last executing test programs: 9.978441291s ago: executing program 4 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40002020, 0x0, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000706bd0deb3e6b15f8e7d08bfe0844010100000000000000000200000205000100070000000800064000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 9.827473362s ago: executing program 4 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="200000e4209f3f00"/28, @ANYRESOCT=r1], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x20044034}, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x5c}}, 0x5000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r4, &(0x7f0000000180)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x1, 0x1}, 0x4) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000017c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/3, 0x3}], 0x7, 0x8, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async, rerun: 32) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 9.654304699s ago: executing program 4 (id=3118): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x8, 0x0, 0x8000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) sendmmsg$inet(r3, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="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", 0x3d6}], 0x1}}], 0x1, 0xc0d0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x4008890}, 0x2000c004) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 3.651480831s ago: executing program 3 (id=3195): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 3.445305706s ago: executing program 3 (id=3199): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r5, 0x5411, 0x0) write$tun(r1, &(0x7f0000000440)={@val={0x70, 0xf7}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, 0x0, 0x43059294f10fa146) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x38, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x38}}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) 2.538762323s ago: executing program 3 (id=3209): pipe(&(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000240)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x7ff5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xffffffffffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000c071}, 0x400c000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2002, @mcast2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x3, 0x421) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) 2.11612427s ago: executing program 2 (id=3213): r0 = socket(0x1a, 0x800, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x7ff}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000680001000000000000000000070000003fd568aab09710d4304158796df6709458dc3ff714e91ceba013e5cc1ec9b85d46968eeb1b4f62a9980da4859dfbf45b80759d8dc163819eb5385572e05e394266df5c746f70aaeb6cb187b3a2f5bc3de54fb35936b668a5e526d9411476715db473a193e611b904d7e71ef38934f61b0c77ac5e69d8182338fb8f9ad37602c70000000000", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x40) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r4, &(0x7f0000007a40)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000001c0)=""/7, 0x7}], 0x2, &(0x7f0000000240)=""/243, 0xf3}, 0x101}, {{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f00000017c0)}, 0x6}, {{&(0x7f0000001840)=@rc={0x1f, @none}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000018c0)=""/126, 0x7e}, {&(0x7f0000001940)=""/151, 0x97}, {&(0x7f0000001a00)=""/178, 0xb2}], 0x3}, 0x7}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b80)=""/202, 0xca}, {&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x3, &(0x7f0000003100)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002dc0), 0x80, &(0x7f00000052c0)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/141, 0x8d}, {&(0x7f0000002f00)=""/178, 0xb2}, {&(0x7f0000002fc0)=""/142, 0x8e}, {&(0x7f0000003080)}, {&(0x7f0000005100)}, {&(0x7f0000005140)=""/144, 0x90}, {&(0x7f0000005200)=""/24, 0x18}, {&(0x7f0000005240)=""/73, 0x49}], 0x9, &(0x7f0000005380)=""/65, 0x41}, 0x9}, {{&(0x7f0000005400)=@ax25={{0x3, @default}, [@null, @bcast, @remote, @bcast, @bcast, @default, @null]}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005480)=""/142, 0x8e}, {&(0x7f0000005540)=""/222, 0xde}, {&(0x7f0000005640)=""/240, 0xf0}, {&(0x7f0000007cc0)=""/4096, 0x1000}, {&(0x7f0000006740)=""/92, 0x5c}, {&(0x7f00000067c0)=""/139, 0x8b}, {&(0x7f0000006880)=""/197, 0xc5}], 0x7, &(0x7f0000006a00)=""/247, 0xf7}, 0x4}, {{&(0x7f0000006b00)=@isdn, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006b80)=""/53, 0x35}, {&(0x7f0000006bc0)=""/205, 0xcd}, {&(0x7f0000006cc0)=""/146, 0x92}, {&(0x7f0000006d80)=""/82, 0x52}], 0x4, &(0x7f0000006e40)=""/49, 0x31}, 0x6e}, {{&(0x7f0000006e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000007240)=[{&(0x7f0000006f00)=""/208, 0xd0}, {&(0x7f0000007000)=""/100, 0x64}, {&(0x7f0000007080)=""/38, 0x26}, {&(0x7f00000070c0)=""/248, 0xf8}, {&(0x7f00000071c0)=""/103, 0x67}], 0x5, &(0x7f00000072c0)=""/211, 0xd3}, 0x200}, {{&(0x7f00000073c0)=@can, 0x80, &(0x7f0000007640)=[{&(0x7f0000007440)=""/166, 0xa6}, {&(0x7f0000007500)=""/87, 0x57}, {&(0x7f0000007580)=""/114, 0x72}, {&(0x7f0000007600)=""/37, 0x25}], 0x4, &(0x7f0000007680)=""/176, 0xb0}, 0xf}, {{&(0x7f0000007740)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000077c0)=""/231, 0xe7}, {&(0x7f00000078c0)=""/107, 0x6b}, {&(0x7f0000007940)=""/112, 0x70}], 0x3, &(0x7f0000007a00)=""/60, 0x3c}, 0xfffffff2}], 0xa, 0x2, 0x0) 2.11440368s ago: executing program 1 (id=3214): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000000140)="6af777b3ad0b9e2c61182fee53b217aec63a6fb563fa7eff40b429a7b60f17bc7e89d797b1ef", 0x26, 0x4810, &(0x7f0000000180)={0xa, 0x4e21, 0xc1e, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x40, 0x78a5991f, 0x80, {{0x8, 0x4, 0x0, 0x26, 0x20, 0x64, 0x0, 0xfc, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb4, [@broadcast, @local]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delchain={0x48, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xe}, {0xc, 0x2}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb4f}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xfff3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delchain={0x48, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xe}, {0xc, 0x2}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb4f}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xfff3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x1, 'syzkaller0\x00', {}, 0x7}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x111, 0x3, 0x8000, 0x6, 0x4000, 0x9c8, 0x9, {r3, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}, 0xd57, 0x7, 0xb32, 0x5, 0xffff}}, &(0x7f0000000500)=0xb0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000540)={0xb, 0x7, 0x4, 0x800}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000580)={r3, 0x8001}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0xeaa1}, 0x8) r4 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r4, &(0x7f0000000600)="36bc88347a1f7cb3566fe5889a0f29beacc31d5d0a951c659f540ea313666b98bca02b5b5b979b3cedbcc38a45de6943b1f14ce9380212348db1a9d0abb5f50fba6209f12bfdc166720156ac43fe48e925bff6ba60f91665c7768401e235aada96a87ddb9078cc50e8747fc2b2001addb048c11f4f0c69a75f39aa8fbfc9be8eb2dca2f5b9e15bf0b8cb67d06ca155e66660b5d943a81b333089cef51452058144e5fc448cc3279c57bad490ae0e4b9c8acc4bb408f33dafc07d2a2db0a8b9a7d553621e29b1868411ca0ddd0d59b62fa3d52488db8d25169e4c0988270cb8c43905a9f8762b306b8a", 0xe9, 0x0, &(0x7f0000000700)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc0000000}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000600)="36bc88347a1f7cb3566fe5889a0f29beacc31d5d0a951c659f540ea313666b98bca02b5b5b979b3cedbcc38a45de6943b1f14ce9380212348db1a9d0abb5f50fba6209f12bfdc166720156ac43fe48e925bff6ba60f91665c7768401e235aada96a87ddb9078cc50e8747fc2b2001addb048c11f4f0c69a75f39aa8fbfc9be8eb2dca2f5b9e15bf0b8cb67d06ca155e66660b5d943a81b333089cef51452058144e5fc448cc3279c57bad490ae0e4b9c8acc4bb408f33dafc07d2a2db0a8b9a7d553621e29b1868411ca0ddd0d59b62fa3d52488db8d25169e4c0988270cb8c43905a9f8762b306b8a", 0xe9, 0x0, &(0x7f0000000700)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc0000000}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x39c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x37c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "f68e0536c7b46ae759b18f06d081cb4f82de186c1d42ec90cdca2031a88aeed153c6d40b4783617b48a3ef79974cb1123a3634b5cbda1aa6525a59390de66e4592b8fe6c9e96cee58b59d87cb19efa4be50f25652c1f5ecc08043166d1d8e0c8ad8d0dd60321e663b2563d1d90831e8c1e78a26086948b7993f76e77d5399586640a6614323acfdca1d2c4f776df621f825add1a145bcb4e6cac48964da85f6b0ab805c184acc2991a824f895c7dd596c19f34f4f3570c579e0209f055a31a55215b2f24f2f02a3cbac4735c"}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "5f2230a415d601a5f233c68129cdacf32b067d267e9d83fc4d2e8d610edd909d675d54a3215075d44ae2c2d7ad1e8adb09c61be009b61bd5050ad58f3c524aa110c5b1b0ea276f8e2cae8283d73a350a792896dceeb0ad2ad4b54e0e2942e0f6d93b77df3f01a6a3fe8615d4396dd5c57c121e0e8c0bf23c935b4c427320ef6363b361ad5031ef7d85d53e1711fba1915224ad16451dc2c3642a7d36a0564dae704380deb78ee08ee6b6e9e06c930be12ba37a6344d43bb2477be07c99ce30f4ca30d2c1edac7e968ca55266972e8752c77f70fac12c0346eff0"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x53}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'u32\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'u32\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@{\xec/@h-V\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':\'.@(\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(,-}.U&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "05a647b25b43cb5b0ad43979abb3c61bc57d61b95a8f1da3e61fa8ddf47a2cacb71526b0580bbeba4bdb52f305380f2d06d92d449c9e53e2944c544a543dbc98441cdfade8eaf65d329706e400a330551c523b08c86c4552b4050aa1fcd3c1f03896d56fb18febe2c11617d195f68a2c51555648540e90d1660ae4eb898e96"}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x9c, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]]}, 0x9c}}, 0xc090) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ec0)={'ip6gre0\x00', &(0x7f0000000e40)={'syztnl0\x00', r2, 0x29, 0x40, 0x0, 0xfff, 0x5, @rand_addr=' \x01\x00', @mcast2, 0x740, 0x1, 0x1, 0x9}}) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xa8, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000400}, 0x8084) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000001100), r0) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001100), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', r9, 0x10, 0x80, 0x3, 0x7, {{0x1c, 0x4, 0x1, 0x3d, 0x70, 0x68, 0x0, 0x4c, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x25, 0x2, [{0x1, 0xd, "6b96b75b50eacafbbf2c8e"}, {0x0, 0xe, "b589b4b23c5b683fc553e9ae"}, {0x7, 0x4, "e374"}]}, @timestamp={0x44, 0x20, 0xdd, 0x0, 0xe, [0x7, 0x9, 0x3, 0x7, 0xff, 0x4, 0xff]}, @noop, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x5, [{@loopback, 0x1}, {@remote, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', r9, 0x10, 0x80, 0x3, 0x7, {{0x1c, 0x4, 0x1, 0x3d, 0x70, 0x68, 0x0, 0x4c, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x25, 0x2, [{0x1, 0xd, "6b96b75b50eacafbbf2c8e"}, {0x0, 0xe, "b589b4b23c5b683fc553e9ae"}, {0x7, 0x4, "e374"}]}, @timestamp={0x44, 0x20, 0xdd, 0x0, 0xe, [0x7, 0x9, 0x3, 0x7, 0xff, 0x4, 0xff]}, @noop, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x5, [{@loopback, 0x1}, {@remote, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001280)={@mcast1}, &(0x7f00000012c0)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001280)={@mcast1, 0x0}, &(0x7f00000012c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001300)={'erspan0\x00', r9, 0x10, 0x40, 0x2, 0xfffffffd, {{0x21, 0x4, 0x1, 0x9, 0x84, 0x68, 0x0, 0xe, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "8123f51362f2bd4697"}]}, @rr={0x7, 0xb, 0xdf, [@local, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x3c, 0x7, 0x1, 0x1, [{@loopback, 0xfffff001}, {@multicast1, 0x3}, {@multicast1, 0x4}, {@rand_addr=0x64010100, 0x40}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x11e}, {@rand_addr=0x64010101, 0x7f4}, {@multicast2, 0xa}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0xc, [0x7, 0x80000001, 0xfffffff5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000014c0)={'erspan0\x00', &(0x7f0000001400)={'erspan0\x00', r9, 0x7800, 0x7800, 0xffff, 0x874, {{0x1b, 0x4, 0x1, 0x7, 0x6c, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @broadcast, {[@cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "7628719dbecc10f07a8d56764d07"}]}, @ssrr={0x89, 0x2b, 0x25, [@local, @multicast1, @local, @remote, @private=0xa010100, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x13, 0x8c, [@private=0xa010100, @local, @loopback, @multicast2]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d00)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001500)={0x7a4, r10, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1ff, 0x7, 0x1, 0x7}, {0x6, 0xc, 0x4, 0x1000}, {0x1, 0x9, 0xd8, 0x7fffffff}]}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x401, 0x2, 0x6, 0x10}, {0xee3, 0xf6, 0x6, 0x2}, {0x4500, 0x6, 0xa9, 0xd}, {0x18, 0x0, 0x4, 0x4}, {0x8, 0x2, 0x9, 0x7}, {0x6, 0x4, 0x8, 0x2}, {0x32df, 0x3, 0x2, 0x2}, {0x5, 0xd, 0x8, 0x1}, {0xfff, 0xfe, 0x8, 0x3}, {0x1dc, 0x5, 0x0, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff87, 0x1, 0x8, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fe}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 1.985449304s ago: executing program 1 (id=3216): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002806fffe8000000000000000000000000000aafe8000000000000000000000000000aa000040", @ANYRES32=0x41424344, @ANYBLOB="a00200009078"], 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffe7a, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbff, {0x5}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xad7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x67d50}, 0x0) 1.834650308s ago: executing program 3 (id=3217): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000071101d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r0, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x40, r9, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xdc, r9, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xfff9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1ff}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfffffffd}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xe652}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x51}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xc}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x81}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x10e3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x79}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x78}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.834366618s ago: executing program 1 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x12}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffd}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xd44}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) connect$netrom(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r4 = socket$inet6(0xa, 0x4, 0x2) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000440)=""/14, &(0x7f0000000480)=0xe) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.639797615s ago: executing program 2 (id=3220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x4c041}, 0x2a19848e188b9093) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xaf0}, {{0x0, 0x0, 0x0}, 0x2041}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000004100)=""/4086, 0xff6}], 0x3}, 0x200ff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000002a40)=""/4109, 0x100d}, {&(0x7f0000005100)=""/4065, 0xfe1}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/54, 0x36}], 0x7}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.58806872s ago: executing program 0 (id=3221): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r1 = socket$inet6(0xa, 0x2, 0xb9d) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x12) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x10}}], 0x10, 0x20000010}}], 0x1, 0x3400c0c4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x6) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f00000001c0)=0x9, 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}], 0x1c) r8 = socket(0x7, 0x2, 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r8) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty, 0x23, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) 1.534636048s ago: executing program 3 (id=3222): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000000)="b7ed6a2b56fff92724d58675b78fbfe510c33a8650ff2aa84b7841bf195e3327b9b4e419c0322e0de54a78ccc6fff05946b33db6ddda127cb25e1f8db48217a1e26bcbb3b312eb5dfd902d33401cb8b87aa5497e828af850abb07dfc0881c7d63dfbe5a21465f608259a44d3c5885dcc295010812630b8ac9019e2b998ac5a46387a43f3583b206c", 0x88}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="f8f22ab7a45bc167985ac5a96ed3dbb13316fbb7d15976650c9f1f997da624ba1044362a5d1a4eee019e5e19cce5c0ff3c93ab0cb1535fc4409a2c26720407f30174be153df51bbbe150e66490d6d79794cd756403", 0x55}, {&(0x7f0000001140)="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", 0xff}, {&(0x7f0000001240)="9205ef083fef5ffa268bf6491128403af9", 0x11}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="c68009de046eeb1b34e60f006c32389ef7526984c94709c94ce6963979516eea053f267c160d5cbe24207cb7e0b5b2a733ba001da8a38f9fdf12d31c0a0104503061713c285bfa162dce2784c178c3e9f9f8fcd099562ebc7863a8cb7b0af0028888b6f707724ca182302f51ee933ff6f2996274d36b1734ebd0f7075b89a5a1120fd34913db6516b307722dbb57deb0ad09749c67fb7599af41e2a240f11a1dd4292a9f973462caa0d0ac35de41670340eb23e1b34a132496fd41f1ff6ea4c913e8326d711ae3eef8edda7b1a554704e86bb8aed6c67e96cd161f774295f618a6ef4f4508271e9de17732087ef75a2d800ab4e6", 0xf4}, {&(0x7f00000013c0)="c9d2bb00d9cab972065bb1f7e46daf1ec75fd377d0babacab42bf0dd242df26f89794db3f4c16c6ecc4a0404bce48e87a3f572589a416d52e3a91b7d1b98d2efaca488b1538f774a7f1c98bec60fa85e178d6a6b21649d0f360c0fbe88662b67bb689837b4944987c2eef08fcdf9d8989e476202868c61fb2896e5de5be1dc9b72347679b3c4a74aa55e15b3afb11c1c56f21c4635ce4adce7", 0x99}], 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001540)={0x2, &(0x7f0000001500)=[{0x8, 0x8, 0xd, 0x2}, {0x8, 0x5, 0x3, 0x6}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001780)={'gre0\x00', &(0x7f0000001680)={'gretap0\x00', 0x0, 0x40, 0x8, 0x0, 0x1, {{0x38, 0x4, 0x1, 0x26, 0xe0, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0xa, [{@broadcast, 0x8}, {@remote, 0x7fffffff}, {@rand_addr=0x64010102}, {@multicast2, 0x9838}]}, @timestamp_addr={0x44, 0x24, 0x91, 0x1, 0x4, [{@multicast1, 0x6}, {@loopback, 0x6}, {@private=0xa010100, 0xb}, {@private=0xa010102, 0x2}]}, @generic={0x94, 0xb, "d7fbc758ea3e494404"}, @lsrr={0x83, 0x13, 0xe8, [@loopback, @remote, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0x34, 0xa7, 0x1, 0x7, [{@empty, 0x7}, {@empty, 0x5}, {@broadcast, 0x8001}, {@private=0xa010102, 0x2}, {@loopback, 0x4}, {@loopback, 0x6286f4bb}]}, @ssrr={0x89, 0x1b, 0x6d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x44, 0xc, "a83676b00c5ad69481d6"}, @generic={0x7, 0xa, "5db40b84c4413b5b"}]}}}}}) sendto$packet(r0, &(0x7f0000001580)="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", 0xfa, 0x0, &(0x7f00000017c0)={0x11, 0x16, r1, 0x1, 0x7f, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x10c, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@llc={0x4, {@snap={0x1, 0xaa, "da4f", "6665ad", 0x88fb, "ce57bbe60b9c4585779f1dd2af7e17fd68d90b0c177de0174fca28d2cd00785ed77759add0d2296cf2f402a6592ae8c1fe963ba8f79d13a527fd79eb4b6900673fc272801cc1be0acadbae8ef04dc8a9947c0b11f63468b04b238eb589ac41f8f806301a7f25812ecea136baad4ce78f74f5cc8578d452bee68abb4fb6285cf556d1ac381d2c219fb34dbd2eb7c6caca95a8467ac2c90d07574c2dcf209515c407d116d58e8b287b54eb9be484490f0740bc296b0a595df3423f0c8d5c54e467063e819e30df2957ea502829202a966d3b84e4065705aa9e1318d0d678f663fd1569eb8359e212b7205ffeed2b229e2d3b6d09e65a"}}}}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000001940)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000019c0)={0x0, @vsock={0x28, 0x0, 0x2711, @local}, @qipcrtr={0x2a, 0x4, 0x7ffd}, @in={0x2, 0x4e22, @empty}, 0x7f, 0x0, 0x0, 0x0, 0xfe01, &(0x7f0000001980)='bridge_slave_0\x00', 0x2, 0x4, 0x9}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001a40)={0x50, 0x60, 0x1, 0x1ff, 0x7, 0x0, [{0x1, 0x8, 0x3, '\x00', 0x2806}, {0x3, 0xc, 0x3, '\x00', 0xe0c}, {0x100, 0x9, 0x101, '\x00', 0x104}, {0x3, 0x6, 0x1, '\x00', 0x2604}, {0xd953, 0x0, 0x5, '\x00', 0x2088}, {0x7, 0xd9, 0x9, '\x00', 0x608}, {0x8000000000000000, 0xb, 0x5, '\x00', 0x40c}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c00)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001c40)={0x0, 0x3f, "60322f8f02e2380afd4d2b3c544be2b88f8287eea06003341a767bd5887e99843c0506c534779e44fee1a98892b646704bdd14cf1699f2ae073e211f790274"}, &(0x7f0000001cc0)=0x47) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001d00)={r4, @in6={{0xa, 0x4e22, 0x404, @private2, 0xe7}}, 0x3, 0x6}, &(0x7f0000001dc0)=0x90) connect$netrom(r2, &(0x7f0000001e00)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) sendmsg$sock(r3, &(0x7f0000002300)={&(0x7f0000001e80)=@can={0x1d, r1}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)="f09a24350f45bf15a082816c8e6f0c3bc821271d64fc8583adf21659d1c5a8dcbfc89e34812d3fc2873f9802cdd5e32fb55632fcab225ca9e652412adf551368303d1d1b000b2c3b9de6ff5746246b24482a4f9ddb51ff0082ee1bf90f01494a2a1d4be25fb2d3f64449e7c8a504c127222b023281835d7bbbf4f6fe9669b54ebd001e49c98e9ca4d5f86af40a407022a8a26f020217cd97697e2233d86c5a7b74efaeb9138ee66fb83afe556c5a8b2f4ceb7b3afe6c0576b1cafdcc277e31eec01f3aecedc0642a56b45b3ebeccf0c3a1f667a3bca5c58a7524784ade0eb23d1334150498", 0xe5}, {&(0x7f0000002000)="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", 0xfb}, {&(0x7f0000002100)="e9c36b1fad0b00247ffd1a27042b9e8a6ad93a8903a2c83e519ce67e5da2634a84a05c57e9f69c06d62e612f8850bf8ff994ce10c6ee7109b1487b1471541b1d63e61e1b305ab35bd8c550326adb88d20897a9340c9086f5bfeedd", 0x5b}, {&(0x7f0000002180)="1ffc7667817572b32f5a18bcf5684667a4d5a776a902230c649e43300930fd2cc971d462e1144ee2b3d94f79298f7d9b44ff4398cc5e6019b0e5cc6b709d10c6c44e2d9ff32a5cb86ff0d732018335288985cf6191acc9936cd349f8945cb9c2f5ccec8023f164d53f8bf7365b5224c9369a86018b4ca5e01584896e85", 0x7d}, {&(0x7f0000002200)}], 0x5, &(0x7f00000022c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000002340), &(0x7f0000002380)=0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000023c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002440)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000002540)=0xe8) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000002580)=0xfd, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000025c0), &(0x7f0000002600)=0x4) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x77d) listen(r0, 0x5) r7 = socket$inet(0x2, 0x800, 0x6) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000002640)={r6, @remote, @empty}, 0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002680)={r4, 0x2, 0xa, 0x6, 0x8000, 0x7}, 0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000026c0)='veth1\x00') ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000002700)={r5, 0x2, 0x80f, 0x80000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f00000027c0)={0x6, 0x48, '\x00', 0x1, &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.447117845s ago: executing program 1 (id=3223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x3}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x44044) 1.308559901s ago: executing program 1 (id=3224): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r4}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) (async) 1.181990192s ago: executing program 0 (id=3225): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="a12122a7027a3add46e6c1bf0b4887e0a624d50d2bf85c3b7ccc39d92bc12bdac619e5cf0230d9e8b49d2a895b2f30044ba597130f8f05532586", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.151425023s ago: executing program 3 (id=3226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.069253311s ago: executing program 1 (id=3227): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) r8 = accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x4, 0x8, 0xd6, 0x2a4, 0x10, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x65de, 0x3}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x7, r3}) socket$kcm(0x2, 0xd, 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) (async) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80400) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x4, 0x8, 0xd6, 0x2a4, 0x10, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x65de, 0x3}}) (async) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x7, r3}) (async) socket$kcm(0x2, 0xd, 0x2) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1.006577941s ago: executing program 0 (id=3228): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000200001030000000900000000080018004e214e24596dca7a67415bf2ed268a37bb64ed0300fd3fd7ebb0f7c27b8d2ae4a1c066ba1891d12ba0e2e19badd7b2bee44c03e30128e43b3003834d33227e00c4a02cca80588f70bc732de8e209939898b0ccc0667e2b46a2548fc2d7260702783ca6263aaa16baa1105f1906275793780273a447616ab7db039b6c1cc7f8da4658b451ea6b82caeab799e2602c68a17371", @ANYRES8=r1, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x3359807dc8234e74}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000000)='.'}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r9, 0x11, 0xb, &(0x7f00000004c0)=0x10000, 0x4) (async) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) (async) listen(r8, 0x3) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a8435001406ff00000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c20200907800005a5e2effa5d088c03b85493fc877d04bdbf50d54160307b0d6919d0ebbcbe5ca5f597e267fb5ae012f8bb0aab2373ef37cfc21605b32c6db954bb345e6ef3c6b6ea9b91b198ba2c7267317322d10ee83ba15279a67326db65ac43782f54a52bf65c7f6c50f8218403e44391de011b509e578445c314ced93e9"], 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCGIDLE32(r10, 0x8008743f, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x44}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 854.744598ms ago: executing program 4 (id=3128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1d, 0x2, 0x7, 0x4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000000540)=""/220, 0xdc}, 0x12002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000840)="06ff03076844268cb89e14f008004ee0ffff007ebabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x20, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x929a}, {}, {}, [@ldst={0x1, 0x1, 0x0, 0x6, 0x4, 0x2}, @map_val={0x18, 0x92cbfe3fe40d7f28, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0xe8, &(0x7f0000000940)=""/232, 0x40f00, 0x8, '\x00', r4, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x40, 0x141}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000a40)=[r0, r0], &(0x7f0000000a80)=[{0x3, 0x5, 0xc, 0x9}, {0x1, 0x1, 0x10, 0x4}, {0x2, 0x3, 0x3}, {0x2, 0x5, 0x8, 0x7}, {0x2, 0x3, 0x7, 0x1}, {0x2, 0x5, 0x4, 0x8}], 0x10, 0xa08a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8411}], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x5, r6, 0x80000001}, 0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000006e0a0d"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r7}, 0x94) 785.599178ms ago: executing program 0 (id=3230): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000001b8e08a1ac6b759a2c2b699be65e7c1c45c864461406dbd24bf78d73ff4af67c738f1b5511112b30f3bc6547b29410e851b0f76df758dea7e7ce484cd53b924301271efac7bc798e85c9c5e4d19bcccda95444dd9fab46b40ff417169c298f7d6e5b0692aa5dfb20c68db1bed37541051a74aa7effe4f117708e33bdca2e3d7212c3a57bde55ba5d1fee8597c4c4f8c2f173f3382bdf799031ba442595dbddc1b6fe44d1a56cbcc8daa0118a938e3705164073e2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x101, 0x0) close(r1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 622.169185ms ago: executing program 2 (id=3231): r0 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x93188d39ae84f25a) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0x6, 0x3, 0xfffffffd, 0x2, 0x1, 0x6, 0x80000001}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0, 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40100) (async) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x2c) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r11) 621.81686ms ago: executing program 4 (id=3232): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 544.20535ms ago: executing program 0 (id=3233): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x800, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) 399.592746ms ago: executing program 4 (id=3234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x28, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x17, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_SETFLAGS(r8, 0x8919, &(0x7f0000000000)=0x10) socket$inet6(0xa, 0x80003, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x2c}, 0x1, 0x0, 0x0, 0x12dd332ea7114170}, 0x48014) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x4, 0xd}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 338.742244ms ago: executing program 2 (id=3235): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0x0, 0xffffff00, 0xffffffff], 0xce23, 0x4e24, 0x4e20, 0x4e23, 0xd, 0x1, 0x6, 0x6, 0x40c}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @remote, 0xff000000, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x5, 0x4, 0xf, 0x7, 0x2], 0x0, 0x6}, {0x4, [0x1, 0x4, 0xf, 0x4, 0x0, 0x6], 0x5}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x1b0, 0x20}}, @common=@icmp={{0x28}, {0x12, "ad6e", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x903, 0x40, 0x9, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 338.335748ms ago: executing program 0 (id=3236): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x30}, 0x20040884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="04000000000000006f2c18ff9a5fae0400000000b5351be468dfd23d60adf9230913e7e68dfedacc9bec6888217b858b5f989f81b47d6fdee5ed0decaa01", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff249765380000000007040000f0ffffffb70200008800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c00180009ac0fccec8ecf68ce6662b5e4159ee11dbe09408a9bf48cbfea4d87033666528a6ceeec773b42b18f250ba131776a6aac9c272c83de81d3fdf1a7f89ecb5a00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000014) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000004000000000000000002000000000000000000000000000000000000000000000040"], 0xb8}}, 0x2c000010) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095000000d918eb3107cda27bb0e9e8c565e342d510e8f5eb11c5e741707ff3001f7614a9a6acd56187dc0aecb2861fcdac7f92d74f3ca3dea98d09d18c499792f1dfcdd83366ef4698be087fa54a883d173300"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) openat$cgroup_ro(r9, &(0x7f0000000600)='pids.current\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'}) shutdown(r7, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 205.04579ms ago: executing program 2 (id=3237): r0 = socket$netlink(0x10, 0x3, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}, {{&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="f7d11cb927605915ab0604862d63b118ea2b746b94c265f1679a99d1f75fceb83f65ad273ceeb462b8aa7dfb09ca683466b09c6aa8a3b41ec46e21619cdd5f96806786f6", 0x44}, {&(0x7f00000001c0)="b15f8e0f0ee447983ef3f73ce74ac53c0e58e99ee46e7620a923c6a54f9453dcdf48ce35486e9a47388dc859b9bd54cd7443fe927dbb9638b514bc6a9cecb802f506492fdeb396d21b2a971c6e90be710aada90a52c402816dee64a532b30f91ede7631984aa1facee3a68070896259a1cfaa21b40dde0189444057249e5c77be5986de4d24c1be0912bdf24dd096a99a59a258c51eed441a9277ffe5b6dac545512f7582ddd68839d", 0xa9}, {&(0x7f0000000280)="fab5b3f7f44b48afa892d88e3aad52793a5c03b596d1f2a946b29a3e66b485b57d7b30f32f12bee12e1623c324885714faee8f89bf4ce89e58274d8c674f7b056828892e542164e2fc2c0933c980505bcd1def2d20037b8013463fa77ac9ae111a668ab8d946ca1851a34b8fa9eb9f980058dabaefb928b4b2012f209a377bd6eff4c1eecdf26cdb3a27a8a309604c6a09c209189ce1408195581c9cf0eb8a51f381cefa9bffa51fe35be4a669d9b36ac8873891235bd2243c359930a6e59ec6a1bc8608b128ee118a013c", 0xcb}, {&(0x7f0000000380)="e48036043746ad8a52e9e07001a4013e33ff347696ae56bdb4f9ef1882b80894a144319b1a89d0e6e045981edc1b7abf585e4a5b63617c5ed11c819d84e734b6796595fa2d5876215d9bf2b68e4cbc12ce1ccf71693e5ac019583d2c3d8d47fa9e3d", 0x62}, {&(0x7f0000001440)="132b4ff90fa0910efd28aa501457f3cbb4dddafa00c34b3bffc6f3bcc7ecaf05c15f89a9e6ff2846f26b7555fe3f0532a77e603327b502b5839e4ce668397bc09f63df4a5145b454637ad55f0a2cc3bdcc228a52faab12d0e75fffe5a313dda924a7776f68e50590dc09b9fdb612ad7628dd0b03a11e73b7b31d5771815eda2b7f592a0fb4042af4229a61169bb48ec347e90df9b693b35543536c8bed5af59965507f5e377f244875c910bb9d3d8bd1ab8aac1ccfa476a9b7b8bda8d0ebec798cb59fed93ad86eb9de39fb00fd5ef0c24377af033099ba04a09df658b115aed5148e07755c7a04a72219dbd81fcba944a", 0xf1}], 0x6, &(0x7f00000016c0)=[@ip_tos_u8={{0x2a, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0xe4, 0x0, 0x1, 0x7}}, @ip_ttl={{0x0, 0x0, 0x2, 0x8}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ra, @end, @rr={0x7, 0x0, 0x3a, [@loopback, @rand_addr=0x64010100]}, @generic={0x83, 0x0, "710979da50401c38240263"}, @cipso={0x86, 0x0, 0x3, [{0x0, 0x0, "d1e95af9bc4c7d19"}, {0x1, 0x0, "36db044dcc9c0cfe460b596b94"}]}, @ssrr={0x89, 0x0, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x0, 0x0, [{0x1, 0x0, "1399a2430f9b51bae6148c5bbfd0ee"}, {0x5, 0x0, "970d8030"}]}]}}}], 0x48}}], 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYBLOB="001280110001005081696467655f716c61000000000061837b8f44642c199797188c123a462ec3ffc812d8f20aa79ee400"/64], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 0s ago: executing program 2 (id=3238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x110, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xff, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x110, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xff, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) kernel console output (not intermixed with test programs): 'syz.2.1258': attribute type 2 has an invalid length. [ 192.739875][T10498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 192.842138][T10491] sit1: entered promiscuous mode [ 192.850117][T10491] sit1: entered allmulticast mode [ 193.280687][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 193.290818][T10532] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.307185][T10534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1272'. [ 193.329133][T10532] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.346821][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 193.368914][T10532] gretap1: entered promiscuous mode [ 193.374193][T10532] gretap1: entered allmulticast mode [ 193.904426][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 193.934010][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 193.958202][T10573] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 194.022171][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 194.040552][T10577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'. [ 194.087363][T10577] geneve4: entered promiscuous mode [ 194.103007][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 194.121714][T10577] geneve4: entered allmulticast mode [ 194.456564][T10615] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 194.470133][T10615] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.604508][T10621] nbd: must specify at least one socket [ 194.611336][T10621] nbd: couldn't find a device at index 4 [ 194.664808][T10624] validate_nla: 2 callbacks suppressed [ 194.664830][T10624] netlink: 'syz.3.1290': attribute type 11 has an invalid length. [ 194.903680][T10635] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 194.982554][T10640] netlink: 'syz.4.1295': attribute type 12 has an invalid length. [ 195.397006][T10667] netlink: 'syz.0.1302': attribute type 2 has an invalid length. [ 195.537303][T10679] netlink: 'syz.1.1304': attribute type 12 has an invalid length. [ 196.229882][T10714] netlink: 'syz.0.1317': attribute type 10 has an invalid length. [ 196.261865][T10714] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.452047][T10737] tipc: Enabling of bearer rejected, failed to enable media [ 196.483802][T10740] Bluetooth: hci0: invalid length 39, exp 2 for type 16 [ 196.513492][T10736] veth43: entered promiscuous mode [ 196.521396][T10742] tipc: Enabled bearer , priority 0 [ 196.543446][T10725] batadv_slave_1: entered promiscuous mode [ 196.567027][T10725] batadv_slave_1: left promiscuous mode [ 196.621577][T10734] veth45: entered promiscuous mode [ 196.678452][T10737] syzkaller0: entered promiscuous mode [ 196.690713][T10737] syzkaller0: entered allmulticast mode [ 196.698623][T10748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.960419][T10758] bond8: entered promiscuous mode [ 197.000630][T10758] netlink: 'syz.1.1326': attribute type 10 has an invalid length. [ 197.050967][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.097175][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.104397][T10758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.147816][T10758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 197.167572][T10776] netlink: 'syz.4.1332': attribute type 2 has an invalid length. [ 197.179578][T10723] tipc: Resetting bearer [ 197.196850][T10774] __nla_validate_parse: 15 callbacks suppressed [ 197.196878][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 197.230714][T10723] tipc: Disabling bearer [ 197.281106][T10774] bridge_slave_1: left allmulticast mode [ 197.296623][T10774] bridge_slave_1: left promiscuous mode [ 197.303635][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.357533][T10774] bridge_slave_0: left allmulticast mode [ 197.363257][T10774] bridge_slave_0: left promiscuous mode [ 197.396062][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.534222][T10787] tipc: Enabled bearer , priority 0 [ 197.552212][T10787] syzkaller0: entered promiscuous mode [ 197.566212][T10787] syzkaller0: entered allmulticast mode [ 197.610571][T10787] syzkaller0: mtu less than device minimum [ 197.621295][T10786] tipc: Resetting bearer [ 197.703576][T10786] tipc: Disabling bearer [ 197.776596][T10810] netlink: 'syz.2.1342': attribute type 2 has an invalid length. [ 197.800333][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 197.830221][T10810] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1342'. [ 197.980404][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 198.032856][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 198.053652][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1344'. [ 198.169299][T10830] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 198.184431][T10832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.344700][T10839] vlan3: entered allmulticast mode [ 198.360346][T10839] bridge0: entered allmulticast mode [ 198.611412][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 198.641298][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 198.672858][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'. [ 198.724791][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 199.316785][T10885] netlink: 'syz.4.1363': attribute type 6 has an invalid length. [ 199.557092][ T5197] udevd[5197]: worker [6147] terminated by signal 33 (Unknown signal 33) [ 199.619564][ T5197] udevd[5197]: worker [6147] failed while handling '/devices/virtual/block/loop4' [ 199.625202][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.150596][T10927] macvlan0: entered promiscuous mode [ 200.179639][T10927] batadv0: entered promiscuous mode [ 200.208271][T10927] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 200.244482][T10927] hsr1: entered allmulticast mode [ 200.263594][T10927] macvlan0: entered allmulticast mode [ 200.284939][T10927] batadv0: entered allmulticast mode [ 200.305757][T10927] macvlan0: left promiscuous mode [ 200.324673][T10927] batadv0: left promiscuous mode [ 200.545195][T10948] netlink: 'syz.3.1379': attribute type 11 has an invalid length. [ 200.756959][T10960] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.767680][T10960] syz_tun: entered allmulticast mode [ 200.796532][T10960] macvlan0: entered allmulticast mode [ 200.841498][T10957] syz_tun: left allmulticast mode [ 201.373571][T11004] validate_nla: 1 callbacks suppressed [ 201.373590][T11004] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 201.419026][T11004] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 201.438084][T11004] bond5 (unregistering): Released all slaves [ 202.195826][T11050] openvswitch: netlink: Message has 512 unknown bytes. [ 202.264741][T11062] netlink: 'syz.1.1416': attribute type 83 has an invalid length. [ 202.441861][T11064] __nla_validate_parse: 19 callbacks suppressed [ 202.441886][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1417'. [ 202.458965][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1417'. [ 202.558170][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 202.831466][T11097] netlink: 'syz.3.1422': attribute type 16 has an invalid length. [ 202.875352][T11097] netlink: 'syz.3.1422': attribute type 3 has an invalid length. [ 202.896330][T11097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1422'. [ 202.938628][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 203.106508][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 203.269133][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1430'. [ 203.446428][ T56] block nbd0: Possible stuck request ffff888024fa0000: control (read@0,1024B). Runtime 60 seconds [ 203.457701][ T56] block nbd0: Possible stuck request ffff888024fa01c0: control (read@1024,1024B). Runtime 60 seconds [ 203.468741][ T56] block nbd0: Possible stuck request ffff888024fa0380: control (read@2048,1024B). Runtime 60 seconds [ 203.479919][ T56] block nbd0: Possible stuck request ffff888024fa0540: control (read@3072,1024B). Runtime 60 seconds [ 203.615087][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 203.977429][T11161] netlink: 'syz.0.1444': attribute type 58 has an invalid length. [ 203.991564][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 203.995507][T11163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1443'. [ 204.181400][T11174] SET target dimension over the limit! [ 204.316811][T11183] syzkaller0: entered promiscuous mode [ 204.323262][T11183] syzkaller0: entered allmulticast mode [ 204.596395][T11196] IPVS: length: 66 != 8 [ 205.061462][T11222] bond3: Unable to set up delay as MII monitoring is disabled [ 205.078817][T11222] bond3 (unregistering): Released all slaves [ 205.094306][T11227] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 205.102492][T11227] netlink: 'syz.2.1464': attribute type 2 has an invalid length. [ 205.110580][T11227] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 206.223820][T11287] gretap0: entered promiscuous mode [ 206.266794][T11287] 0ªî{X¹¦: renamed from gretap0 [ 206.309482][T11287] 0ªî{X¹¦: left promiscuous mode [ 206.324881][T11287] 0ªî{X¹¦: entered allmulticast mode [ 206.352252][T11287] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 206.586494][T11306] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 207.001780][ T5932] IPVS: starting estimator thread 0... [ 207.063671][T11329] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 207.078464][T11329] IPVS: fo: FWM 3 0x00000003 - no destination available [ 207.107513][T11325] IPVS: using max 27 ests per chain, 64800 per kthread [ 207.521563][T11349] __nla_validate_parse: 41 callbacks suppressed [ 207.521583][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 208.212538][T10591] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 208.406919][T11394] syzkaller1: entered promiscuous mode [ 208.423397][T11394] syzkaller1: entered allmulticast mode [ 209.066174][T11409] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1506'. [ 209.075661][T11409] openvswitch: netlink: Key type 112 is out of range max 32 [ 209.377817][T11416] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 209.437144][ T25] block nbd1: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 60 seconds [ 209.449116][ T25] block nbd1: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 60 seconds [ 209.462359][ T25] block nbd1: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 60 seconds [ 209.478121][ T25] block nbd1: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 60 seconds [ 209.737931][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1511'. [ 209.966661][T11444] tipc: Enabling of bearer rejected, failed to enable media [ 210.264389][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1518'. [ 210.899455][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 210.977439][T11495] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 211.128135][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 211.152240][T11497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.152576][T11502] netlink: 'syz.2.1531': attribute type 1 has an invalid length. [ 211.230922][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 211.242841][T11497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.369891][T11505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.385470][T11500] tipc: Enabled bearer , priority 2 [ 211.480551][T11515] tipc: Enabled bearer , priority 0 [ 211.528052][T11515] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 211.573081][T11515] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 211.590588][T11523] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 211.591367][T11519] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 211.665310][T11524] IPv6: sit3: Disabled Multicast RS [ 211.688790][T11524] sit3: entered allmulticast mode [ 211.776809][T11522] tipc: Resetting bearer [ 211.791441][T11525] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.804733][T11525] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 211.818602][T11525] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 211.939937][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 211.939961][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 211.946232][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 212.142435][T11535] bridge2: left promiscuous mode [ 212.153283][T11535] geneve2: left promiscuous mode [ 212.165700][T11535] geneve4: left promiscuous mode [ 212.476308][ T9] tipc: Node number set to 1206466466 [ 212.614092][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1544'. [ 212.744279][T11570] raw_sendmsg: syz.2.1546 forgot to set AF_INET. Fix it! [ 212.942022][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 212.969567][T11560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.988663][T11581] netlink: 'syz.1.1548': attribute type 35 has an invalid length. [ 213.025503][T11581] bond0: (slave bridge0): Releasing backup interface [ 213.042292][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.052202][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.081630][T11581] bridge_slave_0: left allmulticast mode [ 213.087669][T11581] bridge_slave_0: left promiscuous mode [ 213.099759][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.117305][T11581] bridge_slave_1: left allmulticast mode [ 213.123429][T11581] bridge_slave_1: left promiscuous mode [ 213.130466][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.159326][T11581] bond0: (slave bond_slave_0): Releasing backup interface [ 213.189824][T11581] bond0: (slave bond_slave_1): Releasing backup interface [ 213.238436][T11581] team0: Port device team_slave_0 removed [ 213.248263][T11581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.284661][T11585] veth1_to_bond: entered allmulticast mode [ 213.405882][T11584] veth1_to_bond: left allmulticast mode [ 213.649033][T11608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1556'. [ 213.674982][T11608] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 213.817614][T11615] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1558'. [ 213.846398][T11615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.861976][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.925354][T11625] dvmrp1: entered allmulticast mode [ 214.169833][T11644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1564'. [ 214.210371][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 214.268396][T11647] 8021q: VLANs not supported on xfrm0 [ 214.882185][T11683] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1578'. [ 215.051541][T11692] netlink: 'syz.1.1581': attribute type 7 has an invalid length. [ 215.059584][T11692] netlink: 'syz.1.1581': attribute type 8 has an invalid length. [ 215.392233][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1586'. [ 215.424379][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1586'. [ 215.450733][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1587'. [ 215.482540][T11705] gretap4: entered promiscuous mode [ 215.491009][T11705] gretap4: entered allmulticast mode [ 215.633046][T11712] tipc: Enabling of bearer rejected, failed to enable media [ 215.644690][T11712] netlink: 'syz.3.1588': attribute type 8 has an invalid length. [ 215.936446][T11722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.967739][T11722] SET target dimension over the limit! [ 216.001420][T11722] syz.1.1591 (11722) used greatest stack depth: 17832 bytes left [ 217.235942][T11800] veth1_to_bond: entered allmulticast mode [ 217.384337][T11799] veth1_to_bond: left allmulticast mode [ 217.796897][T11830] netlink: 'syz.0.1623': attribute type 4 has an invalid length. [ 217.823829][T11835] __nla_validate_parse: 7 callbacks suppressed [ 217.823850][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1625'. [ 218.058127][T11851] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 218.076899][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 218.332225][T11860] delete_channel: no stack [ 218.390600][T11863] netlink: 'syz.1.1631': attribute type 6 has an invalid length. [ 218.492023][T11869] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 218.685524][T11880] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 218.706289][T11880] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 218.714872][T11880] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 218.784898][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 218.824572][T11884] tipc: Enabling of bearer rejected, already enabled [ 219.077570][T11899] tipc: Enabled bearer , priority 13 [ 219.181793][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1646'. [ 219.208335][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1646'. [ 219.725803][T11947] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1657'. [ 219.754261][T11944] team0: Port device geneve5 added [ 219.774871][T10592] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20003 - 0 [ 219.805809][T10592] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20003 - 0 [ 219.830612][T10592] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20003 - 0 [ 219.854871][T10592] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20003 - 0 [ 220.087684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.100787][ T5893] tipc: Node number set to 732192839 [ 220.200622][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 220.275297][T11975] tipc: Enabling of bearer rejected, failed to enable media [ 220.318664][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 220.568745][ T52] Bluetooth: hci0: command tx timeout [ 220.618006][T11997] netlink: 'syz.1.1670': attribute type 11 has an invalid length. [ 220.913489][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 221.114577][T12026] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 221.223103][T12026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.260905][T12031] bond4: (slave geneve3): making interface the new active one [ 221.270657][T12031] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 221.281360][T12027] lo speed is unknown, defaulting to 1000 [ 221.281718][ T7605] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 221.327363][ T7605] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 221.349659][ T7605] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 221.396082][T12042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1683'. [ 221.421011][ T7605] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 221.498567][T12051] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 2, id = 0 [ 221.707780][T12055] atomic_op ffff888060936198 conn xmit_atomic 0000000000000000 [ 222.169429][T12077] netlink: 'syz.1.1693': attribute type 5 has an invalid length. [ 222.726846][ T9] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 222.865865][T12121] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 222.902342][T12123] __nla_validate_parse: 3 callbacks suppressed [ 222.902362][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 223.014504][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1708'. [ 223.303965][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 223.415665][T12153] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1716'. [ 223.720908][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.730777][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.739616][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.766356][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.816540][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.825882][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.847014][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.859130][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.869801][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.878937][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.892063][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.901218][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.921442][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.943053][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.962327][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 223.993371][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.024763][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.059767][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.069331][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.077968][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.132163][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.165476][T12183] openvswitch: netlink: Flow key attr not present in new flow. [ 224.180433][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.197195][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.206250][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.217209][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.227966][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1723'. [ 224.278538][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.314037][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.346871][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.355516][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.416192][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.437254][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.465044][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.491038][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'. [ 224.504958][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 224.509292][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 224.532737][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 224.591600][T12205] openvswitch: netlink: IP tunnel dst address not specified [ 224.711626][T12213] IPVS: ip_vs_edit_dest(): server weight less than zero [ 224.767804][T12215] tipc: Enabled bearer , priority 0 [ 224.784183][T12215] syzkaller0: entered promiscuous mode [ 224.800383][T12215] syzkaller0: entered allmulticast mode [ 224.815152][T12220] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 224.890841][T12215] tipc: Resetting bearer [ 224.923055][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'. [ 224.983357][T12214] tipc: Resetting bearer [ 225.027333][T12214] tipc: Disabling bearer [ 225.112467][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1743'. [ 226.107189][T12297] x_tables: duplicate underflow at hook 2 [ 226.120419][T12297] tipc: Enabled bearer , priority 10 [ 226.127769][T12293] netlink: 'syz.4.1764': attribute type 10 has an invalid length. [ 226.547872][T12313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.609500][T12317] 8021q: VLANs not supported on sit0 [ 227.025458][T12348] dvmrp0: entered allmulticast mode [ 227.103088][T12351] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.360411][T12365] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 227.587052][T12380] IPVS: length: 92 != 8 [ 228.004888][T12415] sctp: [Deprecated]: syz.3.1803 (pid 12415) Use of int in max_burst socket option deprecated. [ 228.004888][T12415] Use struct sctp_assoc_value instead [ 228.219547][T12420] __nla_validate_parse: 14 callbacks suppressed [ 228.219567][T12420] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1807'. [ 228.266210][T12420] openvswitch: netlink: Message has 512 unknown bytes. [ 228.280804][T12434] syzkaller0: entered promiscuous mode [ 228.288366][T12434] syzkaller0: entered allmulticast mode [ 228.326686][T12437] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 228.365110][T12437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.381013][T12437] bond6: entered allmulticast mode [ 228.747683][T12458] netlink: 'syz.1.1817': attribute type 29 has an invalid length. [ 228.766492][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 228.855373][T12466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1819'. [ 228.870628][T12467] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1820'. [ 228.876184][T12466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1819'. [ 229.085889][T12482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1826'. [ 229.234520][T12493] netlink: 'syz.4.1829': attribute type 3 has an invalid length. [ 229.244200][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1829'. [ 229.498616][T10733] tipc: Subscription rejected, illegal request [ 229.524906][T12506] tipc: Enabling of bearer rejected, failed to enable media [ 230.207877][T12563] netlink: 'syz.0.1849': attribute type 29 has an invalid length. [ 230.219412][T12563] netlink: 'syz.0.1849': attribute type 29 has an invalid length. [ 230.418118][T12574] netlink: 'syz.1.1854': attribute type 2 has an invalid length. [ 230.426879][T12571] xt_l2tp: invalid flags combination: 8 [ 230.547723][T12574] veth45: entered promiscuous mode [ 230.620134][T12574] veth45: entered allmulticast mode [ 230.642992][T12580] netlink: 'syz.3.1858': attribute type 2 has an invalid length. [ 230.658689][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 230.697770][T12590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 230.761353][T12590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'. [ 230.985718][T12616] block nbd3: Unsupported socket: should be TCP or UNIX. [ 231.553368][T12656] nbd: nbd1 already in use [ 232.069059][ T179] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 232.093888][T12691] syzkaller0: entered promiscuous mode [ 232.099912][T12691] syzkaller0: entered allmulticast mode [ 232.681088][T12715] tipc: Enabled bearer , priority 0 [ 232.688800][T12715] syzkaller0: entered promiscuous mode [ 232.694784][T12715] syzkaller0: entered allmulticast mode [ 232.747642][T12722] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 232.767378][T12715] tipc: Resetting bearer [ 232.782464][T12721] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 232.800777][T12714] tipc: Resetting bearer [ 232.852071][T12714] tipc: Disabling bearer [ 233.033854][T12739] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 3, id = 0 [ 233.183860][T12749] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 233.328720][T12756] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 233.344167][T12756] bond9 (unregistering): Released all slaves [ 233.370145][T12763] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 233.532143][ T56] block nbd0: Possible stuck request ffff888024fa0000: control (read@0,1024B). Runtime 90 seconds [ 233.549179][ T56] block nbd0: Possible stuck request ffff888024fa01c0: control (read@1024,1024B). Runtime 90 seconds [ 233.560396][ T56] block nbd0: Possible stuck request ffff888024fa0380: control (read@2048,1024B). Runtime 90 seconds [ 233.576240][ T56] block nbd0: Possible stuck request ffff888024fa0540: control (read@3072,1024B). Runtime 90 seconds [ 233.642022][T12774] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 233.704410][T12774] nbd: error processing sock list [ 233.771347][T12774] block nbd3: shutting down sockets [ 233.873933][T12774] __nla_validate_parse: 4 callbacks suppressed [ 233.873954][T12774] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1905'. [ 234.153626][T12810] netlink: 'syz.3.1913': attribute type 23 has an invalid length. [ 234.336804][T12774] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.369469][T12774] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.405242][T12774] ` (unregistering): Released all slaves [ 234.700492][T12840] sit0: entered promiscuous mode [ 234.718789][T12839] nbd: nbd0 already in use [ 234.720760][T12840] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 234.739038][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1921'. [ 234.766259][T12840] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1922'. [ 234.921616][T12852] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 234.940118][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 234.967364][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 235.173095][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 235.179487][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 235.332964][T12879] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 235.360248][T12878] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 235.379162][T12878] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1935'. [ 235.394199][T12881] netlink: 'syz.0.1937': attribute type 6 has an invalid length. [ 235.414969][T12879] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.824563][T12905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.956314][T12917] Cannot find del_set index 3 as target [ 235.995318][T12917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.002576][T12920] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1948'. [ 236.006104][T12917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.127559][T12920] 8021q: VLANs not supported on gre0 [ 236.134061][T12924] dvmrp0: left allmulticast mode [ 236.145104][T12924] dvmrp1: left allmulticast mode [ 236.494050][T12949] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 236.655323][T12947] syzkaller0: entered promiscuous mode [ 236.669837][T12947] syzkaller0: entered allmulticast mode [ 236.714948][T12949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.747205][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 236.758535][T12955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.777109][T12955] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.789462][T12955] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 236.837853][T12957] veth3: entered promiscuous mode [ 236.846979][T12957] bond5: (slave veth3): Enslaving as an active interface with a down link [ 238.277314][T12960] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 238.278518][T12963] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.499451][T12983] IPv6: sit3: Disabled Multicast RS [ 238.509477][T12983] sit3: entered allmulticast mode [ 238.954123][T13016] __nla_validate_parse: 4 callbacks suppressed [ 238.954144][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1976'. [ 239.035183][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1978'. [ 239.297705][T13034] syzkaller0: entered promiscuous mode [ 239.303262][T13034] syzkaller0: entered allmulticast mode [ 239.718288][T13063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1990'. [ 239.928488][ T25] block nbd1: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 90 seconds [ 239.939400][ T25] block nbd1: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 90 seconds [ 239.950794][ T25] block nbd1: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 90 seconds [ 239.962051][ T25] block nbd1: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 90 seconds [ 240.035721][T13082] netlink: 'syz.4.1997': attribute type 3 has an invalid length. [ 240.080644][T13087] openvswitch: netlink: EtherType 306 is less than min 600 [ 240.093748][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.125334][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.137492][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.196893][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.221138][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.240139][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.288257][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 240.588937][T13122] nbd: illegal input index -8454144 [ 240.879298][T13141] tipc: Enabled bearer , priority 0 [ 240.887594][T13141] syzkaller0: entered promiscuous mode [ 240.893180][T13141] syzkaller0: entered allmulticast mode [ 240.927725][T13141] tipc: Resetting bearer [ 240.943867][T13140] tipc: Resetting bearer [ 240.966189][T13140] tipc: Disabling bearer [ 241.075305][T13157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 242.312984][T13206] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 242.326935][T13206] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.339091][T13206] gretap1: entered promiscuous mode [ 242.344463][T13206] gretap1: entered allmulticast mode [ 242.509952][T13223] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 242.541495][T13223] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 243.008334][T13240] syzkaller0: entered promiscuous mode [ 243.025715][T13240] syzkaller0: entered allmulticast mode [ 243.065783][T13260] openvswitch: netlink: Flow key attr not present in new flow. [ 243.556145][T13284] netlink: 'syz.1.2050': attribute type 16 has an invalid length. [ 244.525860][T13286] syzkaller0: entered promiscuous mode [ 244.536423][T13286] syzkaller0: entered allmulticast mode [ 244.598933][T13293] __nla_validate_parse: 37 callbacks suppressed [ 244.598956][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 245.000571][T13316] tipc: Enabled bearer , priority 0 [ 245.011297][T13316] syzkaller0: entered promiscuous mode [ 245.029510][T13316] syzkaller0: entered allmulticast mode [ 245.052565][T13316] tipc: Resetting bearer [ 245.082583][T13315] tipc: Resetting bearer [ 245.083737][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 245.109087][T13325] netlink: 'syz.0.2062': attribute type 2 has an invalid length. [ 245.120475][T13315] tipc: Disabling bearer [ 245.129298][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 245.153369][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 245.153395][T10594] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.179158][T10594] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.194199][T10594] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.216714][T10594] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.275427][T13330] lo speed is unknown, defaulting to 1000 [ 245.284672][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 245.752095][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 245.761347][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 245.905575][T13371] block nbd2: NBD_DISCONNECT [ 245.913344][T13371] block nbd2: Send disconnect failed -32 [ 245.926609][T13371] block nbd2: shutting down sockets [ 246.112549][T13381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2077'. [ 246.279632][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 246.529639][T13405] tipc: Enabled bearer , priority 0 [ 246.548620][T13404] tipc: Disabling bearer [ 246.809272][T13420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2087'. [ 247.152072][T13429] syzkaller0: entered promiscuous mode [ 247.159038][T13429] syzkaller0: entered allmulticast mode [ 247.342114][T13438] tipc: Enabled bearer , priority 10 [ 247.356561][T13438] tipc: Enabling of bearer rejected, already enabled [ 247.375876][T13438] tipc: Enabling of bearer rejected, already enabled [ 247.985630][T13473] netlink: 'syz.2.2102': attribute type 27 has an invalid length. [ 248.004317][T13473] netlink: 'syz.2.2102': attribute type 4 has an invalid length. [ 248.459012][ T2155] tipc: Node number set to 1669813988 [ 248.521755][T13507] Bluetooth: hci0: invalid len left 70, exp >= 89 [ 248.539337][T13510] ip6t_srh: unknown srh invflags 4000 [ 250.042533][T13580] __nla_validate_parse: 10 callbacks suppressed [ 250.042556][T13580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 250.046525][T13578] nbd: nbd0 already in use [ 250.101889][T13578] block nbd0: NBD_DISCONNECT [ 250.114979][T13578] block nbd0: Send disconnect failed -32 [ 250.144346][T13578] block nbd0: shutting down sockets [ 250.163057][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.172545][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 250.189996][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.199210][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 250.207136][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.216255][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 250.224115][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.233261][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 250.248124][ T7733] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.268690][T13578] netlink: 'syz.0.2128': attribute type 10 has an invalid length. [ 250.316983][ T7733] Buffer I/O error on dev nbd0, logical block 0, async page read [ 250.325326][ T7733] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.341059][ T7733] Buffer I/O error on dev nbd0, logical block 1, async page read [ 250.359747][ T7733] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.426140][ T7733] Buffer I/O error on dev nbd0, logical block 2, async page read [ 250.471031][ T7733] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.480823][ T7733] Buffer I/O error on dev nbd0, logical block 3, async page read [ 250.498579][ T7733] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.522971][ T7733] Buffer I/O error on dev nbd0, logical block 0, async page read [ 250.569924][ T7733] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.601039][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2136'. [ 250.604183][ T7733] Buffer I/O error on dev nbd0, logical block 1, async page read [ 250.675284][ T7733] ldm_validate_partition_table(): Disk read failed. [ 250.675684][T13612] netlink: 'syz.3.2136': attribute type 7 has an invalid length. [ 250.733138][ T7733] Dev nbd0: unable to read RDB block 0 [ 250.744375][T13612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2136'. [ 250.756676][ T7733] nbd0: unable to read partition table [ 250.775661][T13617] ip6gretap0: entered promiscuous mode [ 250.842040][ T7733] ldm_validate_partition_table(): Disk read failed. [ 250.868964][ T7733] Dev nbd0: unable to read RDB block 0 [ 250.895297][ T7733] nbd0: unable to read partition table [ 250.954177][T13626] syzkaller0: entered promiscuous mode [ 250.970244][T13626] syzkaller0: entered allmulticast mode [ 251.018131][ T7733] udevd[7733]: failed to send result of seq 13022 to main daemon: Connection refused [ 251.171803][T13635] tipc: Enabled bearer , priority 0 [ 251.182209][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 251.193475][T13635] syzkaller0: entered promiscuous mode [ 251.202493][T13635] syzkaller0: entered allmulticast mode [ 251.313989][T13651] netlink: 'syz.2.2147': attribute type 26 has an invalid length. [ 251.322538][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 251.357791][T13638] tipc: Resetting bearer [ 251.403758][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2144'. [ 251.451052][T13638] tipc: Disabling bearer [ 251.552197][T13662] tunl0: entered promiscuous mode [ 251.558398][T13662] tunl0: entered allmulticast mode [ 251.612560][T13667] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 251.691579][T13667] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 251.704246][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'. [ 251.719876][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 251.729692][T13667] netlink: 'syz.4.2151': attribute type 14 has an invalid length. [ 251.738424][T13667] netlink: 'syz.4.2151': attribute type 13 has an invalid length. [ 251.748111][T13671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2152'. [ 251.772652][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2152'. [ 251.783239][T13673] tipc: Enabled bearer , priority 0 [ 251.793296][T13674] syzkaller0: entered promiscuous mode [ 251.799964][T13674] syzkaller0: entered allmulticast mode [ 251.907119][T13674] tipc: Resetting bearer [ 251.922165][T13678] netlink: 'syz.4.2156': attribute type 12 has an invalid length. [ 251.932984][T13678] netlink: 'syz.4.2156': attribute type 29 has an invalid length. [ 251.942269][T13678] netlink: 'syz.4.2156': attribute type 2 has an invalid length. [ 251.963365][T13672] tipc: Resetting bearer [ 251.981842][T13672] tipc: Disabling bearer [ 252.203127][T13688] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 252.236400][T13691] netlink: 'syz.2.2159': attribute type 1 has an invalid length. [ 252.339876][T13691] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.455249][T13693] bond8: (slave veth7): Enslaving as an active interface with a down link [ 252.521180][T13691] bond8: (slave veth0_to_bond): making interface the new active one [ 252.539012][T13691] veth0_to_bond: entered promiscuous mode [ 252.558311][T13691] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.570966][T13704] tipc: Enabled bearer , priority 13 [ 252.613363][T13694] bond8: (slave veth9): Enslaving as an active interface with a down link [ 252.778778][T13717] wg1: entered promiscuous mode [ 252.799778][T13717] wg1: entered allmulticast mode [ 253.140379][T13732] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 253.361765][T13759] tipc: Enabling of bearer rejected, already enabled [ 254.150897][T13817] Cannot find map_set index 33 as target [ 254.663130][T13841] macvlan0: left allmulticast mode [ 254.757228][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.167682][T13871] sctp: [Deprecated]: syz.1.2208 (pid 13871) Use of int in maxseg socket option. [ 255.167682][T13871] Use struct sctp_assoc_value instead [ 255.293632][T13876] validate_nla: 7 callbacks suppressed [ 255.293653][T13876] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 255.381321][T13884] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 255.521315][T13889] __nla_validate_parse: 9 callbacks suppressed [ 255.521335][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 255.560183][T13892] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 255.815334][T13895] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.829330][T13895] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 255.841261][T13895] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 255.852860][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.934089][T13899] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.945561][T13912] Bluetooth: hci0: invalid length 39, exp 2 for type 17 [ 255.954470][T13899] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 256.001963][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2219'. [ 256.089660][T13902] bond4: option mode: unable to set because the bond device is up [ 256.276845][T13927] tipc: Enabled bearer , priority 0 [ 256.291992][T13927] syzkaller0: entered promiscuous mode [ 256.308965][T13927] syzkaller0: entered allmulticast mode [ 256.317288][T13933] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2226'. [ 256.327829][T13927] tipc: Resetting bearer [ 256.334160][T13933] 8021q: VLANs not supported on gre0 [ 256.353383][T13926] tipc: Resetting bearer [ 256.392890][T13926] tipc: Disabling bearer [ 256.428836][T13936] Cannot find add_set index 65532 as target [ 256.511109][T13940] netlink: 'syz.0.2229': attribute type 1 has an invalid length. [ 256.560748][T13940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.583416][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 256.605569][T13948] unsupported nlmsg_type 40 [ 256.611794][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2232'. [ 256.709496][T13940] veth11: entered promiscuous mode [ 257.028483][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2236'. [ 257.145414][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 257.351267][T13985] ipvlan2: entered promiscuous mode [ 257.370326][T13987] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2243'. [ 257.418005][T13988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2240'. [ 257.508370][T13994] ip6gre2: entered allmulticast mode [ 257.635031][T13999] netlink: 'syz.0.2248': attribute type 24 has an invalid length. [ 257.824939][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 257.835924][T14014] netlink: 'syz.4.2251': attribute type 10 has an invalid length. [ 259.606880][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 263.516793][T10603] veth0_to_bond: left promiscuous mode [ 270.006947][ T25] block nbd1: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 120 seconds [ 270.017796][ T25] block nbd1: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 120 seconds [ 270.034478][ T25] block nbd1: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 120 seconds [ 270.045614][ T25] block nbd1: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 120 seconds [ 280.464043][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 280.638472][T14047] netlink: 'syz.2.2264': attribute type 75 has an invalid length. [ 280.760370][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 280.943216][T14057] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 280.991344][T14060] netlink: 'syz.2.2267': attribute type 33 has an invalid length. [ 281.108225][T14069] netlink: 'syz.4.2270': attribute type 4 has an invalid length. [ 281.118041][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 281.130554][T14071] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 281.222136][T14077] team0: Device wireguard0 is of different type [ 281.342034][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2271'. [ 281.436580][T14073] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 281.447840][T14073] netlink: 'syz.2.2271': attribute type 3 has an invalid length. [ 281.462804][T14073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2271'. [ 281.477059][T14095] netlink: 'syz.1.2275': attribute type 18 has an invalid length. [ 281.907985][T14116] netlink: 'syz.4.2283': attribute type 10 has an invalid length. [ 281.920998][T14117] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 281.931843][T14120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2284'. [ 281.954241][T14117] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 282.152313][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2289'. [ 282.901199][T14159] tipc: Enabled bearer , priority 0 [ 282.997198][T14159] syzkaller0: entered promiscuous mode [ 283.004388][T14159] syzkaller0: entered allmulticast mode [ 283.012202][T14159] tipc: Resetting bearer [ 283.019659][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 283.029941][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 283.051866][T14158] tipc: Resetting bearer [ 283.642391][T14199] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 284.599324][T14158] tipc: Disabling bearer [ 284.714795][T14196] lo speed is unknown, defaulting to 1000 [ 284.847983][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'. [ 284.898702][T14205] netlink: 'syz.1.2305': attribute type 6 has an invalid length. [ 285.345444][T14241] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 285.551325][T14256] x_tables: duplicate underflow at hook 1 [ 285.555374][T14258] __nla_validate_parse: 4 callbacks suppressed [ 285.555398][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 285.575163][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 285.718884][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 286.489782][T14304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.508008][T14304] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2329'. [ 286.578160][T14308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2330'. [ 286.621710][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 286.660676][T14307] syzkaller0: entered promiscuous mode [ 286.667085][T14307] syzkaller0: entered allmulticast mode [ 286.719065][T14310] bond9: option xmit_hash_policy: invalid value (64) [ 286.748227][T14316] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2332'. [ 286.753629][T14310] bond9 (unregistering): Released all slaves [ 287.993476][T14345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2337'. [ 288.064300][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2338'. [ 288.486907][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 288.688555][T14361] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 289.264414][T14399] wg2: entered promiscuous mode [ 289.282805][T14399] wg2: entered allmulticast mode [ 289.339576][T14402] batadv0: entered promiscuous mode [ 289.349761][T14402] bond0: entered promiscuous mode [ 289.410886][T14402] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 289.437055][T14402] hsr1: entered allmulticast mode [ 289.449518][T14402] bond0: entered allmulticast mode [ 289.465751][T14402] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 289.647758][T14417] xt_l2tp: v2 doesn't support IP mode [ 290.004110][T14433] sch_tbf: burst 88 is lower than device veth47 mtu (1514) ! [ 290.163458][T14446] validate_nla: 2 callbacks suppressed [ 290.163479][T14446] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 290.171910][T14449] netlink: 'syz.4.2370': attribute type 10 has an invalid length. [ 290.185221][T14446] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 290.210391][T14447] block nbd1: NBD_DISCONNECT [ 290.221760][T14447] block nbd1: Send disconnect failed -32 [ 290.235795][T14447] block nbd1: shutting down sockets [ 290.287111][ C0] blk_print_req_error: 138 callbacks suppressed [ 290.287135][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.302601][ C0] buffer_io_error: 138 callbacks suppressed [ 290.302621][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.318365][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.327537][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.335377][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.344494][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 290.352396][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.361522][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 290.370043][ T6815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.372225][T14454] netlink: 'syz.4.2372': attribute type 4 has an invalid length. [ 290.388614][ T6815] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.397085][ T6815] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.406548][T14447] block nbd1: NBD_DISCONNECT [ 290.411331][T14447] block nbd1: Send disconnect failed -32 [ 290.417275][ T6815] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.427312][ T6815] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.455041][ T6815] Buffer I/O error on dev nbd1, logical block 2, async page read [ 290.484107][ T56] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.495879][ T56] Buffer I/O error on dev nbd1, logical block 3, async page read [ 290.507021][ T6815] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.517013][ T6815] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.525049][ T6815] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.535515][ T6815] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.548087][ T6815] ldm_validate_partition_table(): Disk read failed. [ 290.558848][ T6815] Dev nbd1: unable to read RDB block 0 [ 290.571948][ T6815] nbd1: unable to read partition table [ 290.602191][ T6815] ldm_validate_partition_table(): Disk read failed. [ 290.613328][ T6815] Dev nbd1: unable to read RDB block 0 [ 290.624027][ T6815] nbd1: unable to read partition table [ 290.787546][ T6815] udevd[6815]: failed to send result of seq 13238 to main daemon: Transport endpoint is not connected [ 290.897662][T14478] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 291.094100][T14498] __nla_validate_parse: 13 callbacks suppressed [ 291.094124][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 291.154465][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 291.192464][T14498] netlink: 'syz.4.2383': attribute type 11 has an invalid length. [ 291.333050][T14511] tipc: Enabled bearer , priority 0 [ 291.341035][T14511] syzkaller0: entered promiscuous mode [ 291.346757][T14511] syzkaller0: entered allmulticast mode [ 291.360171][T14511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.399056][T14515] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 291.415793][T14511] tipc: Resetting bearer [ 291.489717][T14515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.499517][T14510] tipc: Resetting bearer [ 291.524873][T14510] tipc: Disabling bearer [ 291.546203][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2390'. [ 291.728516][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.771860][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.793653][T14540] geneve4: entered promiscuous mode [ 291.800212][T14540] geneve4: entered allmulticast mode [ 291.808743][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.819235][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.830128][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.846320][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2396'. [ 291.858723][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 292.057460][T14561] rdma_op ffff88807c1a71f0 conn xmit_rdma 0000000000000000 [ 292.067112][T14561] rdma_op ffff88807c1a59f0 conn xmit_rdma 0000000000000000 [ 292.095717][T14561] rdma_op ffff88807c1a61f0 conn xmit_rdma 0000000000000000 [ 292.111765][T14561] rdma_op ffff88807c1a49f0 conn xmit_rdma 0000000000000000 [ 292.120140][T14561] rdma_op ffff88807c1a01f0 conn xmit_rdma 0000000000000000 [ 292.129622][T14561] rdma_op ffff888020b3a1f0 conn xmit_rdma 0000000000000000 [ 292.140151][T14561] rdma_op ffff888020b3a9f0 conn xmit_rdma 0000000000000000 [ 292.148023][T14561] rdma_op ffff888020b399f0 conn xmit_rdma 0000000000000000 [ 292.156806][T14561] rdma_op ffff888020b391f0 conn xmit_rdma 0000000000000000 [ 292.173101][T14561] rdma_op ffff888057cb59f0 conn xmit_rdma 0000000000000000 [ 292.454337][T14590] netlink: 'syz.0.2410': attribute type 21 has an invalid length. [ 292.838773][T14613] nbd: must specify a size in bytes for the device [ 292.976324][T14619] netlink: 'syz.0.2420': attribute type 7 has an invalid length. [ 293.165359][T14629] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 293.284910][T14635] netlink: 'syz.2.2426': attribute type 5 has an invalid length. [ 293.502070][T14655] veth1_macvtap: left promiscuous mode [ 293.513454][T14655] macsec0: entered promiscuous mode [ 293.519031][T14655] macsec0: entered allmulticast mode [ 294.128909][T14678] ipt_rpfilter: unknown options [ 294.651743][T14715] Cannot find del_set index 49151 as target [ 295.245574][T14752] gre2: entered promiscuous mode [ 295.260960][T14752] gre2: entered allmulticast mode [ 295.340185][T14748] lo speed is unknown, defaulting to 1000 [ 297.263729][T14848] validate_nla: 3 callbacks suppressed [ 297.263748][T14848] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 297.274296][T14855] __nla_validate_parse: 72 callbacks suppressed [ 297.274321][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 297.320732][T14855] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 297.346698][T14855] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 297.361428][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 297.389875][T14859] Bluetooth: hci0: unsupported parameter 1024 [ 297.394495][T14848] 8021q: adding VLAN 0 to HW filter on device bond10 [ 297.401477][T14859] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 297.417460][T14840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.429185][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 297.488562][T14855] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 297.496916][T14855] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 297.516287][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 297.761685][T14877] sctp: [Deprecated]: syz.4.2484 (pid 14877) Use of int in maxseg socket option. [ 297.761685][T14877] Use struct sctp_assoc_value instead [ 297.763331][T14875] bridge: RTM_NEWNEIGH with invalid ether address [ 297.832043][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 298.015295][T14878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.251179][T14915] syzkaller0: entered promiscuous mode [ 298.261933][T14915] syzkaller0: entered allmulticast mode [ 298.318871][T14915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.440175][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 298.573546][T14937] netlink: 'syz.2.2493': attribute type 7 has an invalid length. [ 298.600357][T14922] syzkaller0: entered promiscuous mode [ 298.605904][T14922] syzkaller0: entered allmulticast mode [ 298.629604][T14937] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2493'. [ 298.960385][T14938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2492'. [ 300.790633][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 300.932371][T14975] xt_recent: Unsupported userspace flags (000000b1) [ 302.054841][T14949] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 302.086655][T14974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.283811][T14985] tipc: Enabled bearer , priority 0 [ 302.302501][T14985] syzkaller0: entered promiscuous mode [ 302.308301][T14985] syzkaller0: entered allmulticast mode [ 302.348902][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2501'. [ 302.464452][T14980] tipc: Resetting bearer [ 302.491889][T14980] tipc: Disabling bearer [ 302.509941][T14987] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.633560][T15000] netlink: zone id is out of range [ 302.634368][T14999] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 302.665166][T14999] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 302.666583][T15000] netlink: zone id is out of range [ 302.703772][T15000] netlink: zone id is out of range [ 302.742402][T15000] netlink: zone id is out of range [ 302.748319][T15000] netlink: zone id is out of range [ 302.753987][T15000] netlink: zone id is out of range [ 302.758206][ T9] lo speed is unknown, defaulting to 1000 [ 302.759265][T15000] netlink: zone id is out of range [ 302.765633][ T9] syz2: Port: 1 Link ACTIVE [ 302.771389][T15000] netlink: zone id is out of range [ 302.817843][T15000] netlink: zone id is out of range [ 302.950810][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2512'. [ 303.263973][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 303.325364][T15041] : renamed from hsr0 [ 303.332543][T15040] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2519'. [ 303.350406][T15040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2519'. [ 303.391464][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 303.473008][T15046] syzkaller0: entered promiscuous mode [ 303.479909][T15046] syzkaller0: entered allmulticast mode [ 303.817304][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 304.092680][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 304.112799][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 304.179145][T15077] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2527'. [ 304.899191][T15109] netlink: 'syz.2.2539': attribute type 32 has an invalid length. [ 304.929869][T15112] netlink: 'syz.3.2534': attribute type 9 has an invalid length. [ 305.394807][T15138] 8ÿ: entered promiscuous mode [ 305.773277][T15163] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 305.788269][T15163] bond7 (unregistering): Released all slaves [ 305.994775][T15180] pim6reg1: entered promiscuous mode [ 306.039128][T15180] pim6reg1: entered allmulticast mode [ 306.265816][T15194] bridge0 (unregistering): left allmulticast mode [ 306.974171][T15221] netlink: 'syz.1.2569': attribute type 4 has an invalid length. [ 308.033709][T15215] macvtap1: entered promiscuous mode [ 308.040090][T15215] macvtap1: entered allmulticast mode [ 308.059224][T15215] bond0: entered allmulticast mode [ 308.064426][T15215] bond0: entered promiscuous mode [ 308.071325][T15215] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 308.081836][T15215] team0: Device macvtap1 failed to register rx_handler [ 308.091442][T15215] bond0: left allmulticast mode [ 308.097158][T15215] bond0: left promiscuous mode [ 308.122990][T15219] tap0: tun_chr_ioctl cmd 1074041889 [ 308.138950][T15221] `: renamed from bond0 (while UP) [ 308.311653][T15232] net_ratelimit: 337 callbacks suppressed [ 308.311675][T15232] openvswitch: netlink: Message has 4 unknown bytes. [ 308.328459][T15234] __nla_validate_parse: 8 callbacks suppressed [ 308.328479][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 308.351147][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 308.362151][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 308.617741][T15254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2580'. [ 308.647981][T15254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2580'. [ 308.690741][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 308.775363][T15263] bond7: Unable to set up delay as MII monitoring is disabled [ 308.785868][T15263] bond7 (unregistering): Released all slaves [ 308.985609][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2583'. [ 309.330145][T15307] netem: change failed [ 310.112014][T15352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 310.138951][T15354] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 310.170761][T15354] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 310.493064][T15376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.618491][T15382] x_tables: duplicate underflow at hook 1 [ 310.635191][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 310.698573][T15391] netlink: 'syz.1.2615': attribute type 30 has an invalid length. [ 310.794254][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 310.830282][T15397] bridge: RTM_NEWNEIGH with invalid ether address [ 310.873385][T15404] tipc: Can't bind to reserved service type 2 [ 310.907495][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 311.222713][T15426] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 311.277149][T15433] gtp0: entered promiscuous mode [ 311.282165][T15433] gtp0: entered allmulticast mode [ 311.701791][T15460] Bluetooth: MGMT ver 1.23 [ 311.964579][T15477] ipt_rpfilter: unknown options [ 312.090000][T15483] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 312.294076][T15494] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 312.485360][T15501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.037092][T15525] syzkaller0: entered promiscuous mode [ 313.042915][T15525] syzkaller0: entered allmulticast mode [ 313.347360][T15546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.380028][T15550] __nla_validate_parse: 5 callbacks suppressed [ 313.380051][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 313.398122][T15550] netlink: 'syz.3.2655': attribute type 39 has an invalid length. [ 313.407712][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 313.514516][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 313.523677][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 313.699912][T15569] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2664'. [ 313.756874][T15569] openvswitch: netlink: Key type 30 is not supported [ 313.868404][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 313.933649][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 313.993118][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2667'. [ 314.157322][T15596] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2672'. [ 314.383611][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 314.472714][T15611] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 314.564786][T15615] bond8: (slave veth0_to_bond): Releasing active interface [ 315.021697][T15642] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 315.268090][T15662] sock: sock_timestamping_bind_phc: sock not bind to device [ 315.427627][T15675] tunl0: left allmulticast mode [ 315.459896][T15675] netlink: 'syz.3.2694': attribute type 3 has an invalid length. [ 315.586995][T15678] sctp: [Deprecated]: syz.4.2698 (pid 15678) Use of int in max_burst socket option deprecated. [ 315.586995][T15678] Use struct sctp_assoc_value instead [ 315.890323][T15697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.196254][T15717] netlink: 'syz.0.2712': attribute type 30 has an invalid length. [ 316.935091][ C1] vcan0: j1939_session_tx_dat: 0xffff888057a8d800: queue data error: -100 [ 341.727786][T15805] __nla_validate_parse: 21 callbacks suppressed [ 341.727808][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 341.801553][T15812] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 341.823196][T15816] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 341.867490][T15816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.953149][T15816] bond7: (slave ip6erspan0): making interface the new active one [ 341.989099][T15816] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 342.021647][T15826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2745'. [ 342.044036][T15824] pimreg: entered allmulticast mode [ 342.058665][T15826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2745'. [ 342.110482][T15830] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 342.284069][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 342.337165][T15849] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 342.510712][T15826] vlan0 (unregistering): left allmulticast mode [ 342.517652][T15826] veth0_vlan (unregistering): left allmulticast mode [ 342.524424][T15826] vlan0 (unregistering): left promiscuous mode [ 342.621050][T15830] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.659698][T15836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.667255][T15836] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 342.679910][T15836] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 342.773700][T15842] veth11: entered promiscuous mode [ 342.795147][T15842] bond9: (slave veth11): Enslaving as an active interface with a down link [ 342.807745][T15847] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.823855][T15859] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 342.845741][T15861] netlink: 'syz.1.2754': attribute type 15 has an invalid length. [ 342.868216][T15859] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.2753'. [ 342.903144][T15859] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 342.936493][T15859] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.2753'. [ 342.966789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.975559][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'. [ 343.013900][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'. [ 343.150988][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 343.170842][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 343.193013][T15880] netlink: 'syz.3.2761': attribute type 4 has an invalid length. [ 343.236834][ T981] lo speed is unknown, defaulting to 1000 [ 343.242709][ T981] syz2: Port: 1 Link DOWN [ 343.260804][T15887] netlink: 'syz.1.2762': attribute type 64 has an invalid length. [ 343.308446][T15887] netlink: 'syz.1.2762': attribute type 64 has an invalid length. [ 343.534806][T15902] geneve5: entered promiscuous mode [ 343.620763][T15910] tc_dump_action: action bad kind [ 343.940084][T15928] bond10: entered promiscuous mode [ 343.947202][T15928] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.974517][T15934] syzkaller1: entered promiscuous mode [ 343.981473][T15934] syzkaller1: entered allmulticast mode [ 343.991948][T15934] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 344.600681][T15977] lo speed is unknown, defaulting to 1000 [ 344.631487][T15969] lo speed is unknown, defaulting to 1000 [ 344.717840][T15980] bond8: option all_slaves_active: invalid value (222) [ 344.744360][T15980] bond8 (unregistering): Released all slaves [ 345.003854][T15999] team0: Device ip6gre2 is of different type [ 345.058989][T16002] tipc: New replicast peer: 255.255.255.255 [ 345.062894][T16003] x_tables: duplicate underflow at hook 2 [ 345.067392][T16002] tipc: Enabled bearer , priority 10 [ 345.280258][T16009] batadv0: entered promiscuous mode [ 345.297201][T16009] bond0: entered promiscuous mode [ 345.303156][T16009] debugfs: 'hsr0' already exists in 'hsr' [ 345.336758][T16009] Cannot create hsr debugfs directory [ 345.342956][T16009] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 345.375607][T16009] hsr0: entered allmulticast mode [ 345.397338][T16009] batadv0: entered allmulticast mode [ 345.402867][T16009] bond0: entered allmulticast mode [ 345.409871][T16009] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 345.511175][T16028] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 345.561608][T16019] lo: left promiscuous mode [ 345.913426][T16019] wg1: left promiscuous mode [ 345.919675][T16019] wg1: left allmulticast mode [ 346.128106][T16019] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 346.193168][T16019] vlan2: left promiscuous mode [ 346.200242][T16019] bond1: left promiscuous mode [ 346.205057][T16019] gretap1: left promiscuous mode [ 346.212225][T16019] vlan2: left allmulticast mode [ 346.217646][T16019] bond1: left allmulticast mode [ 346.222671][T16019] gretap1: left allmulticast mode [ 346.231820][T16019] veth3: left allmulticast mode [ 346.242139][T16019] veth0_macvtap: left allmulticast mode [ 346.248643][T16019] macvtap1: left allmulticast mode [ 346.259067][T16019] bond3: left promiscuous mode [ 346.263981][T16019] wireguard0: left promiscuous mode [ 346.283911][T16019] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 346.292973][T16019] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 346.342031][T16037] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 346.398434][T16061] gretap0: entered promiscuous mode [ 346.449986][T16063] 0ªî{X¹¦: renamed from gretap0 [ 346.473884][T16063] 0ªî{X¹¦: left promiscuous mode [ 346.503393][T16063] 0ªî{X¹¦: entered allmulticast mode [ 346.512346][T16063] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 346.531556][T10605] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.606463][T10605] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.615801][T10605] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.672988][T10605] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.721757][T10605] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.750563][T10605] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.787173][T10605] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.826192][T10605] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.922212][T16096] validate_nla: 2 callbacks suppressed [ 346.922231][T16096] netlink: 'syz.1.2821': attribute type 3 has an invalid length. [ 346.959394][T16096] netlink: 'syz.1.2821': attribute type 1 has an invalid length. [ 347.418285][T16115] netlink: 'syz.3.2829': attribute type 21 has an invalid length. [ 347.439806][T16115] __nla_validate_parse: 14 callbacks suppressed [ 347.439827][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 347.499131][T16115] netlink: 'syz.3.2829': attribute type 21 has an invalid length. [ 347.531447][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 347.957669][T16149] tipc: Enabled bearer , priority 0 [ 347.965468][T16149] syzkaller0: entered promiscuous mode [ 347.971388][T16149] syzkaller0: entered allmulticast mode [ 348.064506][T16154] netlink: 'syz.4.2839': attribute type 21 has an invalid length. [ 348.102975][T16154] netlink: 'syz.4.2839': attribute type 6 has an invalid length. [ 348.113295][T16154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2839'. [ 348.137962][T16149] tipc: Resetting bearer [ 348.183868][T16145] tipc: Resetting bearer [ 348.297865][T16145] tipc: Disabling bearer [ 348.325006][T16170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2843'. [ 348.433934][T16179] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 348.453454][T16179] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2846'. [ 348.545235][T16179] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 348.567766][T16179] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2846'. [ 348.600181][T16185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2850'. [ 348.655051][T16189] tipc: Enabled bearer , priority 0 [ 348.663939][T16189] syzkaller0: entered promiscuous mode [ 348.670327][T16189] syzkaller0: entered allmulticast mode [ 348.682044][T16189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 348.818038][T16188] tipc: Resetting bearer [ 348.869359][T16188] tipc: Disabling bearer [ 349.120755][T16209] netlink: 'syz.4.2857': attribute type 11 has an invalid length. [ 349.130909][T16209] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2857'. [ 349.263942][T16218] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2858'. [ 349.556505][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 349.871172][T16244] syzkaller1: entered promiscuous mode [ 349.903720][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.913665][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.923167][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.928145][T16244] syzkaller1: entered allmulticast mode [ 349.938305][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.948024][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.025409][T16248] lo speed is unknown, defaulting to 1000 [ 350.439304][T16248] chnl_net:caif_netlink_parms(): no params data found [ 350.527106][T16276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.718781][T16248] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.735820][T16248] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.753266][T16248] bridge_slave_0: entered allmulticast mode [ 350.770397][T16248] bridge_slave_0: entered promiscuous mode [ 350.781731][T16248] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.791462][T16248] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.799815][T16248] bridge_slave_1: entered allmulticast mode [ 350.813996][T16248] bridge_slave_1: entered promiscuous mode [ 350.901465][T16248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.918597][T16295] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 350.940146][T16248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.981627][T16295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.038777][T16294] bond7: (slave veth13): Enslaving as an active interface with a down link [ 351.098301][T16294] veth15: entered promiscuous mode [ 351.109329][T16294] bond7: (slave veth15): Enslaving as an active interface with a down link [ 351.125110][T16248] team0: Port device team_slave_0 added [ 351.141917][T16295] vlan0: entered allmulticast mode [ 351.148402][T16295] bond7: entered allmulticast mode [ 351.155448][T16295] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.229313][T16248] team0: Port device team_slave_1 added [ 351.350227][T16306] netlink: 'syz.0.2879': attribute type 2 has an invalid length. [ 351.371398][T16248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.388487][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.429164][T16303] ip6t_REJECT: ECHOREPLY is not supported [ 351.432045][T16248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.450312][T16248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.459713][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.521531][T16248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.722461][T16328] --map-set only usable from mangle table [ 351.791259][T16248] hsr_slave_0: entered promiscuous mode [ 351.823075][T16248] hsr_slave_1: entered promiscuous mode [ 351.845872][T16248] debugfs: 'hsr0' already exists in 'hsr' [ 351.866055][T16248] Cannot create hsr debugfs directory [ 351.924682][T16339] 0ªî{X¹¦: entered promiscuous mode [ 351.933889][T16339] 0ªî{X¹¦: left promiscuous mode [ 351.949404][T16343] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 352.010021][ T52] Bluetooth: hci5: command tx timeout [ 352.037813][T16343] team0: Port device dummy0 added [ 352.191680][T16356] netlink: 'syz.2.2892': attribute type 12 has an invalid length. [ 352.249079][T16356] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 352.260280][T16356] bond11 (unregistering): Released all slaves [ 352.471166][T16371] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 352.526320][T16374] __nla_validate_parse: 7 callbacks suppressed [ 352.526359][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 352.526870][T16375] IPVS: set_ctl: invalid protocol: 192 0.32.0.0:47104 [ 352.543712][T16374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2896'. [ 352.569252][T16248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.650308][T16371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.730520][T16248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.853433][T16399] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 352.898483][T16248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.992450][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2903'. [ 353.051680][T16248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 353.198289][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 353.317955][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 353.451133][T16248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.479446][T16248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.503162][T16437] lo speed is unknown, defaulting to 1000 [ 353.503374][T16248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.575897][T16248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.843731][T16248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.911092][T16248] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.947058][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.954443][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.024774][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.032017][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.048810][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2913'. [ 354.087683][ T52] Bluetooth: hci5: command tx timeout [ 354.143437][T16470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2920'. [ 354.179501][T16472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'. [ 354.639062][T16498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2927'. [ 354.737447][T16503] bridge_slave_0: entered promiscuous mode [ 354.751799][ T179] tipc: Subscription rejected, illegal request [ 354.848445][T16248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.909633][T16515] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2929'. [ 354.972663][T16248] veth0_vlan: entered promiscuous mode [ 355.035441][T16248] veth1_vlan: entered promiscuous mode [ 355.041986][T16519] netlink: 'syz.0.2931': attribute type 1 has an invalid length. [ 355.101290][T16519] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.171551][T16525] bond10: (slave veth17): Enslaving as an active interface with a down link [ 355.193792][T16519] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 355.260745][T16248] veth0_macvtap: entered promiscuous mode [ 355.362749][T16248] veth1_macvtap: entered promiscuous mode [ 355.425854][T16248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.444987][T16248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.483255][T10594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.551934][T10594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.576187][T10594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.610485][T10594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.672700][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.695876][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.734133][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.746487][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.789856][T16555] ip6t_REJECT: ECHOREPLY is not supported [ 355.822374][T16554] netlink: 'syz.0.2942': attribute type 7 has an invalid length. [ 355.833572][T16554] netlink: 'syz.0.2942': attribute type 8 has an invalid length. [ 355.847372][T12739] IPVS: ip_vs_send_async error -101 [ 355.940001][T16559] netlink: 'syz.4.2943': attribute type 10 has an invalid length. [ 355.949025][T16558] netlink: 'syz.4.2943': attribute type 10 has an invalid length. [ 355.970735][T16568] netlink: 'syz.3.2945': attribute type 13 has an invalid length. [ 356.169714][ T5835] Bluetooth: hci5: command tx timeout [ 356.281432][T16581] tipc: Enabling of bearer rejected, failed to enable media [ 356.940516][T16609] tipc: Enabling of bearer rejected, already enabled [ 356.951632][T16609] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 356.967572][T16609] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 356.978650][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.993435][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.000451][T16609] tipc: Resetting bearer [ 357.019831][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.053501][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.062223][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.080382][T16616] syzkaller1: entered promiscuous mode [ 357.089975][T16616] syzkaller1: entered allmulticast mode [ 357.129337][T16613] lo speed is unknown, defaulting to 1000 [ 357.161688][T16619] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 357.552028][ T179] tipc: Resetting bearer [ 357.592223][T16642] team0: Device geneve3 is up. Set it down before adding it as a team port [ 357.763200][T16613] chnl_net:caif_netlink_parms(): no params data found [ 357.810883][T16651] __nla_validate_parse: 9 callbacks suppressed [ 357.810898][T16651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2968'. [ 357.828303][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 357.837724][T16651] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2968'. [ 357.847138][T16651] netlink: 'syz.0.2968': attribute type 3 has an invalid length. [ 357.857322][T16651] netlink: 'syz.0.2968': attribute type 2 has an invalid length. [ 357.866630][T16651] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2968'. [ 357.902748][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.911379][T16613] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.920276][T16613] bridge_slave_0: entered allmulticast mode [ 357.929128][T16613] bridge_slave_0: entered promiscuous mode [ 357.938924][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.947465][T16613] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.955266][T16613] bridge_slave_1: entered allmulticast mode [ 357.963306][T16613] bridge_slave_1: entered promiscuous mode [ 358.030470][T16613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.045253][T16613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.087991][T16613] team0: Port device team_slave_0 added [ 358.097965][T16613] team0: Port device team_slave_1 added [ 358.183802][T16613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.195438][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.225177][T16613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.240327][T16613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.249819][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.260406][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 358.312333][T16613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.429141][T16613] hsr_slave_0: entered promiscuous mode [ 358.437954][T16613] hsr_slave_1: entered promiscuous mode [ 358.444670][T16613] debugfs: 'hsr0' already exists in 'hsr' [ 358.453109][T16613] Cannot create hsr debugfs directory [ 358.529968][ T5835] block nbd0: Receive control failed (result -32) [ 358.530478][ T5827] block nbd2: Receive control failed (result -32) [ 358.536798][ T5147] block nbd5: Receive control failed (result -32) [ 358.538481][ T52] block nbd7: Receive control failed (result -32) [ 358.543968][ T5837] block nbd3: Receive control failed (result -32) [ 358.550528][T16675] block nbd10: Receive control failed (result -32) [ 358.577318][ T5829] block nbd1: Receive control failed (result -32) [ 358.583863][ T5840] block nbd9: Receive control failed (result -32) [ 358.590571][ T5839] block nbd8: Receive control failed (result -32) [ 358.597561][ T5834] block nbd6: Receive control failed (result -32) [ 358.648441][T16684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2975'. [ 358.917755][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 358.932042][T16613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.945193][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 358.954286][T16613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.965048][T16613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.976419][T16613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 359.127039][ T5834] Bluetooth: hci3: command tx timeout [ 359.311224][T16613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.322640][T16613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.333699][T16613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.345463][T16613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 359.383302][T16712] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 359.397685][T16712] bond0 (unregistering): Released all slaves [ 359.450449][T16613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.482993][T16613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.517211][T16613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.558294][T16613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 359.570405][T16719] delete_channel: no stack [ 359.683258][T16613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.712771][T16613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.747066][T16613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.759748][T16613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 359.865006][T16737] pim6reg1: entered promiscuous mode [ 359.870467][T16737] pim6reg1: entered allmulticast mode [ 360.323266][T16613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.337632][ T5834] Bluetooth: hci5: command 0x0419 tx timeout [ 360.420694][T16613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.433779][T16613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.441541][T16767] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 360.454477][T16613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.545703][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.572282][T16779] team0: Device ip6gre1 is of different type [ 360.607966][T16767] vlan3: entered promiscuous mode [ 360.613269][T16767] bond0: entered promiscuous mode [ 360.619633][T16767] vlan3: entered allmulticast mode [ 360.624901][T16767] bond0: entered allmulticast mode [ 360.650685][T16775] bond0: (slave gretap5): making interface the new active one [ 360.659210][T16775] gretap5: entered promiscuous mode [ 360.665817][T16775] gretap5: entered allmulticast mode [ 360.677101][T16775] bond0: (slave gretap5): Enslaving as an active interface with an up link [ 360.705698][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 360.732373][T16788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.850914][T16792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.956943][T16613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.972864][T16800] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 361.009260][T16800] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 361.016865][T16613] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.054887][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.062141][T10605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.115724][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.122986][T12605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.206966][ T5834] Bluetooth: hci3: command tx timeout [ 361.573659][T16613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.583090][T16824] tipc: Started in network mode [ 361.589822][T16824] tipc: Node identity fed4ab7c4614, cluster identity 4711 [ 361.598764][T16824] tipc: Enabled bearer , priority 0 [ 361.692923][T16824] syzkaller0: entered promiscuous mode [ 361.699961][T16824] syzkaller0: entered allmulticast mode [ 361.707485][T16824] tipc: Resetting bearer [ 361.718605][T16823] tipc: Resetting bearer [ 361.725081][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'. [ 362.696989][ T981] tipc: Node number set to 3099634556 [ 363.043811][T16823] tipc: Disabling bearer [ 363.059199][T16828] tipc: Enabling of bearer rejected, already enabled [ 363.148712][T16613] veth0_vlan: entered promiscuous mode [ 363.194589][T16613] veth1_vlan: entered promiscuous mode [ 363.288978][ T5834] Bluetooth: hci3: command tx timeout [ 363.406706][T16613] veth0_macvtap: entered promiscuous mode [ 363.421807][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3018'. [ 363.457879][T16613] veth1_macvtap: entered promiscuous mode [ 363.619824][T16613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.635742][T16868] tipc: New replicast peer: 255.255.255.255 [ 363.643989][T16868] tipc: Enabled bearer , priority 10 [ 363.705086][T16613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.775090][T10605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.794641][T10605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.835262][T10605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.913251][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 363.931286][T10605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.935236][T16882] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 363.949330][T16877] x_tables: unsorted entry at hook 2 [ 364.078623][T16894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3028'. [ 364.101060][T16882] bond7: entered promiscuous mode [ 364.107407][T16882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.194074][T16902] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 364.218310][T10605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.228997][T16903] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 364.237155][T10605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.377509][T16912] netlink: 'syz.3.3031': attribute type 9 has an invalid length. [ 364.380912][T10605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.408888][T10605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.425461][T16916] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 364.469094][T16916] `: (slave geneve1): Enslaving as an active interface with an up link [ 364.639047][T16928] netlink: 'syz.2.2947': attribute type 17 has an invalid length. [ 364.675758][T16933] netlink: 'syz.2.2947': attribute type 17 has an invalid length. [ 364.680227][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 364.692520][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 364.692558][T16933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'. [ 364.705607][T16933] erspan0: entered promiscuous mode [ 364.723055][T16933] gretap0: entered promiscuous mode [ 364.773464][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'. [ 364.824355][T16940] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3039'. [ 365.324702][T16965] team0: Device gtp0 is of different type [ 365.367385][ T5834] Bluetooth: hci3: command tx timeout [ 365.510296][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3049'. [ 365.702682][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 365.769654][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.784125][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.813420][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.833247][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.843725][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.895132][T16985] lo speed is unknown, defaulting to 1000 [ 366.295292][T16985] chnl_net:caif_netlink_parms(): no params data found [ 366.339002][T17010] sctp: [Deprecated]: syz.1.3062 (pid 17010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.339002][T17010] Use struct sctp_sack_info instead [ 366.373320][T17013] netlink: 'syz.4.3063': attribute type 21 has an invalid length. [ 366.567231][T16985] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.579028][T16985] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.602630][T16985] bridge_slave_0: entered allmulticast mode [ 366.628085][T16985] bridge_slave_0: entered promiscuous mode [ 366.699817][T17031] vlan2: entered promiscuous mode [ 366.713165][T17031] bridge0: entered promiscuous mode [ 366.732892][T16985] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.748052][T16985] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.765657][T16985] bridge_slave_1: entered allmulticast mode [ 366.775579][T16985] bridge_slave_1: entered promiscuous mode [ 366.929587][T17039] pim6reg1: entered promiscuous mode [ 366.935057][T17039] pim6reg1: entered allmulticast mode [ 366.965049][T16985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.012101][T16985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.185837][T17054] ipvlan2: entered promiscuous mode [ 367.199915][T16985] team0: Port device team_slave_0 added [ 367.230742][T16985] team0: Port device team_slave_1 added [ 367.477090][T16985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.494976][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.529895][T16985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.542147][T17070] gre0: entered promiscuous mode [ 367.599388][T16985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.636683][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.706274][T16985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.730962][T17081] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 367.910585][T16985] hsr_slave_0: entered promiscuous mode [ 367.917744][T16985] hsr_slave_1: entered promiscuous mode [ 367.927903][ T5834] Bluetooth: hci1: command tx timeout [ 367.941417][T16985] debugfs: 'hsr0' already exists in 'hsr' [ 367.956266][T16985] Cannot create hsr debugfs directory [ 368.064070][T17101] bridge_slave_0: left promiscuous mode [ 368.217863][T17108] syz_tun: entered allmulticast mode [ 368.239338][T17108] dvmrp1: entered allmulticast mode [ 368.327903][T17105] syz_tun: left allmulticast mode [ 368.618097][T17125] tipc: Enabled bearer , priority 0 [ 368.675529][T17125] syzkaller0: entered promiscuous mode [ 368.681388][T17125] syzkaller0: entered allmulticast mode [ 368.688227][T17125] tipc: Resetting bearer [ 368.736185][T17124] tipc: Resetting bearer [ 368.755735][T17132] __nla_validate_parse: 11 callbacks suppressed [ 368.755758][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 370.006271][ T5834] Bluetooth: hci1: command tx timeout [ 370.157517][T17124] tipc: Disabling bearer [ 370.291073][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'. [ 370.338784][T17147] netlink: 'syz.3.3100': attribute type 2 has an invalid length. [ 370.348420][T17147] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3100'. [ 370.427730][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3101'. [ 370.502467][T16985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.545706][T16985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.572614][T17157] netlink: 'syz.1.3101': attribute type 4 has an invalid length. [ 370.573924][T16985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.621328][T17157] netlink: 'syz.1.3101': attribute type 4 has an invalid length. [ 370.630300][T16985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.724626][T17177] netlink: 'syz.4.3105': attribute type 30 has an invalid length. [ 370.919751][T16985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.949696][T16985] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.976493][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.983708][T10605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.019675][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.026910][T10605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.162713][T16985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.263233][T17197] tipc: Enabled bearer , priority 0 [ 371.281889][T17197] syzkaller0: entered promiscuous mode [ 371.299576][T17197] syzkaller0: entered allmulticast mode [ 371.319389][T17197] syzkaller0: mtu less than device minimum [ 371.358579][T17196] tipc: Resetting bearer [ 371.387194][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3113'. [ 371.425358][T17196] tipc: Disabling bearer [ 371.630219][T17216] tipc: Started in network mode [ 371.637193][T17216] tipc: Node identity 5a989eba0f1c, cluster identity 4711 [ 371.678279][T17216] tipc: Enabled bearer , priority 0 [ 371.702598][T17216] syzkaller0: entered promiscuous mode [ 371.716831][T17216] syzkaller0: entered allmulticast mode [ 371.741934][T17216] tipc: Resetting bearer [ 371.801263][T16985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.883739][T17216] tipc: Resetting bearer [ 371.922085][T17216] tipc: Disabling bearer [ 371.934030][T17228] 8021q: VLANs not supported on wg2 [ 371.985634][T16985] veth0_vlan: entered promiscuous mode [ 372.032159][T16985] veth1_vlan: entered promiscuous mode [ 372.062319][T17236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3122'. [ 372.071559][T16985] veth0_macvtap: entered promiscuous mode [ 372.078262][T16985] veth1_macvtap: entered promiscuous mode [ 372.087427][ T5834] Bluetooth: hci1: command tx timeout [ 372.118271][T16985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.145699][T16985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.185428][T12606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.203814][T12606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.240668][T12606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.250970][T12606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.267437][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 372.283401][T17241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3124'. [ 372.313515][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 372.355499][T17241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3124'. [ 372.374079][T12606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.385422][T12606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.443957][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.461470][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.662456][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.749232][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.293118][T17278] netlink: 'syz.1.3133': attribute type 21 has an invalid length. [ 373.354869][T17278] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 373.414438][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.438571][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.460196][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.496647][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.508061][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.594575][T17288] netlink: 'syz.3.3135': attribute type 7 has an invalid length. [ 373.626193][T17288] netlink: 'syz.3.3135': attribute type 8 has an invalid length. [ 373.678058][T17288] erspan0: entered promiscuous mode [ 373.684895][T17288] batadv_slave_1: entered promiscuous mode [ 373.699747][T17288] batadv_slave_1: left promiscuous mode [ 373.710546][T17288] erspan0: left promiscuous mode [ 373.803533][T17282] lo speed is unknown, defaulting to 1000 [ 373.960386][T17303] netlink: 'syz.1.3141': attribute type 1 has an invalid length. [ 374.012326][T17309] netdevsim netdevsim0: Direct firmware load for . [ 374.012326][T17309] failed with error -2 [ 374.030425][T17315] __nla_validate_parse: 6 callbacks suppressed [ 374.030445][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 374.046248][T17309] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 374.046248][T17309] [ 374.113138][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 374.159700][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 374.167156][ T5834] Bluetooth: hci1: command tx timeout [ 374.258361][T17323] bond1: Invalid ad_actor_system MAC address. [ 374.264742][T17323] bond1: option ad_actor_system: invalid value (1) [ 374.277885][T17323] bond1 (unregistering): Released all slaves [ 374.324444][T17328] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 374.351434][T17282] chnl_net:caif_netlink_parms(): no params data found [ 374.547116][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.554512][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.563388][T17282] bridge_slave_0: entered allmulticast mode [ 374.572627][T17282] bridge_slave_0: entered promiscuous mode [ 374.577513][T17340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3150'. [ 374.582960][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.594826][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.602458][T17282] bridge_slave_1: entered allmulticast mode [ 374.610819][T17282] bridge_slave_1: entered promiscuous mode [ 374.634775][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 374.700563][T17282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.710577][T17347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3151'. [ 374.732305][T17282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.744765][T17347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3151'. [ 374.845588][T17282] team0: Port device team_slave_0 added [ 374.889995][T17282] team0: Port device team_slave_1 added [ 375.024864][T17282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.038344][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.067853][T17282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.092424][T17282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.102007][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.130443][T17282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.330713][T17282] hsr_slave_0: entered promiscuous mode [ 375.338239][T17282] hsr_slave_1: entered promiscuous mode [ 375.345726][T17282] debugfs: 'hsr0' already exists in 'hsr' [ 375.352424][T17282] Cannot create hsr debugfs directory [ 375.609112][ T5834] Bluetooth: hci2: command tx timeout [ 375.728851][T17394] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 375.809008][T17394] bond1 (unregistering): Released all slaves [ 375.857338][T17406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3167'. [ 376.033441][T17282] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.064299][T17282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.099832][T17282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.122991][T17282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 376.255221][T17282] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.269852][T17282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.281487][T17282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.295015][T17282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 376.305890][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3175'. [ 376.427787][T17282] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.442625][T17282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.461769][T17282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.472780][T17282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 376.577343][T17282] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.595700][T17282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.632982][T17282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.654310][T17282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 376.821769][T17452] netlink: 'syz.0.3183': attribute type 21 has an invalid length. [ 376.945128][T17452] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 376.961236][T17452] bond1 (unregistering): Released all slaves [ 377.047751][T17459] bond1: entered promiscuous mode [ 377.052948][T17459] bond1: entered allmulticast mode [ 377.059703][T17459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.171760][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 377.180022][T17282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.194685][T17282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.222992][T17468] tipc: Enabled bearer , priority 0 [ 377.243150][T17282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.270966][T17468] syzkaller0: entered promiscuous mode [ 377.285553][T17468] syzkaller0: entered allmulticast mode [ 377.303730][T17282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.325608][T17473] tipc: Enabling of bearer rejected, failed to enable media [ 377.363783][T17480] netlink: 'syz.0.3192': attribute type 11 has an invalid length. [ 377.388409][T17480] netlink: 'syz.0.3192': attribute type 11 has an invalid length. [ 377.399355][T17468] tipc: Resetting bearer [ 377.431116][T17467] tipc: Resetting bearer [ 377.481031][T17467] tipc: Disabling bearer [ 377.691333][ T5834] Bluetooth: hci2: command tx timeout [ 377.768209][T17501] batadv1: left allmulticast mode [ 377.774922][T17501] batadv1: left promiscuous mode [ 377.782411][T17501] bridge0: port 3(batadv1) entered disabled state [ 377.911374][T17282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.968135][T17282] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.083287][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.090596][T12605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.142249][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.149502][T12605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.290906][T17518] pimreg: left allmulticast mode [ 378.711354][T17531] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 378.854218][T17538] syzkaller0: entered promiscuous mode [ 378.859967][T17538] syzkaller0: entered allmulticast mode [ 378.921107][T17282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.945741][T17542] sctp: [Deprecated]: syz.2.3210 (pid 17542) Use of int in maxseg socket option. [ 378.945741][T17542] Use struct sctp_assoc_value instead [ 379.010711][T17545] vlan1: entered allmulticast mode [ 379.030152][T17545] veth0_vlan: entered allmulticast mode [ 379.135908][T17550] __nla_validate_parse: 10 callbacks suppressed [ 379.166760][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 379.478970][T17570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3219'. [ 379.485756][T17571] netlink: 'syz.3.3217': attribute type 64 has an invalid length. [ 379.498118][T17571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 379.534904][T17571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.625745][T17282] veth0_vlan: entered promiscuous mode [ 379.660158][T17282] veth1_vlan: entered promiscuous mode [ 379.749523][T17282] veth0_macvtap: entered promiscuous mode [ 379.767334][ T5834] Bluetooth: hci2: command tx timeout [ 379.787389][T17282] veth1_macvtap: entered promiscuous mode [ 379.838397][T17282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.881149][T17282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.918349][T12606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.960357][T12606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.982809][T12606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.027487][T12606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.209914][T12606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.231132][T12606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.279072][T12605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.291488][T12605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.963060][T17636] Cannot find add_set index 4 as target [ 381.055203][T17637] ksmbd: Unknown IPC event: 3, ignore. [ 381.098307][T17637] tipc: Started in network mode [ 381.103247][T17637] tipc: Node identity fa95b9285a1b, cluster identity 4711 [ 381.109788][T17641] Cannot find add_set index 0 as target [ 381.146408][T17637] tipc: Enabled bearer , priority 0 [ 381.156078][T17641] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3236'. [ 381.167696][T17642] syzkaller0: entered promiscuous mode [ 381.173221][T17642] syzkaller0: entered allmulticast mode [ 381.248991][T17641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 381.294072][ T5841] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 381.306133][ T5841] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 381.314609][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 381.324095][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.334359][ T5841] RIP: 0010:klist_remove+0x14a/0x340 [ 381.339694][ T5841] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 54 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 54 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 381.359423][ T5841] RSP: 0018:ffffc9000422f5e0 EFLAGS: 00010202 [ 381.365521][ T5841] RAX: 000000000000000b RBX: ffff888031cb8000 RCX: 0000000000000000 [ 381.373496][ T5841] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 381.381469][ T5841] RBP: ffffc9000422f6e0 R08: ffffffff8f84bd43 R09: 1ffffffff1f097a8 [ 381.389445][ T5841] R10: dffffc0000000000 R11: fffffbfff1f097a9 R12: 0000000000000000 [ 381.397425][ T5841] R13: 1ffff1100f35df0c R14: ffff888079aef860 R15: dffffc0000000000 [ 381.405401][ T5841] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 381.414337][ T5841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.420928][ T5841] CR2: 00007f387c9b5c98 CR3: 000000006b1f8000 CR4: 00000000003526f0 [ 381.428907][ T5841] Call Trace: [ 381.432202][ T5841] [ 381.435140][ T5841] ? __pfx_klist_remove+0x10/0x10 [ 381.440213][ T5841] ? __pfx_kobject_move+0x10/0x10 [ 381.445251][ T5841] ? do_raw_spin_unlock+0x122/0x240 [ 381.450463][ T5841] ? get_device_parent+0x366/0x3a0 [ 381.455592][ T5841] device_move+0x193/0x700 [ 381.460014][ T5841] hci_conn_del_sysfs+0xb8/0x170 [ 381.464968][ T5841] hci_conn_del+0xc33/0x11b0 [ 381.469575][ T5841] hci_conn_hash_flush+0x191/0x230 [ 381.474704][ T5841] hci_dev_close_sync+0xaef/0x1330 [ 381.479842][ T5841] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 381.485394][ T5841] ? up_write+0x1c4/0x420 [ 381.489743][ T5841] hci_unregister_dev+0x21a/0x510 [ 381.494783][ T5841] vhci_release+0x152/0x1a0 [ 381.499299][ T5841] ? __pfx_vhci_release+0x10/0x10 [ 381.504334][ T5841] __fput+0x449/0xa70 [ 381.508385][ T5841] task_work_run+0x1d4/0x260 [ 381.512992][ T5841] ? __pfx_task_work_run+0x10/0x10 [ 381.518125][ T5841] ? do_exit+0x6b0/0x2300 [ 381.522503][ T5841] ? kmem_cache_free+0x19b/0x690 [ 381.527457][ T5841] do_exit+0x6b5/0x2300 [ 381.531739][ T5841] ? do_raw_spin_lock+0x121/0x290 [ 381.536779][ T5841] ? __pfx_do_exit+0x10/0x10 [ 381.541392][ T5841] do_group_exit+0x21c/0x2d0 [ 381.545999][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.551210][ T5841] get_signal+0x1285/0x1340 [ 381.555751][ T5841] arch_do_signal_or_restart+0xa0/0x790 [ 381.561324][ T5841] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 381.567527][ T5841] ? exit_to_user_mode_loop+0x40/0x130 [ 381.573021][ T5841] exit_to_user_mode_loop+0x72/0x130 [ 381.578332][ T5841] do_syscall_64+0x2bd/0xfa0 [ 381.582933][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.588154][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.594258][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 381.598968][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.604873][ T5841] RIP: 0033:0x7eff0558d8dc [ 381.609303][ T5841] Code: Unable to access opcode bytes at 0x7eff0558d8b2. [ 381.616327][ T5841] RSP: 002b:00007fff17d67220 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.624789][ T5841] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007eff0558d8dc [ 381.632786][ T5841] RDX: 0000000000000030 RSI: 00007fff17d672e0 RDI: 00000000000000f9 [ 381.640769][ T5841] RBP: 00007fff17d6728c R08: 0000000000000000 R09: 0079746972756365 [ 381.648774][ T5841] R10: 00007fff17d66be0 R11: 0000000000000246 R12: 0000000000000282 [ 381.656757][ T5841] R13: 00000000000927c0 R14: 000000000005cd99 R15: 00007fff17d672e0 [ 381.664777][ T5841] [ 381.667812][ T5841] Modules linked in: [ 381.675295][ T5841] ---[ end trace 0000000000000000 ]--- [ 381.686401][T12051] IPVS: ip_vs_send_async error -1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.712690][ T5841] RIP: 0010:klist_remove+0x14a/0x340 [ 381.756422][ T5841] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 54 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 54 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 381.787494][T17653] nbd: nbd2 already in use [ 381.856652][ T5834] Bluetooth: hci2: command tx timeout [ 381.870924][ T5841] RSP: 0018:ffffc9000422f5e0 EFLAGS: 00010202 [ 381.880218][ T5841] RAX: 000000000000000b RBX: ffff888031cb8000 RCX: 0000000000000000 [ 381.889043][ T5841] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 381.902189][ T5841] RBP: ffffc9000422f6e0 R08: ffffffff8f84bd43 R09: 1ffffffff1f097a8 [ 381.911124][ T5841] R10: dffffc0000000000 R11: fffffbfff1f097a9 R12: 0000000000000000 [ 381.920718][ T5841] R13: 1ffff1100f35df0c R14: ffff888079aef860 R15: dffffc0000000000 [ 381.930001][ T5841] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 381.945287][ T5841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.952726][ T5841] CR2: 0000563d0221a000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 381.961492][ T5841] Kernel panic - not syncing: Fatal exception [ 381.967979][ T5841] Kernel Offset: disabled [ 381.972312][ T5841] Rebooting in 86400 seconds..