last executing test programs: 11.225968368s ago: executing program 2 (id=3139): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000580), &(0x7f00000006c0)=0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @private0, 0x9c4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="4ea7dded6efffe4dcaadf5e13d7a4b2bc91afebffd7e7ec83cb1e452114fca0625bdb9b245cec29c14f63a035f8739de85b2d367aa4e7f9409401f12f9407e101495157b549b4c2cc36c280d0ab6ee453661ae6f7e8140b4aee8861908904aa4b27e08a89dd04d54e78ebfa038779bb2a28d19afe50d734d303755112bd0384d3e31cefa37180bd75e862f098e62e48fb2505a2961cb5aa3f05f6bd79905b0ef65837be016dd28bb03cb379edc312bb8f033982003e4e556c52f76529b8ad3206b743781ae63a42812f71fa9e56e6a96585c352a585fcbab86c54e6730", 0xdd}], 0x1, &(0x7f0000000880)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x62}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dstopts_2292={{0x148, 0x29, 0x4, {0x32, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x1, [0x7ff, 0x6, 0x5, 0x9]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x8, [0x5]}}, @pad1, @generic={0xd, 0xd5, "e380cd8cfea9642ad845a77d11f64cecce9003ec082259d59429351d9bcdd0bbc5eabe28b3267e449b9d0905646998be0e4cfea480b2066eedd9d86c5c42ad2795fc503416c51f87007c7784c1765c21b72e6ae6dcd0510af00f270aee32dea6409c9b5fe99f6f4d0988d07d09f735fe1baa0346470ba37887ec276a1b17d0d8cc41b36868b68365e9882e725346dbc1734d179b922d091c35d501f34799d27fb472dad0a53225373a99eab49584eb3ea454b02a1b442fbc1483746c3cd859b9c76c9c9066c3012e1858ce8546c5d0c8c9821b9014"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x100, 0x29, 0x37, {0x83, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x6, 0xb0, "72135dcbf85519a8242757c370bac2db9efd1d5a0912c5dc0b1a62ecd2329108d41a4c249cad65f9e6eee91d9e0fa589aab74ecb0eb915c881c28825042fc86bba314beb956a77748e0581bc2c33a9fd762a47780f985bd9faa7c15c7cf17df27fdeb7374e0177b91e3216fb1dae404c4629ece3518578da9daf9ff8ffc9a246da662f26431bb911acc7b5e2d162b2b1b25a78fd060116a9e93213febcf713d1705be59d93c1d8ca453a1e7e4179c4fa"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x8, [0xea4, 0x2, 0x6, 0x5]}}, @pad1, @pad1]}}}], 0x2e0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="364fa26b3807cc9feb8c7cf976cf571b0e64002882ab699638201ed74bd6f8db3272fab3a48440f3eb190d3f532bf189bfae6b3c73b05ac4377a92c905ba72d09aeb87eccfcacba82bcf7ef63edac5c8117a607ee8d280a7f40aeaeab73ab38de23cfd5cb5edfa767dd5c5c2191aa5bccb94fc28bfc09d4e3bffd8ea3fcfa24cd4adffcd227f95cb062e338031f2306d24dddff84ac238b76a9cdfeb7480bc54bc3c1c608746fe", 0xa7}, {&(0x7f0000000300)="9063048be7c776870c544176cadcd7b6633c083a4111293e39a348bfd469e0c55fd9d7532099f85a", 0x28}, {&(0x7f0000000440)="d6b9110df74587333026d4cd0a9c8838aec216e8dd7470dc3808039e91e144b34e0cc444529e3fe96c28e3b4b4ea78c0e7cc878511ac93156661187d3742e9050b878112c65d212b9b0691b5f81996ad6ee90deae94a391b7b930c5fa6de368bfe3d075f87a97302555909e28d34b10143782446530ba6078cea8feabbfecd181d135f901bd2f9239f8c404750c8b0a1c0ab0ef0e632a2a5111c7f013cd2adcac16da00e76d18a610268a4b014b23ad96f32b1ab07f72e03e7f3caa3971db98ffd1e93e9603846460dfd4bd010af128a529652048e398d506d66ab3ed9da2c0510f0b6a95e374a79cc0ca9509c8c3b", 0xef}, {&(0x7f0000000340)="fc28c34bceb47dc94792e56a6c4c4535feb059d4f735b04dc85b55d60f6ae15598c9444547ffec4f58eac9284ac884f5ec", 0x31}], 0x4, &(0x7f0000000b80)=[@dstopts_2292={{0x18}}, @hopopts={{0x98, 0x29, 0x36, {0x21, 0xf, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x8f, 0x71, "9a27008218aea9bf4f942b7bf43afdd67be266b05a1ffaf6e040b03439925aa8abc33c13bae0c9982cfe8488425d6a8301dc3d36ba9236fb81df81070740bd167b7235473b68ece93420df8c2736d5e5bdffec0d1448c97bbb9ba548794b5b0b56e32e0ebd7e799ded4ff2fcef76320bb5"}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x1, 0x9, 0x0, [@remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @empty]}}}, @hoplimit_2292={{0x14}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xff, 0xc, 0x2, 0xc, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @local}, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x338}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x43}, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x88, 0x10, '\x00', [@ra={0x5, 0x2, 0x57c1}, @calipso={0x7, 0x58, {0x0, 0x14, 0x4, 0xff, [0xe301, 0xb, 0x4, 0x5, 0x200, 0x9, 0x8, 0x8, 0x7, 0x15]}}, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xff, 0x4c7}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x368}}], 0x2, 0xc810) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 11.152610806s ago: executing program 2 (id=3141): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380)={0x7, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, 0x8, 0x5, 0x0, 0x3}, 0xe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf251a0c00000c00060001000100"/38], 0x2c}}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x54, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x240440d0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xfff) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0xfea8}}}}}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r5}, 0x8) r9 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r9, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25010100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750141dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) 10.202120207s ago: executing program 2 (id=3154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x20000800) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80200100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x130, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\x9c*('}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x28, r1, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 9.718308029s ago: executing program 2 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000120001000000020000000000070001"], 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x42) 9.485232698s ago: executing program 2 (id=3162): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x15, 'pids'}]}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 9.222195378s ago: executing program 2 (id=3166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'team_slave_1\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000300010000", 0x7) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="04", 0x1, 0x10004894, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0, 0x6, @remote}, 0x14) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xc2) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 2.418086912s ago: executing program 1 (id=3206): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x26c0}}, 0x4010) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) (async) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20200408}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1407, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x80800) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x28d41828b69a67d5, 0x12141, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 2.141619989s ago: executing program 1 (id=3210): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e27, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e33, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) (async) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) (async) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) 1.984599379s ago: executing program 3 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004d695d2ee7e7ed287273f8eec47360430cc33e59e002bb4a396db5a1fdfb99741d51b99dbfb33ef7698e2ec49e9b8c01f31afe09e464461739539c1f86b24da0e2b7ae3e1d3e36e5f6488ab4b789324a0018414d2cabbc5734cdffbe9c24ec5658aa4480f0f4b9d8655f8956725082ac964267bc1f5ddeb68c2cf297ef986d71f7218935025dec9cd4162bbf945eed68a1c52e7c0a84c0b759cf831792963e1a58e5d950b69a092a0d7d900cae4c2c9d641e56b89c8c2ec479399984210196b16d976ed57a799d888015e021bdaa55487099316beb549ff70c5a5b37d0c5f22b424a805d69681254c6d1bc34c55cd696879", @ANYRESDEC=r0, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x24000015}, 0x840) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004d695d2ee7e7ed287273f8eec47360430cc33e59e002bb4a396db5a1fdfb99741d51b99dbfb33ef7698e2ec49e9b8c01f31afe09e464461739539c1f86b24da0e2b7ae3e1d3e36e5f6488ab4b789324a0018414d2cabbc5734cdffbe9c24ec5658aa4480f0f4b9d8655f8956725082ac964267bc1f5ddeb68c2cf297ef986d71f7218935025dec9cd4162bbf945eed68a1c52e7c0a84c0b759cf831792963e1a58e5d950b69a092a0d7d900cae4c2c9d641e56b89c8c2ec479399984210196b16d976ed57a799d888015e021bdaa55487099316beb549ff70c5a5b37d0c5f22b424a805d69681254c6d1bc34c55cd696879", @ANYRESDEC=r0, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x24000015}, 0x840) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000500)=0x3, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000500)=0x3, 0x8) r3 = socket(0x1, 0x1, 0x6) setsockopt$PNPIPE_INITSTATE(r3, 0x6a, 0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r4, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050066a7223f00000000000000000600000008000500"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='O\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2d1800000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="4f000e0080000000ffffffffffff080211000000ffffffffffff000000000000000000000700010001000301700406f0027f000aa7060206002503018c087107ff00ff000105407606090710000000000c000e800400010004000100080026006c09000008000c006400000008000d0000000000"], 0x90}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a0001000000ed00000000001c0000000000c50c5d5b392e58725ad7ff000000000008000400821c5f5902a058c66ca0e7161daadc6cdacddc8e9cdf693206e0d5b76d39ee5c6209f82f072dbc1568dab0df1c2184dd4e1d90482dff9bcdefc8cca7b933d044426bb00aea2c85750f5d772bd0", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x4000) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a0001000000ed00000000001c0000000000c50c5d5b392e58725ad7ff000000000008000400821c5f5902a058c66ca0e7161daadc6cdacddc8e9cdf693206e0d5b76d39ee5c6209f82f072dbc1568dab0df1c2184dd4e1d90482dff9bcdefc8cca7b933d044426bb00aea2c85750f5d772bd0", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) 1.818019808s ago: executing program 1 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x4, 0xfffffe00, 0x5, [0x2, 0x800, 0xffffffff, 0x80000001, 0x910b]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r6, &(0x7f0000000200)=@l2tp6, &(0x7f00000002c0)=0x80) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES64=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4, 0x400, 0xfffffff8, 0x1, 0xfd, 0xbe, 0xd5, 0x6, 0x1, 0xe, 0x7ff, 0xfffffffb, 0xe000, 0x3, 0xf, 0x9, [0x5, 0x7]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8000000030620000280025800a000107007863616e000000180002ffff00000000000000ccf3267ec180152498b10205", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 1.817414585s ago: executing program 3 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1016, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@llc_tr={0x11, {@snap={0x54, 0xaa, "84", "4abd6d", 0xf205, "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"}}}}}, &(0x7f0000000180)={0x0, 0x2, [0x59a, 0xef1, 0xa9d, 0x763]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) 1.524650177s ago: executing program 1 (id=3216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25cfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x24000000) 1.389774771s ago: executing program 0 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x7, 0x4, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r4, &(0x7f0000000280)=@util={0x25, "cf5ce709342b85bb3bbb97117ca4d838"}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1409, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20000040) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x500}]}, 0x30}}, 0x0) 1.383930852s ago: executing program 3 (id=3219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000000000000000000000008000700", @ANYRESHEX=r1, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100370e988350d1b5258b4f724b5c5c8a81c1b222bb324d6792b66bf9a671a533ff83a7486d24600cf5b07cd22a1bb0a0a0e618293864bbb5af3bf6e782bb450700", @ANYRES32=r1, @ANYBLOB="08000f0000000083e47b60999476cb8e79f22000060006ec977eec6147e49d8dce7acf231d449ba6e3a1cb19d886cb653980cb2236461be76b072cd1fbd977b880d9e86abcd835242cb04260c1ff58ed18738bb11c5f9615"], 0x50}}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) 1.242186219s ago: executing program 3 (id=3221): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xffff0000, 0xfffbffff, 0x0, 0xffffffff}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x2a, 0x3, "81576bccaeda7b2b11ef325e4526abfd3528c920b9008e9682db21ed833645a230a5ae740ad2"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="9c82d32f52b124f587cafa9f58ac8cccf88cfebefb69a0942e9a68f30ae42b3f40"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r2, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x11, 0xa, "2b4c0d66a37fed15221d9622dc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@local, r5}, 0x14) 1.241871005s ago: executing program 4 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2533b84c08cf2242108a2b11d7723d81652dde88b693e51db23107654570ac1d73b479e7a597bb8e513e7fdfcf584dcdd3c94012cca417f44cf8c48205907c13d5a0ae15ec077bb20cc01f495653b98cea5831ebed8cf511c5cd739ac24b9cb0e4434d8f448f00a0c89ded1b1cf54d02b1872a56303e2d84a26ec6cf4bc8622db2222c59352bfb2666df9827f4e0fb1f6accf8ff627b6f6c445ff5fdd897897042f27a9f8d4c2ebe6a06c9b9378eb243e21d949e7cf2ed04df80d8f32e35b8c9", @ANYRES16=0x0, @ANYBLOB="0c0225bd7000fedbdf250400000040000180060004004e240000060004004e2300000c0007000500000002000000060004004e220000060004004e23000008000b007369700008000800e70400001c000280080007005c0d000006000e004e22000008000900800000000800060005000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0000000c000780080013400000020011000300686173683a69702c706f727400000000050004000000"], 0x58}}, 0x0) 1.208001427s ago: executing program 0 (id=3223): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff}, 0x50) 1.15846742s ago: executing program 4 (id=3224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x9b}}, 0x0) 1.034090039s ago: executing program 0 (id=3225): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000003}, 0x8080) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x1, 0x6}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc830}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x3f, &(0x7f0000000600)=[{}], 0x8, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0x74, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(r6, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129040000000000000001000001000502a5ab05020002071000000003021c0300080000000000000005027fff00010000020090780000d93f640000000f081120ff020000000000000000000000000001fe8000000000000000000000000000125d02000000000000070f55b5d747d5ce5853e382cdbcf10ddd0000000000000016e4000000000000c20400000000040100c204000000400710000000040204c806000000000000000002fe471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e05f14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107425861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f4533"], 0xffe) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000000c0), 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x100, 0x4) 1.000556262s ago: executing program 3 (id=3226): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x54b}, 0x8) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 913.636109ms ago: executing program 1 (id=3227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x820) close(r2) 810.044114ms ago: executing program 0 (id=3228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a000004090002007379843100000000a0dc9ba3fffffffc0900010073797a3100000000080005400000000b140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24008890}, 0x4000) (async) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@null, @null, @default, @bcast, @default, @null]}, &(0x7f0000000040)=0x40, 0x0) bind$rose(r2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40) 766.515511ms ago: executing program 0 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}}, 0x24008810) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r7, 0x4, r8}, 0x10) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x6, 0x9, 0x81, 0x10005, @vifc_lcl_ifindex=r2, @remote}, 0x10) 715.875124ms ago: executing program 4 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x110}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xce, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1401, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x82) 622.111091ms ago: executing program 4 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="c9058a2e4963"}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="c9058a2e4963"}) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) (async) 424.426266ms ago: executing program 4 (id=3232): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaac3aaaaaaaaaaaaaa86dd604a00a600100000fc000000000000000000000000000000fc80000000001000000000000000aebb0001000000f46bc0b486362eafc12a8338b461dc34765edcb8b5f22a67e4a2521c9be2c45200f2fbc155b8f3bc455734db311df98382ad6607d3190a72d10eba7df63c7306f6d26495ce76559261f0b4caecaa1580cc1db96447ae77d67bd3228f95f1501fed80d090d05431272586f14922be6b43353d8baafa3f69b74c6c5a346bfdd7dc374550a2afbdd491f854de3868d6c30d0f04d03f44dec1ea6fc6ec11b01b38aec9be7e3b552bdf9c4c59f66355b5de20b4a6b6c9e6ea468d4e609b25c8e0567302d71e64a2f8d71bf3e7fcff8ef6e2270d5cbfd40d36e955d09cdc8a4c32756618539b6793cf4a668c7b9b365e5f55d05150702d28608fbeab6f32fed7cccb124e288b007721e714824ea3dcf805355e3ecd0d5d80fbc072aede23e06e68bb8a89d8396fab6ff09b7e50b7d5fb5aa703f595f2e04515a4212720b3c380d903b9792545714855c5ba5138f19a07c0eb863b0778051b04b4692efbe9d7ce95a084fa3979301034e93eff13ac4721cfb8f922fe61626f6860a0b856a8be83a5b66292799df16b8e47bcf367e95c67d15c2cfbc1edb9fcca8ff8fab42b7794c2ffc530b974ac6855f59640886aa1845b988acd5a5a4dca0c956685beb9df2a5e44"], 0x0) close(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) syz_init_net_socket$x25(0xb, 0x5, 0x27) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x110, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24045080}, 0x20000001) 285.225354ms ago: executing program 0 (id=3233): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x54, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x54}}, 0x48004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 238.128783ms ago: executing program 4 (id=3234): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0x3}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010004000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r7, 0x0) 59.615289ms ago: executing program 3 (id=3235): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x1000000, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r1}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r6, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) 0s ago: executing program 1 (id=3236): syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x100}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x2, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x0, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x891c, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) kernel console output (not intermixed with test programs): ted already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.455557][ T9720] vlan2: entered promiscuous mode [ 168.507632][ T9720] bridge0: entered promiscuous mode [ 168.547955][ T9733] __nla_validate_parse: 7 callbacks suppressed [ 168.547974][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 168.596797][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 169.023490][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'. [ 169.074258][ T9769] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1104'. [ 170.176923][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 170.292160][ T9833] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 170.539497][ T9844] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 170.545684][ T9845] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1123'. [ 170.556471][ T9845] unsupported nlmsg_type 40 [ 171.253506][ T9874] veth15: entered allmulticast mode [ 171.264922][ T9877] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 171.275560][ T9877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.742294][ T9909] netlink: 'syz.0.1143': attribute type 23 has an invalid length. [ 171.806445][ T9911] netlink: 'syz.0.1143': attribute type 23 has an invalid length. [ 171.945399][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 172.241894][ T9925] netlink: 'syz.2.1151': attribute type 4 has an invalid length. [ 172.252245][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 172.276351][ T9930] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 172.295406][ T9930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.582343][ T9944] bond2: entered allmulticast mode [ 172.591772][ T9944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.602685][ T9944] bridge0: port 3(bond2) entered blocking state [ 172.613796][ T9944] bridge0: port 3(bond2) entered disabled state [ 172.625074][ T9944] bond2: entered promiscuous mode [ 172.653306][ T9954] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1158'. [ 173.033405][ T9983] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 173.090331][ T9988] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1168'. [ 173.475416][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.497088][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.526677][T10019] tipc: Enabling of bearer rejected, failed to enable media [ 173.580884][T10019] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 173.641624][T10019] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 173.827174][T10039] __nla_validate_parse: 1 callbacks suppressed [ 173.827267][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 173.870133][T10038] hsr0 speed is unknown, defaulting to 1000 [ 173.903241][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 174.168503][T10057] delete_channel: no stack [ 174.416696][T10076] netlink: 524 bytes leftover after parsing attributes in process `syz.4.1198'. [ 174.675094][T10088] netlink: 'syz.2.1202': attribute type 3 has an invalid length. [ 174.712450][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 174.773367][T10094] netlink: 'syz.0.1204': attribute type 3 has an invalid length. [ 175.025104][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 175.303642][T10116] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1210'. [ 175.317987][T10116] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.421917][T10120] hsr0 speed is unknown, defaulting to 1000 [ 176.320593][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 176.331582][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 176.361656][T10172] unknown channel width for channel at 909000KHz? [ 176.368289][T10172] unknown channel width for channel at 909000KHz? [ 176.434418][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 176.469629][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 176.475910][T10182] netlink: 'syz.1.1228': attribute type 6 has an invalid length. [ 176.899701][T10196] netlink: 'syz.1.1231': attribute type 21 has an invalid length. [ 176.940859][T10196] netlink: 'syz.1.1231': attribute type 22 has an invalid length. [ 176.968292][T10196] netlink: 'syz.1.1231': attribute type 23 has an invalid length. [ 176.977515][T10209] IPVS: Unknown mcast interface: dvmrp0 [ 177.001389][T10205] netlink: 'syz.3.1235': attribute type 5 has an invalid length. [ 177.052470][T10211] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 177.123251][T10217] : renamed from hsr0 (while UP) [ 177.413003][T10246] validate_nla: 2 callbacks suppressed [ 177.413021][T10246] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 177.463116][T10247] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 177.610861][T10246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.684450][T10261] bond4: (slave geneve3): making interface the new active one [ 177.708647][T10261] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 177.735924][T10272] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.753523][T10266] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 177.833629][T10276] tipc: Enabled bearer , priority 0 [ 177.895534][T10276] syzkaller0: entered promiscuous mode [ 177.905240][T10276] syzkaller0: entered allmulticast mode [ 178.054926][T10276] tipc: Resetting bearer [ 178.115915][T10276] tipc: Disabling bearer [ 178.171816][T10301] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 178.213913][T10301] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 178.464142][T10317] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 178.481600][T10317] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 178.647296][T10333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.020081][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.076935][T10363] __nla_validate_parse: 41 callbacks suppressed [ 179.076952][T10363] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1278'. [ 179.137323][T10356] pim6reg: entered allmulticast mode [ 179.184227][T10364] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 179.243984][T10364] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 179.251387][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1279'. [ 179.277109][T10364] netlink: 1160 bytes leftover after parsing attributes in process `syz.4.1274'. [ 179.479023][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1283'. [ 179.548644][T10388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.561368][T10388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.626297][T10394] ip6gre1: entered allmulticast mode [ 179.676736][T10388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.701671][T10388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.810939][T10388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.841223][T10388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.983987][T10388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.994690][T10388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.995238][T10415] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 180.123728][T10419] veth0_to_team: entered promiscuous mode [ 180.137357][T10419] veth0_to_team: entered allmulticast mode [ 180.241636][ T3446] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.252592][ T3446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.336051][ T3446] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.351674][ T3446] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.363307][ T3446] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.375492][ T3446] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.386539][ T3446] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.427500][ T3446] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.450361][T10432] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 180.464119][T10429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.475772][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 180.489007][T10440] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1299'. [ 180.496863][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 180.549722][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 180.778777][T10454] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.1303'. [ 180.816521][T10454] openvswitch: netlink: Message has 5 unknown bytes. [ 180.886967][T10454] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1303'. [ 180.922055][T10453]  speed is unknown, defaulting to 1000 [ 181.302693][T10475] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 182.207672][T10522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.605970][T10540] sit1: entered promiscuous mode [ 182.614933][T10540] sit1: entered allmulticast mode [ 182.835208][T10556] validate_nla: 5 callbacks suppressed [ 182.835225][T10556] netlink: 'syz.0.1326': attribute type 14 has an invalid length. [ 182.903974][T10563] netlink: 'syz.4.1328': attribute type 72 has an invalid length. [ 182.992178][T10570] veth0: entered promiscuous mode [ 182.997397][T10571] netlink: 'syz.3.1329': attribute type 3 has an invalid length. [ 183.028346][T10570] netlink: 'syz.2.1330': attribute type 32 has an invalid length. [ 183.202176][T10591] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 183.455848][T10605] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 183.644153][T10615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.783281][T10568] veth0: left promiscuous mode [ 183.802839][T10626] wg0: entered promiscuous mode [ 183.921230][T10632] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 183.939231][T10632] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 183.959201][T10632] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 183.978142][T10632] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 184.006729][T10632] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 184.505024][ T51] Bluetooth: hci4: link tx timeout [ 184.511595][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.103233][T10698] __nla_validate_parse: 14 callbacks suppressed [ 185.103252][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 185.378426][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 185.407670][T10711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1367'. [ 185.586101][T10719] pimreg: entered allmulticast mode [ 185.898310][T10738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1375'. [ 186.060199][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 186.071808][T10742] tipc: Enabled bearer , priority 0 [ 186.081087][T10742] syzkaller0: entered promiscuous mode [ 186.086578][T10742] syzkaller0: entered allmulticast mode [ 186.106246][T10742] syzkaller0: mtu less than device minimum [ 186.132658][T10740] tipc: Resetting bearer [ 186.211978][T10740] tipc: Disabling bearer [ 186.299655][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 186.334404][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1381'. [ 186.357599][T10760] openvswitch: netlink: Unknown key attributes 2 [ 186.440794][T10756] geneve3: entered promiscuous mode [ 186.464040][T10756] geneve3: entered allmulticast mode [ 186.560106][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 186.671930][T10773] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1384'. [ 186.869191][T10773] pim6reg1: entered promiscuous mode [ 186.874519][T10773] pim6reg1: entered allmulticast mode [ 187.221763][T10805] sctp: [Deprecated]: syz.3.1394 (pid 10805) Use of int in max_burst socket option deprecated. [ 187.221763][T10805] Use struct sctp_assoc_value instead [ 187.678516][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1402'. [ 187.909459][T10853] syzkaller0: entered promiscuous mode [ 187.935349][T10853] syzkaller0: entered allmulticast mode [ 187.964105][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 188.581335][T10902] validate_nla: 31 callbacks suppressed [ 188.581354][T10902] netlink: 'syz.3.1420': attribute type 7 has an invalid length. [ 188.875341][T10923] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.895766][T10925] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 189.056938][T10934] bond6: (slave gretap2): making interface the new active one [ 189.071794][T10934] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 189.328949][T10951] netlink: 'syz.3.1430': attribute type 4 has an invalid length. [ 189.375899][T10951] netlink: 'syz.3.1430': attribute type 4 has an invalid length. [ 190.107828][T11009] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 190.137958][T11009] __nla_validate_parse: 11 callbacks suppressed [ 190.137977][T11009] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1447'. [ 190.184775][T11009] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 190.238720][T11011] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 191.282455][T11092] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 191.640139][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 191.796942][T11116] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 191.798464][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 191.807261][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.859930][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 192.067040][T11146] openvswitch: netlink: Key type 16144 is out of range max 32 [ 192.124267][T11148] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 192.164876][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 192.261748][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 192.328389][T11154] netlink: 'syz.1.1482': attribute type 30 has an invalid length. [ 192.392479][ T78] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.561944][ T78] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.593235][ T78] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.643402][T11175] netlink: 'syz.3.1486': attribute type 29 has an invalid length. [ 192.693965][ T78] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.818565][T11183] veth0_macvtap: left promiscuous mode [ 192.875598][T11169] netlink: 'syz.3.1486': attribute type 29 has an invalid length. [ 193.124296][T11208] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 193.144541][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 193.356137][T11205]  speed is unknown, defaulting to 1000 [ 193.413423][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 193.425252][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1497'. [ 193.439168][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 193.691175][T11226] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 193.713445][T11226] nbd: error processing sock list [ 193.733751][T11226] block nbd0: shutting down sockets [ 194.324755][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.627140][T11261] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 194.754329][T11261] team_slave_0: entered promiscuous mode [ 194.760285][T11261] team_slave_1: entered promiscuous mode [ 194.805374][T11261] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.865868][T11261] team0: Device macvtap1 is already an upper device of the team interface [ 194.899709][T11281] netlink: 'syz.1.1511': attribute type 12 has an invalid length. [ 194.912564][T11261] team_slave_0: left promiscuous mode [ 194.918126][T11261] team_slave_1: left promiscuous mode [ 194.997486][T11286] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 195.016663][T11282] IPVS: stopping master sync thread 11286 ... [ 195.171415][T11291] netlink: 'syz.2.1516': attribute type 83 has an invalid length. [ 195.582229][T11315] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 195.696457][T11321] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 195.734656][T11315] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 195.746599][T11323] netlink: 'syz.2.1526': attribute type 24 has an invalid length. [ 195.779579][T11315] team0: Device veth1_macvtap failed to register rx_handler [ 196.131421][T11349] __nla_validate_parse: 4 callbacks suppressed [ 196.131439][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1534'. [ 196.337322][T11359] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 196.370047][T11359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1537'. [ 196.412782][T11362] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 196.455405][T11365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1537'. [ 197.280081][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 197.402614][T11419] netlink: 'syz.3.1557': attribute type 7 has an invalid length. [ 197.410618][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 197.623982][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1559'. [ 197.633894][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 197.726595][T11434] bond2: left allmulticast mode [ 197.734236][T11434] bond2: left promiscuous mode [ 197.748640][T11434] bridge0: port 3(bond2) entered disabled state [ 197.755236][T11440] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 197.824061][T11434] bridge_slave_1: left allmulticast mode [ 197.840067][T11434] bridge_slave_1: left promiscuous mode [ 197.868214][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.894946][T11434] : left allmulticast mode [ 197.904417][T11434] : left promiscuous mode [ 197.919184][T11434] bridge0: port 1() entered disabled state [ 197.937086][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 197.998709][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 198.048319][T11455] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1565'. [ 198.135466][ T51] block nbd0: Receive control failed (result -32) [ 198.206985][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 198.225683][T11465] veth0: entered promiscuous mode [ 198.234168][T11464] veth0: left promiscuous mode [ 198.253815][T11457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.384553][T11466] team0: Device veth1_macvtap failed to register rx_handler [ 198.921005][T11507] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 198.930557][T11507] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 198.993907][T11509] lo: left allmulticast mode [ 199.077487][T11511] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.184073][T11503]  speed is unknown, defaulting to 1000 [ 199.509856][T11530] validate_nla: 5 callbacks suppressed [ 199.509875][T11530] netlink: 'syz.2.1590': attribute type 12 has an invalid length. [ 200.096134][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 200.827604][T11588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.087047][T11597] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20003 [ 201.220414][T11605] tunl0: left promiscuous mode [ 201.225232][T11605] tunl0: left allmulticast mode [ 201.257019][T11607] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 201.266661][T11605] gre0: left promiscuous mode [ 201.296463][T11605] gre0: left allmulticast mode [ 201.318103][T11605] gretap0: left promiscuous mode [ 201.327441][T11605] gretap0: left allmulticast mode [ 201.354607][T11605] erspan0: left promiscuous mode [ 201.376800][T11605] erspan0: left allmulticast mode [ 201.404205][T11605] ip_vti0: left promiscuous mode [ 201.426100][T11605] ip_vti0: left allmulticast mode [ 201.467429][T11605] ip6_vti0: left promiscuous mode [ 201.484547][T11605] ip6_vti0: left allmulticast mode [ 201.520744][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 201.535226][T11605] sit0: left promiscuous mode [ 201.541972][T11605] sit0: left allmulticast mode [ 201.548203][T11605] ip6tnl0: left promiscuous mode [ 201.553282][T11605] ip6tnl0: left allmulticast mode [ 201.559755][T11605] ip6gre0: left promiscuous mode [ 201.564970][T11605] ip6gre0: left allmulticast mode [ 201.571503][T11605] syz_tun: left promiscuous mode [ 201.576641][T11605] syz_tun: left allmulticast mode [ 201.589493][T11605] ip6gretap0: left promiscuous mode [ 201.595973][T11605] ip6gretap0: left allmulticast mode [ 201.613142][T11605] bridge0: left promiscuous mode [ 201.619242][T11605] bridge0: left allmulticast mode [ 201.625448][T11605] vcan0: left promiscuous mode [ 201.630952][T11605] vcan0: left allmulticast mode [ 201.636600][T11605] bond0: left promiscuous mode [ 201.641988][T11605] bond_slave_0: left promiscuous mode [ 201.647637][T11605] bond_slave_1: left promiscuous mode [ 201.655447][T11605] bond0: left allmulticast mode [ 201.661117][T11605] bond_slave_0: left allmulticast mode [ 201.666981][T11605] bond_slave_1: left allmulticast mode [ 201.680236][T11605] team0: left promiscuous mode [ 201.685132][T11605] team_slave_0: left promiscuous mode [ 201.694148][T11605] team_slave_1: left promiscuous mode [ 201.701078][T11605] team0: left allmulticast mode [ 201.705949][T11605] team_slave_0: left allmulticast mode [ 201.711710][T11605] team_slave_1: left allmulticast mode [ 201.720576][T11605] dummy0: left promiscuous mode [ 201.725461][T11605] dummy0: left allmulticast mode [ 201.732234][T11605] nlmon0: left promiscuous mode [ 201.737701][T11605] nlmon0: left allmulticast mode [ 201.747551][T11605] caif0: left promiscuous mode [ 201.752735][T11605] caif0: left allmulticast mode [ 201.757609][T11605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.774041][T11600] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 201.785922][T11600] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 201.892051][T11639] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.040410][T11650] __nla_validate_parse: 14 callbacks suppressed [ 202.040427][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 202.150193][T11651] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1617'. [ 202.334133][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 202.389641][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.504851][T11664] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1623'. [ 202.875768][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 202.916930][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.938340][T11639] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.956202][T11639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.074034][T11677] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 203.093334][T11677] bond7: (slave vcan1): Error -95 calling set_mac_address [ 203.143963][T11694] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1634'. [ 203.203049][T11694] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1634'. [ 203.337378][T11708] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 203.346192][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 203.462091][T11708] bond7 (unregistering): Released all slaves [ 203.500357][T11705] team_slave_0: mtu greater than device maximum [ 203.532895][T11714] ip6tnl1: entered promiscuous mode [ 203.593992][T11714] ip6tnl1: entered allmulticast mode [ 203.720211][T11733] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1644'. [ 203.730230][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 203.740944][T11733] C: renamed from lo [ 203.765262][T11733] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.926719][T11748] netlink: 'syz.1.1648': attribute type 13 has an invalid length. [ 204.007220][T11748] veth0_macvtap: left promiscuous mode [ 204.025226][T11743] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 204.038482][T11748] macvtap0: entered allmulticast mode [ 204.051358][T11748] macvtap0: refused to change device tx_queue_len [ 204.094502][T11743] team0: Device veth1_macvtap failed to register rx_handler [ 204.269240][T11767] syz_tun: entered allmulticast mode [ 204.278736][T11766] syz_tun: left allmulticast mode [ 204.733161][T11796] lo: Caught tx_queue_len zero misconfig [ 204.761424][T11796] netem: change failed [ 204.849760][T11801]  speed is unknown, defaulting to 1000 [ 205.111981][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.575381][T11822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.591222][T11822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.647506][T11822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.662955][T11822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.984673][T11844] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 206.175597][T11853] tipc: Enabled bearer , priority 0 [ 206.221009][T11853] tipc: Resetting bearer [ 206.276081][T11852] tipc: Disabling bearer [ 206.298662][T11857] netlink: 'syz.1.1684': attribute type 13 has an invalid length. [ 206.330878][T11857] macvtap0: refused to change device tx_queue_len [ 206.549658][T11874] netlink: 'syz.3.1691': attribute type 2 has an invalid length. [ 206.642538][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 206.669320][T11874] tipc: Enabling of bearer rejected, failed to enable media [ 207.084388][T11911] geneve3: entered promiscuous mode [ 207.090157][T11911] geneve3: entered allmulticast mode [ 207.118405][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 207.370805][T11911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.435935][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 207.446342][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 207.466514][T11084] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 208.270440][T11982] __nla_validate_parse: 22 callbacks suppressed [ 208.270458][T11982] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1722'. [ 208.442165][T11988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1725'. [ 208.457421][T11988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1725'. [ 208.526670][T11991] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 208.732013][T12003] tipc: Enabled bearer , priority 0 [ 208.751306][T12003] syzkaller0: entered promiscuous mode [ 208.764567][T12003] syzkaller0: entered allmulticast mode [ 208.873245][T12003] tipc: Resetting bearer [ 208.896499][T12001] tipc: Resetting bearer [ 208.919497][T12001] tipc: Disabling bearer [ 208.996621][T11911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.040662][T11911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.170452][T11911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.197889][T11911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.251208][T12015] tap0: tun_chr_ioctl cmd 1074025672 [ 209.258955][T12015] tap0: ignored: set checksum disabled [ 209.391192][T11911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.428307][T11911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.472782][T12030] netlink: 'syz.3.1739': attribute type 21 has an invalid length. [ 209.517414][T12030] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1739'. [ 209.642799][T11078] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 209.664896][T11078] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.720638][ T3490] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 209.736121][ T3490] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.784781][ T3490] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 209.800931][ T3490] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.861456][ T3490] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 209.875157][ T7965] IPVS: starting estimator thread 0... [ 209.877818][ T3490] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.978743][T12044] IPVS: using max 27 ests per chain, 64800 per kthread [ 210.280410][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 210.628069][T12089] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 210.645558][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1759'. [ 210.654835][T12089] dummy0: entered promiscuous mode [ 210.664217][T12089] net_ratelimit: 6 callbacks suppressed [ 210.664298][T12089] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 210.891877][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1762'. [ 211.036150][T12062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.048540][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1767'. [ 211.617623][T12151] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 211.656988][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 211.671177][T12149] veth1_to_bond: entered allmulticast mode [ 211.678286][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'. [ 211.868457][T12149] bond0: (slave bond_slave_1): Releasing backup interface [ 211.903390][T12149] veth1_to_bond (unregistering): left allmulticast mode [ 212.708867][T12222] sctp: [Deprecated]: syz.1.1794 (pid 12222) Use of int in max_burst socket option. [ 212.708867][T12222] Use struct sctp_assoc_value instead [ 212.877569][T12233] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.438333][T12285] __nla_validate_parse: 3 callbacks suppressed [ 213.438351][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1812'. [ 213.574898][T12293] IPv6: NLM_F_REPLACE set, but no existing node found! [ 213.652847][T12299] team0: Caught tx_queue_len zero misconfig [ 213.660971][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 213.685972][T12299] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1814'. [ 213.788060][T12298] IPv6: sit3: Disabled Multicast RS [ 213.795076][T12298] sit3: entered allmulticast mode [ 213.877121][T12309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1818'. [ 214.361227][T12338] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1827'. [ 214.370889][T12338] NCSI netlink: No device for ifindex 0 [ 214.389182][T12348] netlink: 'syz.0.1830': attribute type 58 has an invalid length. [ 214.417131][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'. [ 214.470421][T12348] pim6reg527: entered allmulticast mode [ 214.668836][T12357] netlink: 'syz.2.1832': attribute type 11 has an invalid length. [ 214.718058][T12357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1832'. [ 214.834971][T12361]  speed is unknown, defaulting to 1000 [ 214.897087][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 214.980600][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1834'. [ 215.013543][T12369] tipc: Invalid UDP bearer configuration [ 215.013601][T12369] tipc: Enabling of bearer rejected, failed to enable media [ 215.053219][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 215.250831][T12382] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 215.259828][T12382] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 215.326839][T12386] tipc: Enabling of bearer rejected, failed to enable media [ 215.503891][T12388] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 215.556240][T12388] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 215.564527][T12388] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 215.578920][T12388] netlink: 'syz.2.1840': attribute type 2 has an invalid length. [ 215.833892][T12406] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 216.037094][T12407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.150051][T12410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.162069][T12410] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 216.192366][T12410] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 216.734258][T12446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.933666][T12460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.551454][T12488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.637100][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.046909][T12523] netlink: 'syz.1.1877': attribute type 2 has an invalid length. [ 218.078263][T12523] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 218.248950][T12528] tipc: Enabled bearer , priority 0 [ 218.410051][T12535] syzkaller1: entered promiscuous mode [ 218.416206][T12535] syzkaller1: entered allmulticast mode [ 218.452860][T12541] __nla_validate_parse: 12 callbacks suppressed [ 218.452876][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 218.488157][T12541] netlink: 'syz.4.1883': attribute type 5 has an invalid length. [ 218.497433][T12536] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.506278][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1883'. [ 218.548056][T12541] geneve4: entered promiscuous mode [ 218.553402][T12541] geneve4: entered allmulticast mode [ 218.643087][ T78] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 218.672900][ T78] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 218.695028][ T78] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 218.732266][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'. [ 218.743022][ T78] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 218.743401][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 218.803035][T12560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1890'. [ 218.984303][T12573] macvtap1: entered promiscuous mode [ 219.013720][T12573] vlan0: entered promiscuous mode [ 219.036656][T12573] macvtap1: entered allmulticast mode [ 219.056229][T12573] vlan0: entered allmulticast mode [ 219.063485][T12573] veth0_vlan: entered allmulticast mode [ 219.086584][T12578] netlink: 'syz.0.1893': attribute type 1 has an invalid length. [ 219.088441][T12524] tipc: Disabling bearer [ 219.157558][T12576] macvtap2: entered promiscuous mode [ 219.163959][T12576] macvtap2: entered allmulticast mode [ 219.201911][T12578] bond3: entered promiscuous mode [ 219.207425][T12578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.233271][T12590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1895'. [ 219.727991][T12617] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1904'. [ 219.742020][T12621] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1904'. [ 219.886080][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 219.942028][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 219.961187][T11085] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.000198][T11085] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.018577][T11085] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.046757][T11085] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.125251][T12656] syzkaller0: entered promiscuous mode [ 220.151984][T12656] syzkaller0: entered allmulticast mode [ 220.179836][T12655] tipc: Enabled bearer , priority 0 [ 220.253181][T12663] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 220.278007][T12655] tipc: Resetting bearer [ 220.348443][T12655] tipc: Disabling bearer [ 220.944145][T12720] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 220.982544][T12720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.071748][T12734] syzkaller0: entered promiscuous mode [ 221.086316][T12734] syzkaller0: entered allmulticast mode [ 221.430496][T12761] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 221.463711][T12761] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.615879][T12766] netlink: 'syz.3.1943': attribute type 1 has an invalid length. [ 221.916526][T12772] netlink: 'syz.2.1946': attribute type 1 has an invalid length. [ 222.185522][T12793] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 222.334584][T12790] team0 (unregistering): Port device team_slave_0 removed [ 222.350464][T12790] team0 (unregistering): Port device team_slave_1 removed [ 222.377212][T12803] 0ªî{X¹¦: renamed from gretap0 [ 222.386012][T12803] 0ªî{X¹¦: left promiscuous mode [ 222.392959][T12803] 0ªî{X¹¦: entered allmulticast mode [ 222.412398][T12803] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 222.478609][ T10] !yz!: Port: 1 Link DOWN [ 223.125242][T12846] tipc: Enabled bearer , priority 0 [ 223.133103][T12846] syzkaller0: entered promiscuous mode [ 223.139116][T12846] syzkaller0: entered allmulticast mode [ 223.192478][T12846] tipc: Resetting bearer [ 223.248105][T12845] tipc: Resetting bearer [ 223.345249][T12845] tipc: Disabling bearer [ 223.585407][T12880] __nla_validate_parse: 11 callbacks suppressed [ 223.585426][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 223.636085][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 223.687036][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 224.179158][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1982'. [ 224.182114][T12914] netlink: 'syz.4.1983': attribute type 10 has an invalid length. [ 224.218193][T12912] nbd: must specify a size in bytes for the device [ 224.243914][T12914] bridge_slave_1: entered promiscuous mode [ 224.266861][T12914] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 224.297571][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1984'. [ 224.345604][T12921] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 224.382860][T12921] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 224.717613][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1992'. [ 224.829719][T12944] ip6erspan0: entered promiscuous mode [ 224.835223][T12944] ip6erspan0: entered allmulticast mode [ 224.854003][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 225.075235][T12970] netlink: 968 bytes leftover after parsing attributes in process `syz.1.2000'. [ 225.097613][T12970] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2000'. [ 225.199522][T12977] tipc: MTU too low for tipc bearer [ 225.217570][T12980] netlink: 'syz.0.2005': attribute type 2 has an invalid length. [ 225.229088][T12977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2004'. [ 225.240157][T12977] netlink: 'syz.1.2004': attribute type 6 has an invalid length. [ 225.248585][T12977] netlink: 'syz.1.2004': attribute type 5 has an invalid length. [ 225.447119][T12994] netlink: 'syz.1.2007': attribute type 8 has an invalid length. [ 225.649497][T13006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 226.003538][T13040] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 226.191078][T13047] netlink: 'syz.0.2020': attribute type 29 has an invalid length. [ 226.231494][T13047] netlink: 'syz.0.2020': attribute type 29 has an invalid length. [ 226.250988][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.490312][T13020] infiniband syz0: set down [ 226.503237][T13020] infiniband syz0: added ipvlan1 [ 226.565298][T13020] RDS/IB: syz0: added [ 226.569956][T13020] smc: adding ib device syz0 with port count 1 [ 226.576519][T13020] smc: ib device syz0 port 1 has pnetid [ 226.586385][T13069] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 226.631587][T13069] team0: Port device geneve0 added [ 226.818233][T13082] tipc: Enabled bearer , priority 0 [ 226.882398][T13086] IPVS: Unknown mcast interface: dvmrp0 [ 227.019177][T13090] tipc: Enabled bearer , priority 0 [ 227.063034][T13088] tipc: Disabling bearer [ 227.499349][T13108] netlink: 'syz.3.2039': attribute type 3 has an invalid length. [ 227.520390][T13108] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 227.537942][T13108] openvswitch: netlink: Message has 6332 unknown bytes. [ 227.937901][ T5869] tipc: Node number set to 3303740800 [ 228.244591][T13147] gtp0: entered promiscuous mode [ 228.256759][T13147] gtp0: entered allmulticast mode [ 228.462928][T13152] netlink: 'syz.1.2051': attribute type 7 has an invalid length. [ 228.481777][T13152] netlink: 'syz.1.2051': attribute type 8 has an invalid length. [ 228.586922][T13157] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 228.625993][T13157] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.835777][T13164] __nla_validate_parse: 15 callbacks suppressed [ 228.835795][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 229.384168][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 229.455713][T13197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.585005][T13197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.624206][T13211] dvmrp0: entered allmulticast mode [ 229.792010][T13223] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 229.802463][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 230.142316][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'. [ 230.204188][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 230.386297][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 230.765457][T13284] tipc: Enabled bearer , priority 0 [ 230.774074][T13284] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 230.788174][T13284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2088'. [ 230.803241][T13284] tipc: Resetting bearer [ 230.816735][T13289] netlink: 'syz.4.2091': attribute type 30 has an invalid length. [ 230.844257][T13280] tipc: Disabling bearer [ 231.151010][T13317] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 232.028509][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 232.146564][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 232.447537][T13370] nbd: must specify a size in bytes for the device [ 232.644408][T13390] syzkaller0: entered promiscuous mode [ 232.653440][T13390] syzkaller0: entered allmulticast mode [ 232.706394][T13389] tipc: Enabled bearer , priority 0 [ 232.791868][T13390] tipc: Resetting bearer [ 232.800246][T13389] netlink: 'syz.4.2119': attribute type 10 has an invalid length. [ 232.853546][T13390] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2119'. [ 232.884409][T13389] geneve1: entered promiscuous mode [ 232.894099][T13389] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 232.913841][T13387] tipc: Resetting bearer [ 233.000846][T13387] tipc: Disabling bearer [ 233.431234][T13445] tipc: Enabling of bearer rejected, already enabled [ 233.840409][T13463] IPVS: length: 91 != 24 [ 233.872431][T13465] __nla_validate_parse: 5 callbacks suppressed [ 233.872448][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2137'. [ 233.977428][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 234.005188][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 234.163288][T13487] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2144'. [ 234.179112][T13487] netlink: 'syz.0.2144': attribute type 58 has an invalid length. [ 234.208187][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2144'. [ 234.264951][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 234.340637][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 234.357318][T13503] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2150'. [ 234.400120][T13503] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 234.633743][T13521] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 234.811516][T13536] netlink: 'syz.3.2160': attribute type 8 has an invalid length. [ 234.929497][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2163'. [ 234.987088][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 235.068571][T13550] syzkaller1: entered promiscuous mode [ 235.104708][T13550] syzkaller1: entered allmulticast mode [ 236.163062][T13622] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.342386][T13634]  speed is unknown, defaulting to 1000 [ 236.455740][T13645] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 236.528175][T13648] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 236.626589][T13653] TCP: TCP_TX_DELAY enabled [ 236.987846][T13672] vlan2: entered promiscuous mode [ 237.048610][T13676] ksmbd: Unknown IPC event: 3, ignore. [ 237.318281][T13693] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 237.463493][T13692] bond10: (slave gretap0): making interface the new active one [ 237.486861][T13692] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 237.717051][T13705] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.239712][T13732] 8021q: adding VLAN 0 to HW filter on device bond11 [ 238.810871][T13766] tipc: Enabled bearer , priority 0 [ 238.895230][T13765] tipc: Disabling bearer [ 239.260625][T13790] bond0: Caught tx_queue_len zero misconfig [ 239.392831][T13806] netlink: 'syz.3.2242': attribute type 10 has an invalid length. [ 239.461757][T13806] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 239.627105][T13816] tipc: Enabling of bearer rejected, already enabled [ 239.913929][T13836] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 239.966459][T13844] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 240.018356][T13836] team0: Port device dummy0 added [ 240.044088][T13844] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.065806][T13847] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 240.119606][T13844] team0: Failed to send options change via netlink (err -105) [ 240.127357][T13844] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.169405][T13844] team0: Port device dummy0 removed [ 240.190244][T13844] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 240.478297][T13880] __nla_validate_parse: 10 callbacks suppressed [ 240.478316][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 240.529539][T13883] syz_tun: entered allmulticast mode [ 240.574035][T13888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2265'. [ 240.585954][T13883] syz_tun: left allmulticast mode [ 240.599585][T13888] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2265'. [ 240.655917][T13878] tipc: Enabled bearer , priority 0 [ 240.674484][T13891] netlink: 'syz.1.2265': attribute type 23 has an invalid length. [ 240.716985][T13888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2265'. [ 240.757278][T13877] tipc: Disabling bearer [ 241.132141][T13925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2275'. [ 241.168442][T13925] 8021q: VLANs not supported on gre0 [ 241.290075][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 241.313439][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 241.327945][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 241.351024][T13938] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.359888][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 241.474413][T13943] netem: incorrect ge model size [ 241.492109][T13943] netem: change failed [ 241.507220][T13933]  speed is unknown, defaulting to 1000 [ 241.590416][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 241.792352][T13966] bond4: entered promiscuous mode [ 241.806364][T13966] bond4: entered allmulticast mode [ 241.812571][T13966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.825201][T13963] syzkaller1: entered promiscuous mode [ 241.833139][T13963] syzkaller1: entered allmulticast mode [ 242.221202][T13982] netlink: 'syz.3.2292': attribute type 5 has an invalid length. [ 242.284797][T13983] netlink: 'syz.3.2292': attribute type 5 has an invalid length. [ 243.209382][T14012] syzkaller0: entered promiscuous mode [ 243.217310][T14012] syzkaller0: entered allmulticast mode [ 243.226548][T14011] tipc: Enabled bearer , priority 0 [ 243.237245][T14009] tipc: Resetting bearer [ 244.232361][ T10] tipc: Node number set to 725336069 [ 245.002556][T14009] tipc: Disabling bearer [ 245.162050][T14051] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 245.181711][T14057] sctp: [Deprecated]: syz.3.2313 (pid 14057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.181711][T14057] Use struct sctp_sack_info instead [ 245.223541][T14058] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 245.241312][T14058] delete_channel: no stack [ 245.390465][T14069] netlink: 'syz.1.2317': attribute type 142 has an invalid length. [ 245.625517][T14080] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 245.645199][T14080] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 245.653113][T14080] tipc: Resetting bearer [ 245.664713][T14083] tipc: Enabling of bearer rejected, already enabled [ 245.911490][T14092] __nla_validate_parse: 10 callbacks suppressed [ 245.911510][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2322'. [ 246.854989][T14144] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 246.873771][T14144] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 246.890630][T14144] tipc: Resetting bearer [ 246.900857][T14145] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 246.911231][T14145] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 247.325582][T14175] GUP no longer grows the stack in syz.1.2344 (14175): 200000006000-200000008000 (200000005000) [ 247.374140][T14175] CPU: 0 UID: 0 PID: 14175 Comm: syz.1.2344 Not tainted syzkaller #0 PREEMPT(full) [ 247.374169][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.374187][T14175] Call Trace: [ 247.374195][T14175] [ 247.374204][T14175] dump_stack_lvl+0x189/0x250 [ 247.374237][T14175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.374257][T14175] ? __pfx__printk+0x10/0x10 [ 247.374277][T14175] ? find_vma+0xe7/0x160 [ 247.374314][T14175] __get_user_pages+0x24d0/0x2ce0 [ 247.374334][T14175] ? __lock_acquire+0xab9/0xd20 [ 247.374387][T14175] ? __gup_longterm_locked+0xc68/0x1660 [ 247.374417][T14175] __gup_longterm_locked+0xde9/0x1660 [ 247.374454][T14175] ? sanity_check_pinned_pages+0x123a/0x1300 [ 247.374485][T14175] gup_fast_fallback+0x1e6a/0x2010 [ 247.374544][T14175] ? __pfx_gup_fast_fallback+0x10/0x10 [ 247.374572][T14175] ? __lock_acquire+0xab9/0xd20 [ 247.374602][T14175] ? pin_user_pages_fast+0x4d/0xb0 [ 247.374625][T14175] iov_iter_extract_pages+0x35a/0x5e0 [ 247.374658][T14175] extract_iter_to_sg+0xe46/0x24e0 [ 247.374695][T14175] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 247.374715][T14175] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.374733][T14175] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.374754][T14175] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.374771][T14175] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.374794][T14175] ? __asan_memset+0x22/0x50 [ 247.374817][T14175] hash_sendmsg+0x4f4/0x11d0 [ 247.374863][T14175] ? __pfx_hash_sendmsg+0x10/0x10 [ 247.374886][T14175] __sock_sendmsg+0x219/0x270 [ 247.374915][T14175] ____sys_sendmsg+0x52d/0x830 [ 247.374947][T14175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.374979][T14175] ? import_iovec+0x74/0xa0 [ 247.375005][T14175] ___sys_sendmsg+0x21f/0x2a0 [ 247.375037][T14175] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.375100][T14175] ? __fget_files+0x2a/0x420 [ 247.375117][T14175] ? __fget_files+0x3a0/0x420 [ 247.375146][T14175] __sys_sendmmsg+0x227/0x430 [ 247.375174][T14175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 247.375194][T14175] ? do_futex+0x395/0x420 [ 247.375225][T14175] ? fd_install+0x97/0x540 [ 247.375271][T14175] ? rcu_is_watching+0x15/0xb0 [ 247.375296][T14175] __x64_sys_sendmmsg+0xa0/0xc0 [ 247.375320][T14175] do_syscall_64+0xfa/0x3b0 [ 247.375338][T14175] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.375354][T14175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.375371][T14175] ? clear_bhb_loop+0x60/0xb0 [ 247.375391][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.375408][T14175] RIP: 0033:0x7f43b8f8eec9 [ 247.375423][T14175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.375439][T14175] RSP: 002b:00007f43b9e52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.375466][T14175] RAX: ffffffffffffffda RBX: 00007f43b91e5fa0 RCX: 00007f43b8f8eec9 [ 247.375480][T14175] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 247.375492][T14175] RBP: 00007f43b9011f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.375504][T14175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.375514][T14175] R13: 00007f43b91e6038 R14: 00007f43b91e5fa0 R15: 00007ffc48f56b98 [ 247.375544][T14175] [ 247.859312][T14186] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2350'. [ 247.876590][T14187] ip6gre2: entered allmulticast mode [ 247.888988][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2350'. [ 248.057031][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 248.075484][T14196] pim6reg1: entered promiscuous mode [ 248.094719][T14196] pim6reg1: entered allmulticast mode [ 248.171275][T14193] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.261188][T14206] vlan2: entered allmulticast mode [ 248.275582][T14206] bond10: entered allmulticast mode [ 248.362045][T14213] tipc: Enabling of bearer rejected, already enabled [ 248.591522][T14211] bridge0: port 3(batadv0) entered disabled state [ 248.598521][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.630162][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'. [ 248.863556][T14211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.043916][T14211] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 249.272983][T14211] wireguard0: left promiscuous mode [ 249.297497][T14211] veth11: left promiscuous mode [ 249.323305][T14211] geneve2: left promiscuous mode [ 249.389505][T14211] ip6tnl1: left promiscuous mode [ 249.457261][T14211] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 249.478796][T14211] gtp0: left promiscuous mode [ 249.529035][T14220] 8021q: VLANs not supported on tunl0 [ 249.585161][ T7943]  speed is unknown, defaulting to 1000 [ 249.598123][ T7943] syz1: Port: 1 Link DOWN [ 249.674122][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.688311][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.741932][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.756183][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.788340][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.797530][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.820915][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.843977][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.942183][T14258] macvtap1: entered promiscuous mode [ 249.947518][T14258] vlan0: entered promiscuous mode [ 249.962235][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 249.971737][T14258] macvtap1: entered allmulticast mode [ 249.977218][T14258] vlan0: entered allmulticast mode [ 249.990518][T14258] veth0_vlan: entered allmulticast mode [ 250.007326][T14267] tipc: Enabling of bearer rejected, already enabled [ 250.058900][T14261] macvtap2: entered promiscuous mode [ 250.069441][T14261] macvtap2: entered allmulticast mode [ 250.116269][T14274] tipc: Enabled bearer , priority 0 [ 250.174334][T14273] tipc: Disabling bearer [ 250.288053][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 250.299361][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 250.326018][T14287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 250.773592][T14317] tipc: Enabled bearer , priority 0 [ 250.809340][T14315] tipc: Disabling bearer [ 251.205150][T14346] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 251.292076][T14348] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 251.789278][T14375] team0: Device wireguard0 is of different type [ 251.806870][T14381] netlink: 'syz.1.2396': attribute type 28 has an invalid length. [ 251.835047][T14381] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 251.885059][T14381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 251.911864][T14385] netlink: 'syz.1.2396': attribute type 28 has an invalid length. [ 251.938322][T14385] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 251.957989][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 252.009126][T14393] netlink: 'syz.3.2403': attribute type 1 has an invalid length. [ 252.127235][T14403] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2402'. [ 252.201328][T14399] ip6tnl0: Caught tx_queue_len zero misconfig [ 252.406947][T14421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2411'. [ 252.406962][T14422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 252.443937][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2413'. [ 252.445311][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2411'. [ 252.906339][T14451] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2421'. [ 253.184363][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 253.200113][T14464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2425'. [ 253.526489][T14491] openvswitch: netlink: Multiple metadata blocks provided [ 253.548470][T14491] openvswitch: netlink: Multiple metadata blocks provided [ 253.722457][T14502] lo: entered promiscuous mode [ 253.748167][T14502] lo: entered allmulticast mode [ 253.799851][T14502] tunl0: entered promiscuous mode [ 253.815810][T14502] tunl0: entered allmulticast mode [ 253.828238][T14508] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 253.847364][T14502] gre0: entered promiscuous mode [ 253.852885][T14502] gre0: entered allmulticast mode [ 253.865114][T14502] gretap0: entered promiscuous mode [ 253.871481][T14502] gretap0: entered allmulticast mode [ 253.882273][T14502] erspan0: entered promiscuous mode [ 253.887606][T14502] erspan0: entered allmulticast mode [ 253.895415][T14502] ip_vti0: entered promiscuous mode [ 253.902192][T14502] ip_vti0: entered allmulticast mode [ 253.909265][T14502] ip6_vti0: entered promiscuous mode [ 253.914748][T14502] ip6_vti0: entered allmulticast mode [ 253.923350][T14502] sit0: entered promiscuous mode [ 253.928916][T14502] sit0: entered allmulticast mode [ 253.940039][T14502] ip6tnl0: entered promiscuous mode [ 253.945423][T14502] ip6tnl0: entered allmulticast mode [ 253.953107][T14502] ip6gre0: entered promiscuous mode [ 253.959125][T14502] ip6gre0: entered allmulticast mode [ 253.966571][T14502] syz_tun: entered promiscuous mode [ 253.972234][T14502] syz_tun: entered allmulticast mode [ 253.980282][T14502] ip6gretap0: entered promiscuous mode [ 253.985941][T14502] ip6gretap0: entered allmulticast mode [ 253.995195][T14502] bridge0: entered promiscuous mode [ 254.001110][T14502] bridge0: entered allmulticast mode [ 254.008296][T14502] vcan0: entered promiscuous mode [ 254.013504][T14502] vcan0: entered allmulticast mode [ 254.020587][T14502] bond0: entered promiscuous mode [ 254.025781][T14502] bond_slave_0: entered promiscuous mode [ 254.032336][T14502] bond0: entered allmulticast mode [ 254.037614][T14502] bond_slave_0: entered allmulticast mode [ 254.046830][T14502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.055061][T14502] nlmon0: entered promiscuous mode [ 254.060890][T14502] nlmon0: entered allmulticast mode [ 254.068481][T14502] caif0: entered promiscuous mode [ 254.073594][T14502] caif0: entered allmulticast mode [ 254.079873][T14502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.195724][T14512] bond13: (slave bridge7): making interface the new active one [ 254.228054][T14512] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 254.352497][T14524] xt_policy: neither incoming nor outgoing policy selected [ 254.367086][T14516] macvtap3: entered promiscuous mode [ 254.374193][T14516] macvtap3: entered allmulticast mode [ 254.396681][T14525] tipc: Enabling of bearer rejected, already enabled [ 254.430742][T14523] tipc: Enabled bearer , priority 0 [ 254.494110][T14519] tipc: Disabling bearer [ 254.516144][T14518] tipc: Resetting bearer [ 254.891325][T14555] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 254.966025][T14562] netlink: 'syz.4.2451': attribute type 10 has an invalid length. [ 255.762796][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.726722][T14562] team0: Port device geneve0 added [ 256.916925][T14586] tipc: Enabling of bearer rejected, already enabled [ 256.950109][T14585] tipc: Enabling of bearer rejected, already enabled [ 257.238094][T14608] __nla_validate_parse: 7 callbacks suppressed [ 257.238112][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 257.309543][T14612] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 257.320175][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2465'. [ 257.358074][T14612] netlink: 'syz.3.2467': attribute type 3 has an invalid length. [ 257.388929][T14612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2467'. [ 257.422399][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 257.734226][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 257.891033][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2475'. [ 257.935226][T14656] tipc: Enabling of bearer rejected, already enabled [ 258.175902][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'. [ 258.460823][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 258.476033][T14684] bridge_slave_1: default FDB implementation only supports local addresses [ 258.922654][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 258.956685][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 259.068601][T14726] bridge0: port 1(vlan1) entered blocking state [ 259.116309][T14726] bridge0: port 1(vlan1) entered disabled state [ 259.148449][T14726] vlan1: entered allmulticast mode [ 259.158717][T14726] bridge0: entered allmulticast mode [ 259.176272][T14726] vlan1: left allmulticast mode [ 259.182430][T14726] bridge0: left allmulticast mode [ 259.603629][T14758] team0: Port device geneve5 added [ 259.609828][T11082] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20003 - 0 [ 259.623695][T11082] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20003 - 0 [ 259.632893][T11082] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20003 - 0 [ 259.642355][T11082] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20003 - 0 [ 259.813531][T14770] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 259.828338][T14768] IPVS: stopping backup sync thread 14770 ... [ 260.299406][T14800] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 260.921633][T14844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.139691][T14853] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 261.679270][T14884] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 261.817577][T14892] netlink: 'syz.4.2549': attribute type 10 has an invalid length. [ 261.856668][T14895] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 261.883652][T14895] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 262.294476][T14925] __nla_validate_parse: 11 callbacks suppressed [ 262.294527][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2558'. [ 262.307367][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 262.316950][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 262.348102][T14920] nbd1: detected capacity change from 0 to 63 [ 262.397113][T14929] block nbd1: NBD_DISCONNECT [ 262.404548][T14929] block nbd1: Disconnected due to user request. [ 262.417229][T14929] block nbd1: shutting down sockets [ 262.439476][T14933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2560'. [ 262.469611][T14933] ip6gre0: Caught tx_queue_len zero misconfig [ 262.565662][T14944] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 262.686569][T14946] netlink: 'syz.0.2564': attribute type 10 has an invalid length. [ 262.694563][T14946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2564'. [ 262.706365][T14949] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 262.725481][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 262.736156][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'. [ 263.038600][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 263.273591][T14995] netlink: 147448 bytes leftover after parsing attributes in process `syz.4.2575'. [ 263.371787][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2579'. [ 263.384456][T15002] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2579'. [ 263.476656][T15014] bridge8: entered promiscuous mode [ 263.482289][T15014] bridge8: entered allmulticast mode [ 264.449825][T15052]  speed is unknown, defaulting to 1000 [ 264.520695][T15059] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 265.249524][T15064] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 265.258171][T15064] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 265.282851][T15064] netlink: 'syz.0.2594': attribute type 2 has an invalid length. [ 265.346868][T15066] tipc: Enabled bearer , priority 0 [ 265.415286][T15065] tipc: Disabling bearer [ 265.439320][T15072] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.712616][T15076] openvswitch: netlink: Message has -1 unknown bytes. [ 266.500493][T15099] netlink: 'syz.4.2606': attribute type 23 has an invalid length. [ 266.510839][T15099] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 266.545677][T15099] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 266.559900][T15107] netlink: zone id is out of range [ 266.568660][T15107] netlink: zone id is out of range [ 266.573802][T15107] netlink: zone id is out of range [ 266.587877][T15099] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 266.605968][T15107] netlink: zone id is out of range [ 266.611367][T15107] netlink: zone id is out of range [ 266.628789][T15107] netlink: zone id is out of range [ 266.640852][T15107] netlink: zone id is out of range [ 266.655001][T15107] netlink: zone id is out of range [ 266.671756][T15107] netlink: zone id is out of range [ 266.689429][T15107] netlink: zone id is out of range [ 267.601979][T15148] __nla_validate_parse: 25 callbacks suppressed [ 267.602001][T15148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2620'. [ 267.717243][T15152] netlink: 'syz.1.2623': attribute type 83 has an invalid length. [ 267.821808][T15156] netlink: 'syz.4.2624': attribute type 3 has an invalid length. [ 268.187280][T15167] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.393113][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2634'. [ 268.405579][T15181] netlink: 'syz.3.2631': attribute type 64 has an invalid length. [ 268.420419][T15181] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2631'. [ 268.435218][T15171] "syz.0.2633" (15171) uses obsolete ecb(arc4) skcipher [ 268.447332][T15180] netlink: 'syz.4.2634': attribute type 9 has an invalid length. [ 268.631720][T15192] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 268.742369][T15202] veth0: entered promiscuous mode [ 268.774106][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 268.825621][T15199] veth0 (unregistering): left promiscuous mode [ 269.081360][T15218] tipc: Enabling of bearer rejected, already enabled [ 269.226814][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'. [ 269.329534][T15228] netlink: 'syz.3.2650': attribute type 2 has an invalid length. [ 269.347504][T15228] tipc: Enabled bearer , priority 0 [ 269.366394][T15228] syzkaller0: entered promiscuous mode [ 269.387080][T15228] syzkaller0: entered allmulticast mode [ 269.423032][T15228] tipc: Resetting bearer [ 269.459321][T15227] tipc: Resetting bearer [ 269.548790][T15227] tipc: Disabling bearer [ 269.594199][T15241] IPv6: Can't replace route, no match found [ 269.850019][T15256] netlink: 'syz.0.2661': attribute type 4 has an invalid length. [ 269.860847][T15257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2662'. [ 269.929951][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2663'. [ 270.052231][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 270.136315][ T3466] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 271.195129][T15318] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 271.202485][T15323] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 271.227481][T15318] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 271.252844][T15318] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 271.448283][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'. [ 271.606202][T15337] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2685'. [ 271.638413][T15337] net_ratelimit: 218 callbacks suppressed [ 271.638432][T15337] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 271.682660][T15342] openvswitch: netlink: Flow key attribute not present in set flow. [ 271.709455][T15340] tipc: Enabled bearer , priority 0 [ 271.748722][T15347] openvswitch: netlink: Flow key attribute not present in set flow. [ 271.787456][T15339] tipc: Disabling bearer [ 271.883236][T15350] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 272.402800][T15384] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 272.562105][T15391] tipc: Enabled bearer , priority 0 [ 272.593235][T15397] netlink: set zone limit has 8 unknown bytes [ 272.604747][T15390] tipc: Disabling bearer [ 272.793124][T15406] validate_nla: 30 callbacks suppressed [ 272.793144][T15406] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 272.796963][T15408] __nla_validate_parse: 1 callbacks suppressed [ 272.796981][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 272.832898][T15406] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2709'. [ 272.843761][T15412] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 272.883134][T15414] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 273.002642][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2712'. [ 273.036698][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2716'. [ 273.074092][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2716'. [ 273.114937][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2716'. [ 273.275110][T15447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.293012][T15443] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 273.301076][T15443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2720'. [ 273.310910][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2722'. [ 273.395855][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.416774][T15454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.451021][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.469030][T15454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.479409][T15459] netlink: 'syz.1.2723': attribute type 3 has an invalid length. [ 273.487157][T15459] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2723'. [ 273.565284][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 273.654159][T15463]  speed is unknown, defaulting to 1000 [ 274.175472][T15491] netlink: 'syz.0.2734': attribute type 10 has an invalid length. [ 274.580374][T15509] sctp: [Deprecated]: syz.1.2736 (pid 15509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.580374][T15509] Use struct sctp_sack_info instead [ 274.898858][T15531] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 275.046660][T15525] tipc: Enabling of bearer rejected, already enabled [ 275.161917][T15544] netlink: 'syz.1.2745': attribute type 10 has an invalid length. [ 275.179392][T15544] batadv0: left allmulticast mode [ 275.209957][T15544] batadv0: left promiscuous mode [ 275.215182][T15544] bridge0: port 3(batadv0) entered disabled state [ 275.354472][T15544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.374879][T15544] batadv0: entered promiscuous mode [ 275.394569][T15544] batadv0: entered allmulticast mode [ 275.412765][T15544] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 275.783074][T15585] netlink: 'syz.2.2755': attribute type 21 has an invalid length. [ 275.851391][T15592] netlink: 'syz.2.2755': attribute type 21 has an invalid length. [ 275.955335][T15602] macvtap1: entered promiscuous mode [ 275.966241][T15602] vlan0: entered promiscuous mode [ 275.974202][T15602] macvtap1: entered allmulticast mode [ 275.984876][T15602] vlan0: entered allmulticast mode [ 275.991078][T15602] veth0_vlan: entered allmulticast mode [ 276.131283][T15606] tipc: Enabled bearer , priority 0 [ 276.158134][T15605] tipc: Disabling bearer [ 276.555430][T15624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.572765][T15624] bond_slave_0: left promiscuous mode [ 276.580918][T15624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.590667][T15624] bond_slave_1: left promiscuous mode [ 276.598968][T15624] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 276.609031][T15624] bridge_slave_1: left promiscuous mode [ 276.616555][T15624] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 276.625413][T15624] geneve1: left promiscuous mode [ 276.632415][T15624] bond0 (unregistering): Released all slaves [ 276.651210][T15622] tipc: Resetting bearer [ 276.661125][T15630] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.810563][T15641] netlink: 'syz.3.2770': attribute type 7 has an invalid length. [ 276.819221][T15641] netlink: 'syz.3.2770': attribute type 8 has an invalid length. [ 276.880512][T15649] NCSI netlink: No device for ifindex 813332851 [ 277.112775][T15661] tipc: Enabled bearer , priority 0 [ 277.167110][T15656] tipc: Disabling bearer [ 277.615087][T15690] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.998052][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 278.208529][T15719] __nla_validate_parse: 19 callbacks suppressed [ 278.208547][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2790'. [ 278.258833][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2790'. [ 278.284500][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 278.293769][T15719] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2790'. [ 278.551326][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 278.691303][T15742] validate_nla: 3 callbacks suppressed [ 278.691320][T15742] netlink: 'syz.3.2799': attribute type 21 has an invalid length. [ 278.726498][T15742] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2799'. [ 278.774142][T15748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2802'. [ 278.840286][T15756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2802'. [ 278.896799][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2805'. [ 279.151175][T15782] ip6tnl0: Caught tx_queue_len zero misconfig [ 279.289732][T15778] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2811'. [ 279.364796][T15788] netlink: 'syz.2.2813': attribute type 33 has an invalid length. [ 279.400253][T15786] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 279.571900][T15799] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 279.876691][T15813] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 279.896162][T15813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.995702][T15812] bridge4: entered promiscuous mode [ 280.012142][T15812] bridge4: entered allmulticast mode [ 280.114189][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.129187][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.141647][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.151573][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.152852][T15828] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 280.168270][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.194779][T15819]  speed is unknown, defaulting to 1000 [ 280.276369][T15825]  speed is unknown, defaulting to 1000 [ 280.426925][T15836] tap0: tun_chr_ioctl cmd 1074025676 [ 280.438433][T15836] tap0: owner set to 0 [ 280.486885][ T3446] tipc: Resetting bearer [ 280.544613][T15844] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:0 [ 281.146192][ T3446] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 281.163908][T15863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.633009][T15888] netlink: 'syz.1.2840': attribute type 13 has an invalid length. [ 281.899543][T15903] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.925096][T15903] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.238070][ T5187] Bluetooth: hci0: command tx timeout [ 282.428514][T15825] chnl_net:caif_netlink_parms(): no params data found [ 282.614780][T15938] netlink: 'syz.1.2856': attribute type 8 has an invalid length. [ 282.729687][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.742047][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.753432][T15825] bridge_slave_0: entered allmulticast mode [ 282.763672][T15825] bridge_slave_0: entered promiscuous mode [ 282.773564][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.781427][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.806096][T15825] bridge_slave_1: entered allmulticast mode [ 282.819831][T15825] bridge_slave_1: entered promiscuous mode [ 282.924483][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.939470][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.082982][T15961] netlink: 'syz.0.2866': attribute type 11 has an invalid length. [ 283.118105][T15965] tipc: Enabling of bearer rejected, failed to enable media [ 283.129959][T15825] team0: Port device team_slave_0 added [ 283.141534][T15825] team0: Port device team_slave_1 added [ 283.218497][T15970] __nla_validate_parse: 13 callbacks suppressed [ 283.218517][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 283.380981][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.393040][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.419403][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.453673][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.483872][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.544566][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.782207][T15825] hsr_slave_0: entered promiscuous mode [ 283.795818][T15825] hsr_slave_1: entered promiscuous mode [ 283.805022][T15825] debugfs: 'hsr0' already exists in 'hsr' [ 283.811113][T15825] Cannot create hsr debugfs directory [ 284.087143][T16011] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2881'. [ 284.133722][T16011] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 284.217554][T15825] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.245148][T15825] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.318282][ T5187] Bluetooth: hci0: command tx timeout [ 284.321703][T15825] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.347658][T15825] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.390670][T16023] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2882'. [ 284.431935][T15825] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.444879][T15825] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.470923][T16025]  speed is unknown, defaulting to 1000 [ 284.500903][T15825] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.514722][T15825] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.943443][T15825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.963786][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 284.973483][T15825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.990881][T15825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.086350][T15825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.553475][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.721348][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.775496][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 285.796831][T16096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2901'. [ 285.809506][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.816734][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.827237][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.834526][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.855061][T16095] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 285.948733][T16096] vlan3: entered promiscuous mode [ 285.953900][T16096] bridge0: entered promiscuous mode [ 286.385922][T16117] nbd: must specify at least one socket [ 286.399250][ T5187] Bluetooth: hci0: command tx timeout [ 286.623158][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.646143][T16131] IPVS: set_ctl: invalid protocol: 1792 0.32.0.0:0 [ 286.774103][T16138] syzkaller0: entered allmulticast mode [ 286.778849][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2913'. [ 286.801174][T15825] veth0_vlan: entered promiscuous mode [ 286.853012][T15825] veth1_vlan: entered promiscuous mode [ 286.911190][T15825] veth0_macvtap: entered promiscuous mode [ 286.923423][T15825] veth1_macvtap: entered promiscuous mode [ 286.999119][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.030745][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.122014][ T3446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.175318][ T3446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.191352][ T3446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.230598][ T3446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.254558][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 287.365149][T16164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.506330][T11082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.531481][T11082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.577319][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 287.611428][T16189] Bluetooth: MGMT ver 1.23 [ 287.636738][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.698456][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.872091][T16200] netlink: 'syz.0.2928': attribute type 1 has an invalid length. [ 287.905983][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'. [ 287.917274][T16204] syzkaller0: entered promiscuous mode [ 287.929689][T16204] syzkaller0: entered allmulticast mode [ 287.951138][T16202] tipc: Enabled bearer , priority 0 [ 288.004726][T16202] tipc: Resetting bearer [ 288.089598][T16202] tipc: Disabling bearer [ 288.478639][ T5187] Bluetooth: hci0: command tx timeout [ 288.671014][T16226]  speed is unknown, defaulting to 1000 [ 288.899017][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.926535][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.935479][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.944923][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.952861][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.026204][T16238]  speed is unknown, defaulting to 1000 [ 289.142704][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.164966][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.186011][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 289.207179][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 289.225384][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20003 - 0 [ 289.252977][T16249] netlink: 'syz.2.2940': attribute type 2 has an invalid length. [ 289.261951][T16249] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 289.270530][T16249] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 289.279864][T16249] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 289.308557][T16249] netlink: 'syz.2.2940': attribute type 2 has an invalid length. [ 289.349766][T16249] netlink: 'syz.2.2940': attribute type 2 has an invalid length. [ 289.445080][T16253] tipc: Enabling of bearer rejected, failed to enable media [ 289.672709][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.703878][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2943'. [ 289.707829][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.751752][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 289.794628][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 289.805737][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20003 - 0 [ 289.940185][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.961926][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.996733][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 290.007985][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 290.018583][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20003 - 0 [ 290.267036][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.295408][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.324780][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 290.362376][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 290.375459][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20003 - 0 [ 290.415080][T16294] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 290.424903][T16294] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2950'. [ 290.467228][T16294] tipc: Enabled bearer , priority 10 [ 290.716643][T16299] tipc: Enabling of bearer rejected, already enabled [ 290.887068][T16313] veth0: entered promiscuous mode [ 290.905649][T16312] veth0: left promiscuous mode [ 291.045332][ T51] Bluetooth: hci4: command tx timeout [ 291.524608][ T3446] dvmrp0 (unregistering): left allmulticast mode [ 291.561360][ T3446] team0: Port device geneve5 removed [ 291.606912][ T3446] bond1 (unregistering): (slave geneve2): Releasing active interface [ 291.644590][ T3446] team0: Port device geneve0 removed [ 291.913241][ T3446] bond1 (unregistering): Released all slaves [ 292.036382][ T3446] bond2 (unregistering): Released all slaves [ 292.154327][ T3446] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 292.163336][ T3446] wireguard0: left promiscuous mode [ 292.170256][ T3446] bond3 (unregistering): Released all slaves [ 292.184980][ T3446] bond4 (unregistering): Released all slaves [ 292.200882][ T3446] bond5 (unregistering): Released all slaves [ 292.214377][ T3446] bond6 (unregistering): Released all slaves [ 292.332145][ T3446] bond7 (unregistering): Released all slaves [ 292.346385][ T3446] bond8 (unregistering): Released all slaves [ 292.460632][ T3446] bond9 (unregistering): Released all slaves [ 292.475285][ T3446] bond0 (unregistering): Released all slaves [ 292.503336][T16323] tipc: Enabling of bearer rejected, already enabled [ 292.834543][T16238] chnl_net:caif_netlink_parms(): no params data found [ 292.933414][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.965200][T16347] tipc: Enabling of bearer rejected, already enabled [ 293.031896][T16350] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.054485][T16350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.124041][ T51] Bluetooth: hci4: command tx timeout [ 293.148030][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 293.165731][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 293.223049][T16362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.321994][T16238] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.340456][T16238] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.355538][T16238] bridge_slave_0: entered allmulticast mode [ 293.374799][T16238] bridge_slave_0: entered promiscuous mode [ 293.400206][T16238] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.415518][T16377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'. [ 293.425107][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.436688][T16238] bridge_slave_1: entered allmulticast mode [ 293.457163][T16238] bridge_slave_1: entered promiscuous mode [ 293.466272][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2973'. [ 293.477864][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2973'. [ 293.590891][T16238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.622135][T16238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.760518][T16238] team0: Port device team_slave_0 added [ 293.829413][T16238] team0: Port device team_slave_1 added [ 293.856683][T16388] tipc: Enabling of bearer rejected, already enabled [ 293.945836][T16238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.965738][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.007375][T16238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.027699][T16403] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2980'. [ 294.032004][T16238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.059915][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.097382][T16238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.297105][T16238] hsr_slave_0: entered promiscuous mode [ 294.329858][T16238] hsr_slave_1: entered promiscuous mode [ 294.344588][T16238] debugfs: 'hsr0' already exists in 'hsr' [ 294.364921][T16238] Cannot create hsr debugfs directory [ 294.378298][ T3446] tipc: Disabling bearer [ 294.391368][ T3446] tipc: Left network mode [ 294.559269][T16434] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2989'. [ 294.619636][T16436] netlink: 'syz.0.2989': attribute type 1 has an invalid length. [ 294.744678][T16435] tipc: Enabled bearer , priority 0 [ 294.776377][T16434] bond6: (slave gretap2): making interface the new active one [ 294.784825][T16434] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 294.806247][T16440] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 294.853904][T16427] tipc: Disabling bearer [ 294.865133][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2996'. [ 295.208035][ T51] Bluetooth: hci4: command tx timeout [ 295.307432][T16467] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3004'. [ 295.562741][T16489] tipc: Enabling of bearer rejected, already enabled [ 295.952168][T16497] team0: Device gtp0 is of different type [ 295.983941][ T3446] hsr_slave_0: left promiscuous mode [ 295.990174][ T3446] hsr_slave_1: left promiscuous mode [ 295.996224][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.004249][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.012754][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.020356][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.029430][ T3446] batman_adv: batadv0: Interface deactivated: macsec1 [ 296.036406][ T3446] batman_adv: batadv0: Removing interface: macsec1 [ 296.052289][ T3446] batadv_slave_1: left promiscuous mode [ 296.058987][ T3446] veth1_macvtap: left promiscuous mode [ 296.064756][ T3446] veth0_macvtap: left promiscuous mode [ 296.201523][ T3446] pim6reg (unregistering): left allmulticast mode [ 296.694780][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 296.793719][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 296.885243][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.274652][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3013'. [ 297.284478][ T51] Bluetooth: hci4: command tx timeout [ 297.331389][T16516] macvtap0: refused to change device tx_queue_len [ 297.355317][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.365850][T16516] macvtap0: refused to change device tx_queue_len [ 297.389040][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.435317][T16516] macvtap0: refused to change device tx_queue_len [ 297.458459][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.466401][T16238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.515129][T16516] macvtap0: refused to change device tx_queue_len [ 297.543728][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.554666][T16238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.594649][T16238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.627699][T16516] macvtap0: refused to change device tx_queue_len [ 297.634952][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.635031][T16238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.664766][T16516] macvtap0: refused to change device tx_queue_len [ 297.684133][T16516] netlink: 'syz.1.3016': attribute type 13 has an invalid length. [ 297.751408][T16516] macvtap0: refused to change device tx_queue_len [ 297.980217][T16547] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3026'. [ 298.002081][T16238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.082848][T16238] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.112406][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.119640][T11086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.164880][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.172162][T11086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.795761][T16588] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 298.904626][T16238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.157469][T16615] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3045'. [ 299.413078][T16636] TC_ACT_REPEAT abuse ? [ 299.417888][ C0] TC_ACT_REPEAT abuse ? [ 299.464484][T16641] TC_ACT_REPEAT abuse ? [ 299.480870][T16641] TC_ACT_REPEAT abuse ? [ 299.485560][T16641] TC_ACT_REPEAT abuse ? [ 299.565928][T16635] TC_ACT_REPEAT abuse ? [ 299.583984][T16635] TC_ACT_REPEAT abuse ? [ 299.686643][T16238] veth0_vlan: entered promiscuous mode [ 299.740558][T16238] veth1_vlan: entered promiscuous mode [ 299.773861][ T3446] IPVS: stop unused estimator thread 0... [ 299.815749][T16660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.892380][T16661] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20003 [ 299.919177][T11082] TC_ACT_REPEAT abuse ? [ 299.924064][ C0] TC_ACT_REPEAT abuse ? [ 299.932087][T16238] veth0_macvtap: entered promiscuous mode [ 299.966859][T16669] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3059'. [ 299.994530][T16238] veth1_macvtap: entered promiscuous mode [ 300.059808][T16238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.095669][T16238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.152456][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.204373][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.235442][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.272243][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.565680][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.595159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.653780][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 300.693483][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.717491][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.927538][T16710] tipc: Enabling of bearer rejected, already enabled [ 300.965646][T16718] tipc: Started in network mode [ 300.977898][T16718] tipc: Node identity d6115bb4444, cluster identity 4711 [ 300.985519][T16718] tipc: Enabled bearer , priority 0 [ 301.008628][T16718] syzkaller0: MTU too low for tipc bearer [ 301.028504][T16718] tipc: Disabling bearer [ 301.047154][T16720] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 301.069865][T16720] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 301.213133][T16720] syzkaller1: entered promiscuous mode [ 301.219126][T16720] syzkaller1: entered allmulticast mode [ 301.557075][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 302.060693][ T5187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.073269][ T5187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.083040][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.096504][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.118175][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.245935][T16765]  speed is unknown, defaulting to 1000 [ 302.499664][T16786] netlink: 'syz.4.3092': attribute type 4 has an invalid length. [ 302.584997][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 302.753151][T16795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 302.860865][T16801] sctp: [Deprecated]: syz.1.3099 (pid 16801) Use of int in max_burst socket option deprecated. [ 302.860865][T16801] Use struct sctp_assoc_value instead [ 302.882731][T16799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3097'. [ 302.975267][T16807] sctp: [Deprecated]: syz.1.3099 (pid 16807) Use of int in max_burst socket option deprecated. [ 302.975267][T16807] Use struct sctp_assoc_value instead [ 303.081306][T16812] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3101'. [ 303.173425][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 303.302724][T16815] tipc: Enabled bearer , priority 0 [ 303.324032][T16819] syzkaller0: entered promiscuous mode [ 303.332437][T16819] syzkaller0: entered allmulticast mode [ 303.383297][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3105'. [ 303.393952][T16814] tipc: Resetting bearer [ 303.452662][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3105'. [ 303.463419][T16814] tipc: Disabling bearer [ 303.486489][T16834] tap0: tun_chr_ioctl cmd 1074025678 [ 303.507715][T16834] tap0: group set to 0 [ 303.573839][T16765] chnl_net:caif_netlink_parms(): no params data found [ 303.596489][T16834] : renamed from batadv_slave_0 (while UP) [ 303.740731][T16848] netlink: 'syz.4.3112': attribute type 6 has an invalid length. [ 303.951184][T16765] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.967041][T16765] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.974611][T16765] bridge_slave_0: entered allmulticast mode [ 303.982782][T16765] bridge_slave_0: entered promiscuous mode [ 303.991599][T16765] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.999905][T16765] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.007281][T16765] bridge_slave_1: entered allmulticast mode [ 304.015280][T16765] bridge_slave_1: entered promiscuous mode [ 304.143251][T16765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.170676][ T5187] Bluetooth: hci1: command tx timeout [ 304.195189][T16765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.358255][T16765] team0: Port device team_slave_0 added [ 304.371874][T16765] team0: Port device team_slave_1 added [ 304.445755][T16765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.468707][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.505498][T16765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.539366][T16765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.553368][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.590849][T16765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.741335][T16765] hsr_slave_0: entered promiscuous mode [ 304.748868][T16765] hsr_slave_1: entered promiscuous mode [ 304.755297][T16765] debugfs: 'hsr0' already exists in 'hsr' [ 304.762324][T16765] Cannot create hsr debugfs directory [ 305.043010][T11085] net_ratelimit: 1 callbacks suppressed [ 305.043031][T11085] TC_ACT_REPEAT abuse ? [ 305.053231][ C0] TC_ACT_REPEAT abuse ? [ 305.199630][T16765] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.224860][T16765] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.236367][T16922] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 305.341167][T16765] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.371420][T16765] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.430221][T16765] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.454678][T16765] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.513098][T16941] __nla_validate_parse: 5 callbacks suppressed [ 305.513117][T16941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3135'. [ 305.555700][T16765] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 305.576609][T16765] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.744969][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 305.857550][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 305.930224][T16765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.991504][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 306.039907][T16765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.081103][T16765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.129639][T16765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.174530][T16962] netlink: 'syz.2.3141': attribute type 1 has an invalid length. [ 306.184196][T16962] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3141'. [ 306.241784][ T5187] Bluetooth: hci1: command tx timeout [ 306.320149][ T3455] TC_ACT_REPEAT abuse ? [ 306.374763][T16765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.425283][T16983] sctp: [Deprecated]: syz.4.3145 (pid 16983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.425283][T16983] Use struct sctp_sack_info instead [ 306.441629][T16765] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.467832][T11085] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.475309][T11085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.515835][T11085] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.523111][T11085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.635733][T16996] netlink: 'syz.4.3145': attribute type 29 has an invalid length. [ 306.647837][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 306.844474][T17010] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.165253][T16765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.455764][T17045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3160'. [ 307.521062][T16765] veth0_vlan: entered promiscuous mode [ 307.571891][T16765] veth1_vlan: entered promiscuous mode [ 307.662279][T16765] veth0_macvtap: entered promiscuous mode [ 307.712678][T16765] veth1_macvtap: entered promiscuous mode [ 307.760149][T16765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.788585][T16765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.810248][T12257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.832202][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.842904][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.883790][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.047220][T11085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.076520][T11085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.167960][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.178603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.321632][ T5187] Bluetooth: hci1: command tx timeout [ 308.614201][T17073] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3169'. [ 309.027050][T17090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3173'. [ 309.069170][T17090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.513081][T17107] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3179'. [ 309.878328][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.891423][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.902743][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.912279][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.920513][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.067178][T12257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.082745][T12257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.120170][T17121] pim6reg1: entered promiscuous mode [ 310.126937][T17121] pim6reg1: entered allmulticast mode [ 310.145664][T17123]  speed is unknown, defaulting to 1000 [ 310.292647][T12257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.325880][T12257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.397847][ T51] Bluetooth: hci1: command tx timeout [ 310.495514][T12257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.517812][T12257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.569128][T17150] netlink: 'syz.3.3190': attribute type 21 has an invalid length. [ 310.593792][T17150] __nla_validate_parse: 2 callbacks suppressed [ 310.593810][T17150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3190'. [ 310.745563][T12257] bond0: (slave netdevsim0): Releasing backup interface [ 310.781646][T12257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.821053][T12257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.856433][T17162] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 311.245323][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 311.354129][T17173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3196'. [ 311.364820][T11085] TC_ACT_REPEAT abuse ? [ 311.386500][T12257] bridge_slave_1: left allmulticast mode [ 311.398630][T12257] bridge_slave_1: left promiscuous mode [ 311.405718][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.457485][T12257] bridge_slave_0: left allmulticast mode [ 311.464677][T12257] bridge_slave_0: left promiscuous mode [ 311.471218][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.521436][T17191] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 311.543114][T17183] netlink: 'syz.3.3199': attribute type 16 has an invalid length. [ 311.551424][T17183] netlink: 'syz.3.3199': attribute type 17 has an invalid length. [ 312.008384][ T51] Bluetooth: hci3: command tx timeout [ 312.086189][ T3446] TC_ACT_REPEAT abuse ? [ 312.100157][ C0] TC_ACT_REPEAT abuse ? [ 313.579940][T12257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.591689][T12257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.604140][T12257] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 313.619883][T12257] bond0 (unregistering): Released all slaves [ 313.736959][T12257] bond1 (unregistering): Released all slaves [ 313.865781][T12257] bond2 (unregistering): (slave veth3): Releasing active interface [ 313.876506][T12257] bond2 (unregistering): Released all slaves [ 313.892520][T12257] bond3 (unregistering): Released all slaves [ 313.909654][T12257] bond4 (unregistering): Released all slaves [ 313.925151][T12257] bond5 (unregistering): Released all slaves [ 314.054142][T12257] bond6 (unregistering): Released all slaves [ 314.078786][ T51] Bluetooth: hci3: command tx timeout [ 314.168649][T12257] bond7 (unregistering): Released all slaves [ 314.183644][T12257] bond8 (unregistering): Released all slaves [ 314.196083][T12257] bond9 (unregistering): Released all slaves [ 314.317417][T12257] bond10 (unregistering): Released all slaves [ 314.393488][T17183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.443317][T17197] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 314.597857][T12257] tipc: Disabling bearer [ 314.618956][T12257] tipc: Left network mode [ 314.809057][T17220] netlink: 'syz.1.3206': attribute type 1 has an invalid length. [ 314.937819][T12257] IPVS: stopping master sync thread 13040 ... [ 315.306217][T17123] chnl_net:caif_netlink_parms(): no params data found [ 315.321757][T17244] netlink: 'syz.1.3213': attribute type 4 has an invalid length. [ 315.347565][T17247] netlink: 'syz.1.3213': attribute type 37 has an invalid length. [ 315.375268][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 315.401857][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3214'. [ 315.422075][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 315.468558][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 315.562610][T17254] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3214'. [ 315.623751][T17248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3214'. [ 315.801328][T17258] netlink: 'syz.1.3216': attribute type 1 has an invalid length. [ 315.962976][T17260] bond10: (slave gretap2): making interface the new active one [ 315.983123][T17260] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 315.997171][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.007253][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.014670][T17123] bridge_slave_0: entered allmulticast mode [ 316.027266][T17123] bridge_slave_0: entered promiscuous mode [ 316.039447][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.047335][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.054721][T17123] bridge_slave_1: entered allmulticast mode [ 316.066224][T17123] bridge_slave_1: entered promiscuous mode [ 316.080223][T17286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3225'. [ 316.157990][ T51] Bluetooth: hci3: command tx timeout [ 316.246413][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3228'. [ 316.254592][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.267378][T17285] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 316.325373][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.393163][T17301] team0: Device wireguard0 is of different type [ 316.587070][T17307] gtp0: entered promiscuous mode [ 316.595911][T17307] gtp0: entered allmulticast mode [ 316.715808][T17123] team0: Port device team_slave_0 added [ 316.793902][T17123] team0: Port device team_slave_1 added [ 316.915914][T12257] hsr_slave_0: left promiscuous mode [ 316.923046][T12257] hsr_slave_1: left promiscuous mode [ 316.937300][T12257] vlan0: left allmulticast mode [ 316.942993][T12257] veth0_vlan: left allmulticast mode [ 316.948697][T12257] vlan0: left promiscuous mode [ 316.954077][T12257] veth1_macvtap: left promiscuous mode [ 316.959976][T12257] veth0_macvtap: left promiscuous mode [ 316.966471][T12257] veth1_vlan: left promiscuous mode [ 316.973777][T12257] veth0_vlan: left promiscuous mode [ 316.974769][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 317.206307][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.214723][T11086] TC_ACT_REPEAT abuse ? [ 317.219205][ T12] TC_ACT_REPEAT abuse ? [ 317.223861][ C0] TC_ACT_REPEAT abuse ? [ 317.229816][T12257] pim6reg (unregistering): left allmulticast mode [ 317.352221][T11082] smc: removing ib device syz0 [ 317.670942][T12257] team0 (unregistering): Port device team_slave_1 removed [ 317.726499][T12257] team0 (unregistering): Port device team_slave_0 removed [ 318.206397][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.213473][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.238234][ T51] Bluetooth: hci3: command tx timeout [ 318.243522][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.393989][T17328] tipc: Enabling of bearer rejected, already enabled [ 318.426415][ T10] ================================================================== [ 318.434515][ T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 318.443335][ T10] Read of size 8 at addr ffff88807d8522e8 by task kworker/0:1/10 [ 318.451045][ T10] [ 318.453365][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 318.453382][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.453392][ T10] Workqueue: events smc_ib_port_event_work [ 318.453417][ T10] Call Trace: [ 318.453423][ T10] [ 318.453430][ T10] dump_stack_lvl+0x189/0x250 [ 318.453447][ T10] ? rcu_is_watching+0x15/0xb0 [ 318.453460][ T10] ? __kasan_check_byte+0x12/0x40 [ 318.453478][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.453491][ T10] ? rcu_is_watching+0x15/0xb0 [ 318.453503][ T10] ? lock_release+0x4b/0x3e0 [ 318.453522][ T10] ? __virt_addr_valid+0x1c8/0x5c0 [ 318.453538][ T10] ? __virt_addr_valid+0x4a5/0x5c0 [ 318.453553][ T10] print_report+0xca/0x240 [ 318.453571][ T10] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 318.453587][ T10] kasan_report+0x118/0x150 [ 318.453605][ T10] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 318.453623][ T10] __ethtool_get_link_ksettings+0x6e/0x190 [ 318.453639][ T10] ib_get_eth_speed+0x15e/0x7b0 [ 318.453657][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 318.453675][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 318.453693][ T10] rxe_query_port+0x93/0x3b0 [ 318.453708][ T10] ib_query_port+0x16d/0x830 [ 318.453726][ T10] smc_ib_port_event_work+0x15a/0x940 [ 318.453747][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.453759][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 318.453771][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 318.453784][ T10] process_scheduled_works+0xae1/0x17b0 [ 318.453806][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.453824][ T10] worker_thread+0x8a0/0xda0 [ 318.453846][ T10] kthread+0x70e/0x8a0 [ 318.453862][ T10] ? __pfx_worker_thread+0x10/0x10 [ 318.453874][ T10] ? __pfx_kthread+0x10/0x10 [ 318.453889][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.453901][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.453914][ T10] ? __pfx_kthread+0x10/0x10 [ 318.453929][ T10] ret_from_fork+0x439/0x7d0 [ 318.453943][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 318.453957][ T10] ? __switch_to_asm+0x39/0x70 [ 318.453972][ T10] ? __switch_to_asm+0x33/0x70 [ 318.453987][ T10] ? __pfx_kthread+0x10/0x10 [ 318.454001][ T10] ret_from_fork_asm+0x1a/0x30 [ 318.454022][ T10] [ 318.454027][ T10] [ 318.675764][ T10] Allocated by task 5875: [ 318.680071][ T10] kasan_save_track+0x3e/0x80 [ 318.684740][ T10] __kasan_kmalloc+0x93/0xb0 [ 318.689320][ T10] __kvmalloc_node_noprof+0x30d/0x5f0 [ 318.694681][ T10] alloc_netdev_mqs+0xa3/0x11b0 [ 318.699519][ T10] rtnl_create_link+0x31f/0xd10 [ 318.704391][ T10] rtnl_newlink_create+0x25c/0xb00 [ 318.709491][ T10] rtnl_newlink+0x16d6/0x1c70 [ 318.714199][ T10] rtnetlink_rcv_msg+0x7cf/0xb70 [ 318.719180][ T10] netlink_rcv_skb+0x208/0x470 [ 318.724069][ T10] netlink_unicast+0x82f/0x9e0 [ 318.729655][ T10] netlink_sendmsg+0x805/0xb30 [ 318.734883][ T10] __sock_sendmsg+0x219/0x270 [ 318.739699][ T10] __sys_sendto+0x3bd/0x520 [ 318.744478][ T10] __x64_sys_sendto+0xde/0x100 [ 318.749235][ T10] do_syscall_64+0xfa/0x3b0 [ 318.753754][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.759735][ T10] [ 318.762049][ T10] Freed by task 12257: [ 318.766184][ T10] kasan_save_track+0x3e/0x80 [ 318.771132][ T10] kasan_save_free_info+0x46/0x50 [ 318.776428][ T10] __kasan_slab_free+0x5b/0x80 [ 318.781181][ T10] kfree+0x18e/0x440 [ 318.785360][ T10] device_release+0x9c/0x1c0 [ 318.790156][ T10] kobject_put+0x22b/0x480 [ 318.794651][ T10] netdev_run_todo+0xd2e/0xea0 [ 318.799416][ T10] default_device_exit_batch+0x81e/0x890 [ 318.805034][ T10] ops_undo_list+0x525/0x990 [ 318.809607][ T10] cleanup_net+0x4c5/0x800 [ 318.814093][ T10] process_scheduled_works+0xae1/0x17b0 [ 318.819733][ T10] worker_thread+0x8a0/0xda0 [ 318.824310][ T10] kthread+0x70e/0x8a0 [ 318.828373][ T10] ret_from_fork+0x439/0x7d0 [ 318.832953][ T10] ret_from_fork_asm+0x1a/0x30 [ 318.837793][ T10] [ 318.840135][ T10] The buggy address belongs to the object at ffff88807d852000 [ 318.840135][ T10] which belongs to the cache kmalloc-cg-4k of size 4096 [ 318.854449][ T10] The buggy address is located 744 bytes inside of [ 318.854449][ T10] freed 4096-byte region [ffff88807d852000, ffff88807d853000) [ 318.868367][ T10] [ 318.870692][ T10] The buggy address belongs to the physical page: [ 318.877096][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d850 [ 318.885857][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 318.894343][ T10] memcg:ffff888052961201 [ 318.898570][ T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 318.906123][ T10] page_type: f5(slab) [ 318.910109][ T10] raw: 00fff00000000040 ffff88801a44b500 dead000000000100 dead000000000122 [ 318.918686][ T10] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888052961201 [ 318.927259][ T10] head: 00fff00000000040 ffff88801a44b500 dead000000000100 dead000000000122 [ 318.936524][ T10] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888052961201 [ 318.945192][ T10] head: 00fff00000000003 ffffea0001f61401 00000000ffffffff 00000000ffffffff [ 318.953858][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 318.962532][ T10] page dumped because: kasan: bad access detected [ 318.968962][ T10] page_owner tracks the page as allocated [ 318.974675][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5875, tgid 5875 (syz-executor), ts 82670125317, free_ts 82600399686 [ 318.996031][ T10] post_alloc_hook+0x240/0x2a0 [ 319.000800][ T10] get_page_from_freelist+0x21e4/0x22c0 [ 319.006336][ T10] __alloc_frozen_pages_noprof+0x181/0x370 [ 319.012126][ T10] alloc_pages_mpol+0x232/0x4a0 [ 319.016966][ T10] allocate_slab+0x8a/0x370 [ 319.021461][ T10] ___slab_alloc+0xbeb/0x1420 [ 319.026131][ T10] __kmalloc_noprof+0x305/0x4f0 [ 319.030980][ T10] __register_sysctl_table+0x72/0x1340 [ 319.036435][ T10] __addrconf_sysctl_register+0x328/0x4c0 [ 319.042153][ T10] addrconf_sysctl_register+0x168/0x1c0 [ 319.047687][ T10] ipv6_add_dev+0xd46/0x1370 [ 319.052264][ T10] addrconf_notify+0x794/0x1010 [ 319.057106][ T10] notifier_call_chain+0x1b3/0x3e0 [ 319.062198][ T10] register_netdevice+0x1608/0x1ae0 [ 319.067383][ T10] virt_wifi_newlink+0x428/0x860 [ 319.072310][ T10] rtnl_newlink_create+0x310/0xb00 [ 319.077406][ T10] page last free pid 5868 tgid 5868 stack trace: [ 319.083710][ T10] __free_frozen_pages+0xbc4/0xd30 [ 319.088813][ T10] __slab_free+0x303/0x3c0 [ 319.093316][ T10] qlist_free_all+0x97/0x140 [ 319.097912][ T10] kasan_quarantine_reduce+0x148/0x160 [ 319.103379][ T10] __kasan_slab_alloc+0x22/0x80 [ 319.108223][ T10] __kmalloc_cache_noprof+0x1be/0x3d0 [ 319.113588][ T10] kobject_uevent_env+0x27c/0x8c0 [ 319.118608][ T10] __kobject_del+0xd2/0x300 [ 319.123107][ T10] kobject_put+0x243/0x480 [ 319.127511][ T10] net_rx_queue_update_kobjects+0x695/0x740 [ 319.133401][ T10] netif_set_real_num_rx_queues+0x217/0x360 [ 319.139294][ T10] veth_newlink+0x718/0xa50 [ 319.143792][ T10] rtnl_newlink_create+0x310/0xb00 [ 319.148896][ T10] rtnl_newlink+0x16d6/0x1c70 [ 319.153561][ T10] rtnetlink_rcv_msg+0x7cf/0xb70 [ 319.158483][ T10] netlink_rcv_skb+0x208/0x470 [ 319.163241][ T10] [ 319.165548][ T10] Memory state around the buggy address: [ 319.171160][ T10] ffff88807d852180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.179211][ T10] ffff88807d852200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.187350][ T10] >ffff88807d852280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.195410][ T10] ^ [ 319.202983][ T10] ffff88807d852300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.211043][ T10] ffff88807d852380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 319.219102][ T10] ================================================================== [ 319.273449][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 319.280678][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 319.289870][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.300091][ T10] Workqueue: events smc_ib_port_event_work [ 319.305990][ T10] Call Trace: [ 319.309258][ T10] [ 319.312180][ T10] dump_stack_lvl+0x99/0x250 [ 319.316781][ T10] ? __asan_memcpy+0x40/0x70 [ 319.321359][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.326544][ T10] ? __pfx__printk+0x10/0x10 [ 319.331151][ T10] vpanic+0x281/0x750 [ 319.335127][ T10] ? preempt_schedule+0xae/0xc0 [ 319.339982][ T10] ? __pfx_vpanic+0x10/0x10 [ 319.344471][ T10] ? preempt_schedule_common+0x83/0xd0 [ 319.349917][ T10] ? preempt_schedule+0xae/0xc0 [ 319.354756][ T10] ? __pfx_preempt_schedule+0x10/0x10 [ 319.360118][ T10] panic+0xb9/0xc0 [ 319.363828][ T10] ? __pfx_panic+0x10/0x10 [ 319.368492][ T10] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 319.374407][ T10] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 319.380394][ T10] check_panic_on_warn+0x89/0xb0 [ 319.385328][ T10] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 319.391294][ T10] end_report+0x78/0x160 [ 319.395527][ T10] kasan_report+0x129/0x150 [ 319.400018][ T10] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 319.405991][ T10] __ethtool_get_link_ksettings+0x6e/0x190 [ 319.411784][ T10] ib_get_eth_speed+0x15e/0x7b0 [ 319.416624][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 319.421984][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 319.427268][ T10] rxe_query_port+0x93/0x3b0 [ 319.431853][ T10] ib_query_port+0x16d/0x830 [ 319.436440][ T10] smc_ib_port_event_work+0x15a/0x940 [ 319.441806][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.446989][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 319.452694][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 319.458404][ T10] process_scheduled_works+0xae1/0x17b0 [ 319.463948][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.469922][ T10] worker_thread+0x8a0/0xda0 [ 319.474521][ T10] kthread+0x70e/0x8a0 [ 319.478580][ T10] ? __pfx_worker_thread+0x10/0x10 [ 319.483675][ T10] ? __pfx_kthread+0x10/0x10 [ 319.488253][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.493435][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.498616][ T10] ? __pfx_kthread+0x10/0x10 [ 319.503194][ T10] ret_from_fork+0x439/0x7d0 [ 319.507772][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 319.512871][ T10] ? __switch_to_asm+0x39/0x70 [ 319.517795][ T10] ? __switch_to_asm+0x33/0x70 [ 319.522647][ T10] ? __pfx_kthread+0x10/0x10 [ 319.527226][ T10] ret_from_fork_asm+0x1a/0x30 [ 319.532001][ T10] [ 319.535339][ T10] Kernel Offset: disabled [ 319.539655][ T10] Rebooting in 86400 seconds..