0x2f0 [ 407.298299][T19354] tun_chr_write_iter+0x113/0x200 [ 407.303331][T19354] vfs_write+0x5c6/0xb30 [ 407.307936][T19354] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 407.313518][T19354] ? __pfx_vfs_write+0x10/0x10 [ 407.318309][T19354] ? __fget_files+0x2a/0x420 [ 407.322949][T19354] ksys_write+0x145/0x250 [ 407.327313][T19354] ? __pfx_ksys_write+0x10/0x10 [ 407.332169][T19354] ? rcu_is_watching+0x15/0xb0 [ 407.336943][T19354] ? do_syscall_64+0xbe/0x3b0 [ 407.341624][T19354] do_syscall_64+0xfa/0x3b0 [ 407.346124][T19354] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.351328][T19354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.357402][T19354] ? clear_bhb_loop+0x60/0xb0 [ 407.362083][T19354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.368324][T19354] RIP: 0033:0x7fc51198d69f [ 407.372752][T19354] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 407.392571][T19354] RSP: 002b:00007fc50fbf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 407.401183][T19354] RAX: ffffffffffffffda RBX: 00007fc511bc5fa0 RCX: 00007fc51198d69f [ 407.409431][T19354] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 407.417426][T19354] RBP: 00007fc511a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 407.425412][T19354] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 407.433393][T19354] R13: 00007fc511bc6038 R14: 00007fc511bc5fa0 R15: 00007ffcbe622518 [ 407.441409][T19354] [ 407.444729][T19354] Kernel Offset: disabled [ 407.449086][T19354] Rebooting in 86400 seconds..