last executing test programs: 2m3.54194255s ago: executing program 3 (id=767): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x260002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', r3, 0x2f, 0xfe, 0x72, 0x8, 0x32, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x700, 0x7}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x218, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4004}, 0x8080) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000005002d000000000005002e030600000008000300", @ANYRES32=r3], 0x2c}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 2m3.369600218s ago: executing program 3 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) 2m3.24958697s ago: executing program 3 (id=773): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000040)=0x80000000, 0x4) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) close(r1) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) 2m2.992924008s ago: executing program 3 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x29) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "630a4c4e216cabe4f9f85ec7a65140f936728bda862a75833845e4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x769}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x805}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x192}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008800) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r1, 0x0, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000280)) 2m2.865789684s ago: executing program 3 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0xfffffffd}}, 0xe3, 0x0, 0x1, 0x2, 0x3}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x68, 0x3, [0x3, 0xfffe, 0x7ff]}, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x800) ioctl$FICLONE(r4, 0x40049409, r0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r3, 0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv4_deladdr={0x80, 0x15, 0x20, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x0, 0xfe, r5}, [@IFA_FLAGS={0x8, 0x8, 0x81}, @IFA_FLAGS={0x8, 0x8, 0x212}, @IFA_LABEL={0x14, 0x3, 'batadv0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000700)={r3, 0x6}, &(0x7f0000000740)=0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@deltfilter={0x80, 0x2d, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xd, 0xe}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x58f}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @loopback}]}}, @TCA_CHAIN={0x8, 0xb, 0x70}, @TCA_CHAIN={0x8, 0xb, 0xd2}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000009c0)='rose0\x00', 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a00)={r6, @in={{0x2, 0x9, @multicast2}}, 0x5, 0x1}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000ac0)=@assoc_value={r1, 0x8}, 0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000b00)={0x80}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xac, 0x0, 0x220, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x43}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000d80)={r6, 0x4}, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x448a4}, 0x840) 2m2.60753861s ago: executing program 3 (id=783): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 2m2.287473165s ago: executing program 32 (id=783): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 6.648940485s ago: executing program 5 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x11, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.521072976s ago: executing program 5 (id=1606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x406040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r4, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x406040, 0x0) (async) 6.165950845s ago: executing program 4 (id=1610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(0x3) (async) close(0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 6.147206701s ago: executing program 4 (id=1612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5e0000ff5d59bae4c50524553fdf7f2739cbc90f87cdb30870185b87786b17cd0340ab37d77c84b7d0527b12baac469e9a578bc1cd63ca12571a5d270113f1adf3f547e23f4d28fa0a5061d70d1db89246f46b1af17533f23baa", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000240001800c0002800700020003000000110001006574683a70696d367265673100000000"], 0x38}}, 0x0) 6.10190779s ago: executing program 5 (id=1613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000200000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) accept4$ax25(r6, 0x0, 0x0, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 5.941408136s ago: executing program 4 (id=1616): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) 5.898056914s ago: executing program 5 (id=1617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) 5.746147737s ago: executing program 4 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r12, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) 5.607002449s ago: executing program 5 (id=1624): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000180)}, 0x20) r2 = socket(0x6b, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7, 0xffffffff, 0x1, 0x3, 0x200, 0x8, 0x40, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x4, 0x1, 0x5, 0x101}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) close(r0) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000180)}, 0x20) (async) socket(0x6b, 0x5, 0x2) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7, 0xffffffff, 0x1, 0x3, 0x200, 0x8, 0x40, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x4, 0x1, 0x5, 0x101}}, &(0x7f0000000140)=0xb0) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) 5.553258956s ago: executing program 4 (id=1625): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (rerun: 32) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x2a, 0x12021, 0x0, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="18030000fa8bc6c648483262e8be682e00010003000200fcdbdf250503f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="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"], 0x318}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.478937435s ago: executing program 1 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 5.379304196s ago: executing program 1 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000070b703aa6438dcb94785c3d16bac18b3000000000000850000000c000000b70000000000faff9500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1411, 0x20, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) 5.2122418s ago: executing program 4 (id=1631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf42, 0x8}, {0x1, 0x0, 0xfffffffffffffffc, 0x2000b843}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x3248}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001e0099030000000000000000ff01008e75f83593b889000000000000000000000000010000000000000000fe8000000000000000000000000000aa00000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x70}}, 0x0) 4.841696599s ago: executing program 33 (id=1631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf42, 0x8}, {0x1, 0x0, 0xfffffffffffffffc, 0x2000b843}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x3248}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001e0099030000000000000000ff01008e75f83593b889000000000000000000000000010000000000000000fe8000000000000000000000000000aa00000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x70}}, 0x0) 4.831284907s ago: executing program 1 (id=1635): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private0, 0x401}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000500000008000240000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a3000004e000050000000060a010400000000000000000500400008000b400000000028000480240001800b000100736f636b6574000014000280080001400000000008000240000000080900010073797a30000000001400000011000100"/192], 0xc0}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="24000054e53213e78d72e2f655c41d000208010200000000000000000a000004050003008a0000000600024022f00000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r7, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000100)="2f183b4351", 0x5) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) 4.831037641s ago: executing program 2 (id=1636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40081) 4.83038797s ago: executing program 5 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7}, 0x10) syz_emit_ethernet(0x1b, &(0x7f0000000640)=ANY=[], 0x0) sendmsg$can_j1939(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)="ec1af6b6077bc2be6a607d60e2418d376661a671b757a64f26dc1c071870865b91fe61a4aff41b600097ad52bf3ea1e5f678e2c5bf58d39929d1ee20c3c3255938d496933d087950f0ea91b0cae461ebce102f7a56079f086cc2f47a2b1d94119c58ae074243f7cc89783fa735a8e3d4d124aeed90b4c7cda35b89946c6163bf93", 0x81}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x18) r8 = accept(r2, &(0x7f00000005c0)=@l2tp6, &(0x7f0000000300)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x2, 0xe, 0x4, 0xc2, 0x5, 0x7}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000500)={r9, 0xffff, 0x1, [0x0]}, &(0x7f0000000700)=0xa) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000008f1003"], 0x33fc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r12, &(0x7f0000001480)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) (async) sendmmsg$inet(r12, &(0x7f0000001480)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) 4.594320158s ago: executing program 34 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7}, 0x10) syz_emit_ethernet(0x1b, &(0x7f0000000640)=ANY=[], 0x0) sendmsg$can_j1939(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)="ec1af6b6077bc2be6a607d60e2418d376661a671b757a64f26dc1c071870865b91fe61a4aff41b600097ad52bf3ea1e5f678e2c5bf58d39929d1ee20c3c3255938d496933d087950f0ea91b0cae461ebce102f7a56079f086cc2f47a2b1d94119c58ae074243f7cc89783fa735a8e3d4d124aeed90b4c7cda35b89946c6163bf93", 0x81}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xfffffffffffffffd, {0x2, 0xff, 0x4}, 0xfe}, 0x18) r8 = accept(r2, &(0x7f00000005c0)=@l2tp6, &(0x7f0000000300)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x2, 0xe, 0x4, 0xc2, 0x5, 0x7}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000500)={r9, 0xffff, 0x1, [0x0]}, &(0x7f0000000700)=0xa) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000008f1003"], 0x33fc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r12, &(0x7f0000001480)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) (async) sendmmsg$inet(r12, &(0x7f0000001480)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) 4.55286s ago: executing program 2 (id=1638): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r9, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0x51, &(0x7f00000002c0)={&(0x7f0000000180)={0xb0, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xa000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xa}}, {{@nsim={{0xe}, {0xfffffffffffffe3d, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x100}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x80) 4.430903451s ago: executing program 2 (id=1640): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xb026e000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8000, r0}, 0x18) 4.253661693s ago: executing program 2 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 4.09209853s ago: executing program 2 (id=1645): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x1, r3, 0x25, r1}, 0x10) (async) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x1, r3, 0x25, r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x8, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x8, @void}, 0x10) r4 = socket(0x2b, 0xa, 0x3fd) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) r5 = socket(0x28, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r5, 0x618e, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x20008040) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 1.592001736s ago: executing program 0 (id=1653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x44, @remote}, {0x2, 0x4e2f, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r2, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x3f}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0x2e0, 0x120, 0x120, 0x3d0, 0x120, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0xff], [], 'pimreg0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@unspec=@cpu={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, [0x0, 0xffffffff, 0x0, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast1, 0x36, 0xe, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffed6, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000200040024000480200001800500010073796e70726f7879000000000c00028008000340000000240900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad147258e2a3ffbea6b91840d494b4e3d956474db0f84c1d255951a922e181600f81600cf37060069"], 0x78}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r13, 0x8b32, &(0x7f0000000040)) setsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f0000000400)=0x4, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0xc8, 0x20, 0x100, 0x70bd28, 0x5, {0x10}, [@typed={0x8, 0x93, 0x0, 0x0, @fd=r12}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@mcast2}, @generic="b8513c66bcffdf0094c8c9e08cf8c42d08f15862008c80dba494c6c0dda224d6b51eda0d8edba12cbf9add87ec62c11399ad0e471c8770b7bf25b00d1f9b474475cec85bc92b698a7a3b5ac2c4be1730c8d9d68171a6fea06cef55a1220e1ed31ca31a881ee06105bd98d07c6f86b34bb6e6b9f10b0ba43cccd98a1766c8cc65e2c261302282072fb1f81765fdde4b5a8fb9827db9cf4cfe"]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 885.779626ms ago: executing program 0 (id=1654): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRESDEC=r4, @ANYRES64=r4], 0x44}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 753.665602ms ago: executing program 0 (id=1655): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x300, 0x80, 0x0, 0x5, 0x0, 0x0, 0x8}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x8, 0x5, 0x0, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x8b0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xb8f5792aa0bac6fd, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x884, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0xb0, 0x1, 0x9, 0x80000001, 0x4, 0x1, 0x633, 0x100, 0x200, 0x2, 0x4, 0x3, 0x6, 0x9, 0x6, 0x7fffffff, 0x5, 0x5, 0x0, 0x3, 0x8, 0x9, 0x80, 0x0, 0x4, 0xfffffffe, 0xa29d, 0x2, 0x35, 0xa, 0xffffa6a2, 0xc, 0x4, 0x8d9, 0x802, 0x8, 0x80, 0x81, 0x96a, 0xffff, 0x5, 0x9, 0x9, 0x0, 0x4, 0x4, 0x6, 0x3, 0x401, 0x0, 0x341604f4, 0x7fff, 0x6c, 0x17a018cb, 0x7ff, 0x9, 0x7, 0x6, 0xffff, 0x2, 0x9, 0x7, 0x3, 0x20007, 0x10001, 0x3, 0x2, 0x9, 0x7, 0x7, 0xdc, 0x7, 0x2, 0x2, 0x2, 0x4, 0xb97, 0x4, 0x6, 0x432e, 0x1ff, 0x6, 0xf, 0x6, 0x16, 0x4, 0x8, 0xb486, 0x37d8, 0x3, 0x5, 0x8, 0x5, 0x10000, 0x7, 0x8a000000, 0x5, 0x4, 0x1ff, 0x5, 0x4, 0xf, 0x4, 0x1cbd, 0x2, 0x1000, 0x10, 0x3, 0x0, 0x627, 0x61be6dcd, 0x0, 0xffffffff, 0x2, 0xa5b1, 0xebba, 0x8d, 0x2, 0x6d6, 0x4, 0x10001, 0xffffecfb, 0xb33, 0x6, 0x0, 0xa494, 0x0, 0x6, 0x89, 0x800, 0x3, 0x126, 0xd, 0x400, 0x9, 0x3ff, 0x4, 0x8, 0x7, 0x8, 0x8, 0x6576a960, 0x2, 0x7f, 0x80000000, 0xbcee, 0x1000, 0x2, 0x0, 0x6, 0x0, 0xb50, 0x2, 0xf4, 0x2, 0x80000001, 0xffffffff, 0x7fff, 0x400, 0x7, 0x4, 0x1, 0x4, 0x5, 0x8, 0x4, 0xf, 0xffffff00, 0x7, 0x0, 0x9, 0x80000001, 0x8, 0x7, 0x8, 0xd, 0x1, 0x3, 0x8, 0x4, 0x8, 0x1ff, 0xf, 0x131d1cfc, 0x2, 0xfffffffe, 0x1dd7, 0xd, 0x74ca85f3, 0x4, 0xa, 0xae9, 0x1, 0xc, 0x8, 0x1, 0x6, 0x8, 0x1, 0x63, 0x0, 0x1, 0xfffffff7, 0x7, 0x0, 0x7f, 0xd, 0x3, 0x3, 0x2, 0x9, 0x6, 0x8, 0x3, 0x1000, 0x8, 0x18c0, 0x1, 0x8, 0x1003, 0x200, 0x9, 0x0, 0x0, 0xc8, 0x7ff, 0x80, 0x9, 0x7fffffff, 0xfffffff7, 0x80000001, 0x4000000, 0x1, 0x10001, 0x800, 0xe, 0x9, 0xffff, 0x1, 0x8, 0x7, 0x10000, 0x6191, 0x7f00000, 0x9, 0x8, 0xfffffff3, 0xfffffffc, 0x7, 0x7, 0x9, 0x5, 0x1a, 0x0, 0x6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x0, 0x81, 0x6, 0x9, 0x1}, {0xfa, 0x2, 0x7, 0x4, 0x5, 0x52f}, 0x8cf, 0x6, 0xf79}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd5f998df414b53fb}, @TCA_TBF_PBURST={0x8, 0x7, 0x46f}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x7, 0x8, 0x7fffffff, 0x9, 0xa4, 0x401, 0x5, 0x80000000, 0x560, 0x7, 0xfffffffa, 0x4, 0x1, 0xfffffffd, 0x7ff, 0x9, 0xfffffff8, 0x10000, 0x7e2, 0x5, 0x7, 0x3, 0xc, 0x7, 0xfffffff9, 0x1ff, 0x8, 0x800, 0x4, 0xada9, 0xfffffff7, 0x100, 0x2, 0x8, 0x0, 0x80000000, 0x5, 0x6, 0x5, 0x9, 0xf, 0x7, 0x5, 0x5, 0x80000000, 0x400, 0xb2d, 0x4, 0x9, 0xfffffe01, 0x2, 0x8001, 0x5, 0x1, 0x8, 0x0, 0xde, 0x7fff, 0x80000000, 0xe, 0x27, 0x5, 0x9, 0x20000000, 0x6, 0x7, 0x1000, 0x5, 0xb, 0x7, 0xfffffffd, 0x3, 0x7fffffff, 0x5, 0xfffffffa, 0x3, 0x4f28, 0x100, 0xe84, 0x0, 0x7, 0x4, 0x7e6, 0x3, 0x3, 0xd, 0x2, 0x2, 0x8, 0x4, 0xb, 0xff, 0x3, 0x40, 0x0, 0xd, 0x80000000, 0x1, 0xfffffff8, 0x658c, 0x1, 0x4, 0x0, 0xfffffe00, 0xfffffc01, 0x4, 0x211b, 0x3ff, 0x9, 0x4e4abe5, 0x9, 0x5, 0xe4ad, 0xb, 0x895, 0x100, 0x8, 0x1, 0x2, 0xffffffff, 0x2, 0x6, 0x6, 0x0, 0x3, 0x7, 0x7, 0xc5b5, 0x3, 0x3, 0x9, 0x4eb, 0x0, 0x1000, 0x418, 0x6, 0x7, 0xf, 0x9, 0x0, 0x9, 0x0, 0x40, 0x3, 0xa, 0xffffffff, 0x100, 0xfffffeff, 0x5, 0xf, 0x3, 0x10, 0x40, 0x3, 0x9, 0x1, 0xfffffff9, 0x8000, 0x0, 0xe, 0x5, 0x9, 0x1, 0x9, 0x1, 0x7, 0x1001, 0xfffffff8, 0x5, 0x80000001, 0x4, 0x7, 0x0, 0x1, 0x9b5, 0x200, 0x1, 0x5, 0x2, 0x8a7, 0x7ff, 0x4, 0x8, 0xe, 0x5, 0x8001, 0xfa, 0x8, 0x4, 0x1b, 0xd, 0x8000, 0xfc000000, 0x7, 0x5, 0x1000, 0x0, 0x8, 0x1, 0x2a0f, 0x1, 0x4, 0x1, 0x90e, 0xc, 0x405, 0xf3f, 0x6, 0x401, 0x7, 0x5, 0x3, 0x1, 0x1a10, 0x0, 0x8, 0x8, 0x1ff, 0x8b, 0x6, 0x7, 0x9, 0x4, 0x8, 0x4, 0x7fff, 0x401, 0x1, 0xffffff01, 0x8, 0x6, 0x2, 0x3, 0x200, 0x8, 0x9, 0x8, 0xdd4, 0x0, 0x80, 0x2, 0xf, 0x6, 0x100, 0x6, 0x1, 0x6, 0xc, 0x8, 0x2, 0x3ff, 0x3, 0x4, 0x8, 0x4]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1bc34ee696cf0c90}, @TCA_TBF_PRATE64={0xc, 0x5, 0x70bbed4ab7c03fed}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3f9c0079cf3dd7ec}, @TCA_TBF_RATE64={0xc, 0x4, 0x928d345c033d50de}, @TCA_TBF_RATE64={0xc, 0x4, 0x7f7bdbc590292dad}]}}]}, 0x8b0}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r10, 0x8932, &(0x7f0000000140)={'team0\x00', @ifru_ivalue=0x7fffffff}) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r11, 0x1, 0x48, 0x0, &(0x7f00000003c0)) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 515.702514ms ago: executing program 0 (id=1656): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x78, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0x0, 0xff000000, 0xff]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg\x00'}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x7}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) r7 = accept(r0, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xfffffeeb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2001c804}, 0x20440d1) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 424.369939ms ago: executing program 1 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0xa, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200035cec8227ff25a087000ffdb0125047c0000080700000000dd8004000380abe894c50f22b900ef4e28736dfe9d743e4da7d7e650916209cea99ce50605d5f2976407b1b5d3c0ecd2b9c0c65bbd81d0ccdd265b585d606fc3294091c6610d080120889a884bc13f3dff4cb7f4a55bcbf3c8f037c7d99e181643e2dd0a7739d32576a9f239f3ef1741f49414e7568ab49aa922a1bf74"], 0x20}}, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100037020000000000000000000000004a95c78b5ffe840fc4b5b4e67e8bd280e692ff558d86e7648fef1037376b7d3c7d217ed825d780992d7bba02b19473975837bd2c80ccd9aa3f9ab21337a789a9ba3f3cf1080db7201179eb8d3039a0ec22d33698bd605d2b53dcb1dfd3f947f055a5355e00285644b8c57e98d34f4626871b6daf89", @ANYRES32=0x0, @ANYBLOB="8b04040000000000140012800b00010065727370616e0000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x88890) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1402, 0x20, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044080}, 0x40a0) 233.890054ms ago: executing program 1 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x3, 0x2}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2, 0x4) 163.743599ms ago: executing program 0 (id=1659): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x72}, @sack_perm, @mss={0x2, 0x9d74}], 0x5) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x180000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, 0x0, 0xfffffffffffffe89) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) (rerun: 64) 101.349325ms ago: executing program 1 (id=1660): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5a0}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "eb24"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r7, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) 53.942634ms ago: executing program 0 (id=1661): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="610304f706023002444cfe667da2dbcc7f432b9fb7eb284ec70ee9db"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 2 (id=1662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 84.955492][ T5816] cgroup: Unknown subsys name 'net' [ 85.053276][ T5816] cgroup: Unknown subsys name 'cpuset' [ 85.062748][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.865654][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.998139][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.025560][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.035402][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.046063][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.054948][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.063946][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.075390][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.085076][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.096395][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.105620][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.117241][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.127448][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.137368][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.141331][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.145869][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.161448][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.165048][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.179646][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.190914][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.199623][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.210328][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.218906][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.235089][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.249809][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.258568][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.788780][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.077689][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.093270][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.201123][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.214018][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.222058][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.231187][ T5826] bridge_slave_0: entered allmulticast mode [ 91.240679][ T5826] bridge_slave_0: entered promiscuous mode [ 91.312194][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.320123][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.327925][ T5826] bridge_slave_1: entered allmulticast mode [ 91.335650][ T5826] bridge_slave_1: entered promiscuous mode [ 91.490994][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.537920][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.553336][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.561118][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.569659][ T5837] bridge_slave_0: entered allmulticast mode [ 91.576949][ T5837] bridge_slave_0: entered promiscuous mode [ 91.585265][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.592977][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.601788][ T5834] bridge_slave_0: entered allmulticast mode [ 91.610339][ T5834] bridge_slave_0: entered promiscuous mode [ 91.653337][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.673083][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.681730][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.690800][ T5837] bridge_slave_1: entered allmulticast mode [ 91.701334][ T5837] bridge_slave_1: entered promiscuous mode [ 91.708810][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.717232][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.725546][ T5834] bridge_slave_1: entered allmulticast mode [ 91.734716][ T5834] bridge_slave_1: entered promiscuous mode [ 91.758194][ T5826] team0: Port device team_slave_0 added [ 91.820792][ T5826] team0: Port device team_slave_1 added [ 91.827240][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.834856][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.843590][ T5833] bridge_slave_0: entered allmulticast mode [ 91.852018][ T5833] bridge_slave_0: entered promiscuous mode [ 91.916842][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.925497][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.934340][ T5833] bridge_slave_1: entered allmulticast mode [ 91.942827][ T5833] bridge_slave_1: entered promiscuous mode [ 91.959329][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.973321][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.986601][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.032479][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.057763][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.066441][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.094345][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.200280][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.207777][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.239611][ T5835] Bluetooth: hci4: command tx timeout [ 92.239625][ T5831] Bluetooth: hci3: command tx timeout [ 92.239886][ T5831] Bluetooth: hci0: command tx timeout [ 92.259125][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.277413][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.307805][ T5837] team0: Port device team_slave_0 added [ 92.316528][ T5834] team0: Port device team_slave_0 added [ 92.323516][ T5847] Bluetooth: hci1: command tx timeout [ 92.329641][ T5831] Bluetooth: hci2: command tx timeout [ 92.340054][ T5834] team0: Port device team_slave_1 added [ 92.397568][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.434099][ T5837] team0: Port device team_slave_1 added [ 92.443821][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.452445][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.480914][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.509664][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.517641][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.525452][ T5828] bridge_slave_0: entered allmulticast mode [ 92.534026][ T5828] bridge_slave_0: entered promiscuous mode [ 92.558172][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.566363][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.598104][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.637653][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.645391][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.653115][ T5828] bridge_slave_1: entered allmulticast mode [ 92.660936][ T5828] bridge_slave_1: entered promiscuous mode [ 92.704401][ T5833] team0: Port device team_slave_0 added [ 92.738576][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.746342][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.773793][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.787774][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.795124][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.823870][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.837875][ T5833] team0: Port device team_slave_1 added [ 92.851014][ T5826] hsr_slave_0: entered promiscuous mode [ 92.859358][ T5826] hsr_slave_1: entered promiscuous mode [ 92.869679][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.925100][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.022788][ T5834] hsr_slave_0: entered promiscuous mode [ 93.029679][ T5834] hsr_slave_1: entered promiscuous mode [ 93.036072][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 93.042346][ T5834] Cannot create hsr debugfs directory [ 93.048995][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.056260][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.082909][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.116349][ T5828] team0: Port device team_slave_0 added [ 93.126251][ T5828] team0: Port device team_slave_1 added [ 93.133340][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.141585][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.170290][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.206659][ T5837] hsr_slave_0: entered promiscuous mode [ 93.216297][ T5837] hsr_slave_1: entered promiscuous mode [ 93.223571][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 93.229443][ T5837] Cannot create hsr debugfs directory [ 93.301422][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.309162][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.338264][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.430304][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.437510][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.467112][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.593923][ T5833] hsr_slave_0: entered promiscuous mode [ 93.600801][ T5833] hsr_slave_1: entered promiscuous mode [ 93.607783][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 93.614255][ T5833] Cannot create hsr debugfs directory [ 93.784273][ T5828] hsr_slave_0: entered promiscuous mode [ 93.791540][ T5828] hsr_slave_1: entered promiscuous mode [ 93.797959][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 93.804482][ T5828] Cannot create hsr debugfs directory [ 94.142444][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.170042][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.187173][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.213117][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.273053][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.307769][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.318901][ T5847] Bluetooth: hci4: command tx timeout [ 94.319681][ T5831] Bluetooth: hci3: command tx timeout [ 94.325379][ T5847] Bluetooth: hci0: command tx timeout [ 94.334209][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.363882][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.399354][ T5847] Bluetooth: hci1: command tx timeout [ 94.399467][ T5831] Bluetooth: hci2: command tx timeout [ 94.441851][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.472674][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.486313][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.515256][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.623903][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.641701][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.658032][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.670552][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.844414][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.864645][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.877119][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.895584][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.908044][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.969982][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.034239][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.053295][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.062087][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.092639][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.100072][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.154467][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.239163][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.257368][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.294044][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.303164][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.326837][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.338259][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.346291][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.371455][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.379438][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.423412][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.431358][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.488311][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.505894][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.590498][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.599731][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.661465][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.671445][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.702500][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.744969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.752589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.822803][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.831684][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.854946][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.001431][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.185148][ T5834] veth0_vlan: entered promiscuous mode [ 96.251288][ T5834] veth1_vlan: entered promiscuous mode [ 96.354145][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.394236][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.405295][ T5831] Bluetooth: hci0: command tx timeout [ 96.405317][ T5847] Bluetooth: hci3: command tx timeout [ 96.413408][ T5835] Bluetooth: hci4: command tx timeout [ 96.479789][ T5831] Bluetooth: hci2: command tx timeout [ 96.485592][ T5831] Bluetooth: hci1: command tx timeout [ 96.496169][ T5834] veth0_macvtap: entered promiscuous mode [ 96.534565][ T5834] veth1_macvtap: entered promiscuous mode [ 96.637797][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.663802][ T5826] veth0_vlan: entered promiscuous mode [ 96.673200][ T5833] veth0_vlan: entered promiscuous mode [ 96.691784][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.702636][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.726323][ T5826] veth1_vlan: entered promiscuous mode [ 96.747289][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.764993][ T5833] veth1_vlan: entered promiscuous mode [ 96.792292][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808379][ T1323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.840299][ T1323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.855587][ T1323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.015288][ T5826] veth0_macvtap: entered promiscuous mode [ 97.033072][ T5833] veth0_macvtap: entered promiscuous mode [ 97.075454][ T5826] veth1_macvtap: entered promiscuous mode [ 97.088381][ T5833] veth1_macvtap: entered promiscuous mode [ 97.104493][ T5828] veth0_vlan: entered promiscuous mode [ 97.165697][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.188585][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.202335][ T857] cfg80211: failed to load regulatory.db [ 97.212447][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.232587][ T5828] veth1_vlan: entered promiscuous mode [ 97.250161][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.271927][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.301194][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.333417][ T1323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.342938][ T1323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.366160][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.376179][ T1323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.387893][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.391141][ T1323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.426127][ T1323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.436485][ T1323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.468404][ T1323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482635][ T1323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.494374][ T5828] veth0_macvtap: entered promiscuous mode [ 97.508738][ T5828] veth1_macvtap: entered promiscuous mode [ 97.518411][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.615511][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.677310][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.715619][ T5837] veth0_vlan: entered promiscuous mode [ 97.742650][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.752382][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.855820][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.870031][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.896999][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.917611][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.927999][ T5837] veth1_vlan: entered promiscuous mode [ 98.136822][ T5953] Zero length message leads to an empty skb [ 98.480179][ T5835] Bluetooth: hci0: command tx timeout [ 98.480201][ T5847] Bluetooth: hci4: command tx timeout [ 98.494390][ T5831] Bluetooth: hci3: command tx timeout [ 98.559303][ T5831] Bluetooth: hci1: command tx timeout [ 98.561411][ T5835] Bluetooth: hci2: command tx timeout [ 100.700268][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.710027][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.734626][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.759778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.811450][ T5837] veth0_macvtap: entered promiscuous mode [ 100.823636][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.834947][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.867175][ T5837] veth1_macvtap: entered promiscuous mode [ 101.003297][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.015773][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.054122][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.100899][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.111645][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.133200][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.159165][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.180643][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.206692][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.276512][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.432305][ T5971] --map-set only usable from mangle table [ 101.481334][ T5972] --map-set only usable from mangle table [ 101.550618][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.638654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.693021][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.891817][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.933316][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.938335][ T5995] netlink: 294 bytes leftover after parsing attributes in process `syz.2.12'. [ 101.957728][ T5995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.245913][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 102.470431][ T6007] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 102.564932][ T6010] netlink: 'syz.0.17': attribute type 6 has an invalid length. [ 102.607923][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17'. [ 102.642241][ T6010] block nbd0: not configured, cannot reconfigure [ 102.806146][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.877936][ T6027] netlink: 'syz.0.23': attribute type 3 has an invalid length. [ 102.941084][ T6024] pim6reg1: entered promiscuous mode [ 102.946559][ T6024] pim6reg1: entered allmulticast mode [ 102.995672][ T6031] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 103.072096][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'. [ 103.165313][ T6031] batman_adv: batadv0: Adding interface: ip6gretap1 [ 103.189217][ T6031] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.244192][ T6031] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 103.417156][ T6045] delete_channel: no stack [ 103.526182][ T6049] netlink: 'syz.4.30': attribute type 75 has an invalid length. [ 103.822909][ T6058] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 103.869401][ T6063] netlink: 'syz.2.36': attribute type 3 has an invalid length. [ 103.911780][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 103.938986][ T6064] tipc: Started in network mode [ 103.956484][ T6064] tipc: Node identity a2dc58ddc963, cluster identity 4711 [ 103.980973][ T6064] tipc: Enabled bearer , priority 0 [ 103.991825][ T6065] syzkaller0: entered promiscuous mode [ 104.035420][ T6065] syzkaller0: entered allmulticast mode [ 104.102392][ T6068] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 104.127151][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.149595][ T6068] bridge_slave_1: left allmulticast mode [ 104.162717][ T6068] bridge_slave_1: left promiscuous mode [ 104.175260][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 104.192291][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.204112][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 104.222159][ T6068] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 104.240647][ T6079] x_tables: duplicate underflow at hook 1 [ 104.264912][ T6062] tipc: Resetting bearer [ 104.269668][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 104.330973][ T6062] tipc: Disabling bearer [ 104.699041][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 104.930838][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 104.950400][ T6096] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 105.148997][ T6114] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 105.175631][ T6116] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 105.188165][ T6114] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 105.405704][ T6123] ip6gretap2: entered allmulticast mode [ 105.440230][ T6129] delete_channel: no stack [ 105.902058][ T6148] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 106.025723][ T6158] vlan2: entered allmulticast mode [ 106.046253][ T6158] hsr0: entered allmulticast mode [ 106.056394][ T6158] hsr_slave_0: entered allmulticast mode [ 106.081729][ T6158] hsr_slave_1: entered allmulticast mode [ 106.394092][ T6179] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 106.421277][ T6181] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 106.475977][ T6183] tipc: Started in network mode [ 106.490210][ T6183] tipc: Node identity 8e1ad4a78376, cluster identity 4711 [ 106.510172][ T6183] tipc: Enabled bearer , priority 0 [ 106.539028][ T6187] syzkaller0: entered promiscuous mode [ 106.582160][ T6187] syzkaller0: entered allmulticast mode [ 106.619935][ T6183] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.663007][ T6183] tipc: Resetting bearer [ 106.683230][ T6182] tipc: Resetting bearer [ 106.718314][ T6182] tipc: Disabling bearer [ 110.097661][ T6211] __nla_validate_parse: 4 callbacks suppressed [ 110.097683][ T6211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.81'. [ 110.319040][ T6221] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 110.328011][ T6221] netlink: 228 bytes leftover after parsing attributes in process `syz.0.86'. [ 110.529353][ T6238] netlink: 'syz.1.89': attribute type 4 has an invalid length. [ 110.604243][ T6240] sctp: [Deprecated]: syz.3.91 (pid 6240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.604243][ T6240] Use struct sctp_sack_info instead [ 110.799520][ T6247] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 110.823099][ T6247] netlink: 228 bytes leftover after parsing attributes in process `syz.1.92'. [ 111.048887][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.94'. [ 111.095768][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 111.413462][ T6280] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.100'. [ 111.543377][ T6287] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 111.734711][ T6296] team0: Device ip6gre1 is of different type [ 111.850970][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.106'. [ 111.904025][ T6306] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 112.131973][ T6315] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.110'. [ 112.206874][ T6315] tipc: Enabling of bearer rejected, failed to enable media [ 112.686427][ T6344] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 112.744435][ T6353] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 112.766078][ T6352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.813333][ T6344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.836318][ T6352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.853687][ T6311] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.026987][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 113.212860][ T6373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.624303][ T6396] tap0: tun_chr_ioctl cmd 1074025678 [ 113.647844][ T6396] tap0: group set to 0 [ 113.661591][ T6396] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 113.926886][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 114.211206][ T6433] tipc: Enabled bearer , priority 0 [ 114.242449][ T6433] syzkaller0: entered promiscuous mode [ 114.253917][ T6433] syzkaller0: entered allmulticast mode [ 114.322324][ T6440] tipc: Resetting bearer [ 114.704744][ T6454] tipc: Enabled bearer , priority 0 [ 114.859139][ T6454] syzkaller0: entered promiscuous mode [ 114.868954][ T6454] syzkaller0: entered allmulticast mode [ 114.877019][ T6454] tipc: Resetting bearer [ 114.899441][ T6453] tipc: Resetting bearer [ 116.318355][ T6488] __nla_validate_parse: 2 callbacks suppressed [ 116.318376][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 117.051110][ T6453] tipc: Disabling bearer [ 117.068620][ T6426] tipc: Resetting bearer [ 117.085063][ T6426] tipc: Disabling bearer [ 117.129344][ T5909] tipc: Node number set to 1807702237 [ 117.142225][ T6476] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.147286][ T5896] tipc: Node number set to 225236135 [ 117.307999][ T6486] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 117.375394][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'. [ 117.387869][ T6503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 117.424145][ T6504] netlink: 324 bytes leftover after parsing attributes in process `syz.1.166'. [ 117.546151][ T6515] netlink: 13 bytes leftover after parsing attributes in process `syz.3.168'. [ 117.571637][ T6516] netlink: 13 bytes leftover after parsing attributes in process `syz.3.168'. [ 117.669482][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 118.209085][ T6546] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 118.574254][ T6577] Bluetooth: MGMT ver 1.23 [ 118.688719][ T6582] netlink: 'syz.2.190': attribute type 12 has an invalid length. [ 118.705877][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 118.827977][ T6591] netlink: 2 bytes leftover after parsing attributes in process `syz.0.189'. [ 119.131689][ T6604] syzkaller0: entered promiscuous mode [ 119.158895][ T6604] syzkaller0: entered allmulticast mode [ 119.435721][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.201'. [ 119.448647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bfafc00: rx timeout, send abort [ 119.517630][ T5866] IPVS: starting estimator thread 0... [ 119.544459][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 119.619128][ T6625] IPVS: using max 24 ests per chain, 57600 per kthread [ 119.949415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bfaf800: rx timeout, send abort [ 119.958374][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bfafc00: abort rx timeout. Force session deactivation [ 120.090915][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 120.181007][ T6659] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 120.184490][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.189382][ T6659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.394300][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.437704][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.457839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bfaf800: abort rx timeout. Force session deactivation [ 120.752016][ T6656] bond1 (unregistering): Released all slaves [ 120.843615][ T1323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.869884][ T1323] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.887190][ T1323] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.920123][ T1323] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.065887][ T6685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.093789][ T6685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.193366][ T6679] syzkaller1: entered promiscuous mode [ 121.202608][ T6679] syzkaller1: entered allmulticast mode [ 121.586644][ T6717] __nla_validate_parse: 37 callbacks suppressed [ 121.586666][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 121.619158][ T6722] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 121.649404][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 121.901191][ T6737] netlink: 'syz.0.231': attribute type 21 has an invalid length. [ 121.930829][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 122.059804][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.083069][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.126822][ T6749] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 122.146500][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.166984][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.191184][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.203459][ T6749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.481716][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 122.497959][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 122.536172][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.241'. [ 122.705515][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 122.782766][ T6783] netlink: 260 bytes leftover after parsing attributes in process `syz.0.244'. [ 122.870980][ T6788] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 122.884026][ T6788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.246'. [ 123.104855][ T6802] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 123.225066][ T6806] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 123.357444][ T6813] netlink: 404 bytes leftover after parsing attributes in process `syz.4.255'. [ 123.404230][ T6822] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 123.663220][ T6836] syzkaller0: entered promiscuous mode [ 123.679113][ T6836] syzkaller0: entered allmulticast mode [ 123.695069][ T6836] gre0: entered promiscuous mode [ 123.814862][ T6838] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.886163][ T6838] bond2: (slave lo): Enslaving as a backup interface with an up link [ 123.932384][ T6838] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 124.046900][ T6846] netlink: 'syz.4.263': attribute type 30 has an invalid length. [ 124.131948][ T6856] x_tables: unsorted entry at hook 1 [ 124.509928][ T6869] netlink: 'syz.2.270': attribute type 12 has an invalid length. [ 124.543292][ T6869] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 124.563245][ T6869] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 124.785766][ T6843] trusted_key: syz.0.262 sent an empty control message without MSG_MORE. [ 125.274239][ T6918] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 125.582468][ T6936] nbd: must specify a size in bytes for the device [ 125.731880][ T6941] Cannot find add_set index 0 as target [ 125.983765][ T6950] syz.0.295 (6950) used greatest stack depth: 17832 bytes left [ 125.996991][ T6953] openvswitch: netlink: IP tunnel dst address not specified [ 126.066231][ T6955] bridge1: entered promiscuous mode [ 126.106198][ T6955] bridge1: entered allmulticast mode [ 126.189017][ T6953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.233856][ T6962] warning: `syz.2.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.306565][ T6953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.348218][ T6964] 8021q: VLANs not supported on ip6_vti0 [ 126.352429][ T6972] netlink: 'syz.4.302': attribute type 2 has an invalid length. [ 126.437016][ T6953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.522770][ T6972] 9: entered promiscuous mode [ 126.569060][ T6980] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 126.615926][ T6986] __nla_validate_parse: 12 callbacks suppressed [ 126.615947][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 126.636152][ T6953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.702646][ T6980] netlink: 'syz.1.305': attribute type 24 has an invalid length. [ 126.760061][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.822924][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.886848][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.936435][ T6998] nbd: must specify a size in bytes for the device [ 127.014055][ T6996] netlink: 'syz.0.309': attribute type 11 has an invalid length. [ 127.079044][ T1158] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.516982][ T7026] tipc: Started in network mode [ 127.529708][ T7026] tipc: Node identity 06298a3a1693, cluster identity 4 [ 127.553216][ T7026] tipc: Enabled bearer , priority 0 [ 127.587205][ T7038] syzkaller0: entered promiscuous mode [ 127.612750][ T7038] syzkaller0: entered allmulticast mode [ 127.656907][ T7028] tipc: Enabling of bearer rejected, already enabled [ 127.672248][ T7040] syzkaller0: entered promiscuous mode [ 127.680985][ T7040] syzkaller0: entered allmulticast mode [ 127.783078][ T7028] tipc: Resetting bearer [ 127.830262][ T7028] tipc: Disabling bearer [ 128.048377][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.127750][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 128.235810][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 128.578290][ T7095] vlan1: entered allmulticast mode [ 128.587767][ T7095] veth0_vlan: entered allmulticast mode [ 128.750270][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 128.759814][ T7108] netlink: 'syz.0.340': attribute type 5 has an invalid length. [ 128.769049][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'. [ 128.790688][ T7108] geneve2: entered promiscuous mode [ 128.796207][ T7108] geneve2: entered allmulticast mode [ 128.804666][ T44] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 128.810418][ T7108] xt_bpf: check failed: parse error [ 128.819806][ T44] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 128.829718][ T44] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 128.842342][ T44] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 129.065763][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.127750][ T7114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 129.717056][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 129.788539][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 129.804288][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.813143][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.895371][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.908245][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.346488][ T7175] lo: entered allmulticast mode [ 130.364203][ T7175] lo: left allmulticast mode [ 130.820025][ T7203] geneve2: entered promiscuous mode [ 130.833855][ T7203] geneve2: entered allmulticast mode [ 130.854646][ T1323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.869385][ T1323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.933069][ T1323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.986592][ T7200] syzkaller1: entered promiscuous mode [ 130.994721][ T7200] syzkaller1: entered allmulticast mode [ 131.101542][ T7220] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 131.124727][ T7220] team0: Port device dummy0 added [ 131.225886][ T7224] xt_l2tp: v2 tid > 0xffff: 1114244 [ 131.242553][ T7224] tipc: New replicast peer: 255.255.255.255 [ 131.256821][ T7224] tipc: Enabled bearer , priority 10 [ 131.956073][ T7237] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 131.967988][ T7237] __nla_validate_parse: 9 callbacks suppressed [ 131.968009][ T7237] netlink: 228 bytes leftover after parsing attributes in process `syz.4.379'. [ 132.313431][ T7253] netlink: 'syz.0.386': attribute type 178 has an invalid length. [ 132.452391][ T7265] netlink: 'syz.0.386': attribute type 11 has an invalid length. [ 133.845173][ T7203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 134.016532][ T7203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 134.153771][ T7203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 134.253558][ T7296] netlink: 48 bytes leftover after parsing attributes in process `syz.3.395'. [ 134.487196][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 134.504744][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 134.509341][ T7298] netlink: 596 bytes leftover after parsing attributes in process `syz.4.396'. [ 134.602019][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 134.629012][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 134.656416][ T7305] tunl0: entered promiscuous mode [ 134.684380][ T7305] netlink: 'syz.0.399': attribute type 3 has an invalid length. [ 134.715319][ T7305] netlink: 9 bytes leftover after parsing attributes in process `syz.0.399'. [ 134.752023][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.760087][ T7309] syz.1.400 (7309) used obsolete PPPIOCDETACH ioctl [ 134.780534][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.935733][ T7315] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 134.952779][ T7315] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.582178][ T7362] Cannot find add_set index 0 as target [ 135.622323][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 135.683207][ T7368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.416'. [ 135.785799][ T7370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.794250][ T7370] IPv6: NLM_F_CREATE should be set when creating new route [ 136.004081][ T7382] syzkaller1: entered promiscuous mode [ 136.014154][ T7382] syzkaller1: entered allmulticast mode [ 136.086895][ T7387] veth0: entered promiscuous mode [ 136.094782][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 136.106624][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 136.187108][ T7387] veth0 (unregistering): left promiscuous mode [ 136.305471][ T7402] netlink: 'syz.2.421': attribute type 4 has an invalid length. [ 136.413818][ T151] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 136.443709][ T151] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 136.456166][ T151] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 136.471717][ T151] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 136.541975][ T7408] 8021q: VLANs not supported on ip6tnl0 [ 136.670643][ T7418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.431'. [ 136.925949][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'. [ 137.089815][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ec9c00: rx timeout, send abort [ 137.187948][ T7442] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 137.202885][ T7442] netlink: 16110 bytes leftover after parsing attributes in process `syz.4.436'. [ 137.342187][ T7446] tipc: New replicast peer: 255.255.255.255 [ 137.381766][ T7446] tipc: Enabled bearer , priority 10 [ 137.473490][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 137.535284][ T7457] netlink: 260 bytes leftover after parsing attributes in process `syz.4.442'. [ 137.537415][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'. [ 137.558298][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 137.590237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0ab000: rx timeout, send abort [ 137.600197][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ec9c00: abort rx timeout. Force session deactivation [ 137.643380][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 137.731157][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.965784][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 137.988448][ T7472] xfrm1: entered promiscuous mode [ 138.023321][ T7472] xfrm1: entered allmulticast mode [ 138.099588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0ab000: abort rx timeout. Force session deactivation [ 138.168978][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.176091][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.344233][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.388889][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.498802][ T24] tipc: Node number set to 280660538 [ 138.646591][ T7506] netlink: 'syz.2.455': attribute type 13 has an invalid length. [ 138.746669][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.760553][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.782262][ T7506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.932674][ T7521] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.266123][ T7532] bridge_slave_1: entered allmulticast mode [ 139.362099][ T7545] netlink: 'syz.0.464': attribute type 19 has an invalid length. [ 139.760493][ T7563] netlink: 'syz.2.470': attribute type 33 has an invalid length. [ 139.805908][ T7563] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 139.833165][ T7563] bond1 (unregistering): Released all slaves [ 139.920606][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.932481][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.604565][ T7620] xt_connbytes: Forcing CT accounting to be enabled [ 140.615211][ T7620] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.765656][ T7632] No such timeout policy "syz0" [ 140.867770][ T7624] gre0: left promiscuous mode [ 140.939168][ T7638] xt_CT: No such helper "syz1" [ 141.678518][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.701093][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.816291][ T7624] bridge1: left promiscuous mode [ 141.821575][ T7624] bridge1: left allmulticast mode [ 141.862179][ T1323] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.888129][ T1323] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.904133][ T1323] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.914501][ T1323] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.039567][ T7661] tipc: Started in network mode [ 142.044929][ T7661] tipc: Node identity ac14140f, cluster identity 4711 [ 142.054447][ T7661] tipc: Enabling of bearer rejected, failed to enable media [ 142.099310][ T7663] sctp: [Deprecated]: syz.4.501 (pid 7663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.099310][ T7663] Use struct sctp_sack_info instead [ 142.406195][ T7676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.422531][ T7674] netlink: 'syz.2.506': attribute type 18 has an invalid length. [ 142.552350][ T7670] __nla_validate_parse: 13 callbacks suppressed [ 142.552372][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 142.593366][ T7683] netlink: zone id is out of range [ 142.665913][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 142.718934][ T7683] netlink: set zone limit has 4 unknown bytes [ 142.779441][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 142.824780][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 143.016138][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.436184][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 143.450248][ T7727] netlink: 80 bytes leftover after parsing attributes in process `syz.2.520'. [ 143.460165][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 143.647130][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 143.709738][ T7735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.521'. [ 144.841621][ T7717] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 145.096159][ T7741] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 145.190661][ T7741] 9: entered promiscuous mode [ 145.369583][ T7770] netem: incorrect gi model size [ 145.562609][ T7785] nbd: must specify an index to disconnect [ 145.646660][ T7792] netlink: 'syz.1.532': attribute type 13 has an invalid length. [ 145.695495][ T7785] netlink: 'syz.2.534': attribute type 11 has an invalid length. [ 145.704496][ T7785] netlink: 228 bytes leftover after parsing attributes in process `syz.2.534'. [ 146.095811][ T7820] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 146.279538][ T7829] netlink: 'syz.2.546': attribute type 3 has an invalid length. [ 146.650531][ T7852] veth1_to_hsr: entered promiscuous mode [ 146.669918][ T7852] veth1_to_hsr: entered allmulticast mode [ 146.850362][ T7860] netlink: 'syz.0.554': attribute type 39 has an invalid length. [ 147.054255][ T7864] bond2: option xmit_hash_policy: invalid value (64) [ 147.112928][ T7864] bond2 (unregistering): Released all slaves [ 147.261568][ T7881] bridge_slave_1: left allmulticast mode [ 147.294284][ T7869] netlink: 'syz.2.557': attribute type 83 has an invalid length. [ 147.600957][ T7885] __nla_validate_parse: 4 callbacks suppressed [ 147.600976][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.560'. [ 147.793352][ T7888] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 147.801869][ T7889] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 148.449981][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 148.685988][ T7919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.570'. [ 148.709187][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 149.312040][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 149.426575][ T5866] IPVS: starting estimator thread 0... [ 149.528970][ T7955] IPVS: using max 26 ests per chain, 62400 per kthread [ 149.555983][ T7961] netlink: 56 bytes leftover after parsing attributes in process `syz.4.584'. [ 149.669145][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 149.720224][ T7972] xt_cgroup: path and classid specified [ 149.780270][ T7974] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 149.851669][ T7974] : entered promiscuous mode [ 150.083013][ T7989] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 150.110357][ T7992] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 150.134142][ T7992] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 150.332352][ T8004] openvswitch: netlink: Flow key attribute not present in set flow. [ 150.374946][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 150.395929][ T8005] nbd: must specify at least one socket [ 150.502205][ T8009] netlink: 96 bytes leftover after parsing attributes in process `syz.1.595'. [ 150.950544][ T8029] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 151.051632][ T8033] xt_l2tp: v2 doesn't support IP mode [ 151.080579][ T8004] infiniband sy: set active [ 151.086500][ T8004] infiniband sy: added bond_slave_0 [ 151.092282][ T8033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.606'. [ 151.103827][ T8004] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 151.117404][ T8032] bond1: (slave gretap1): making interface the new active one [ 151.135630][ T8004] infiniband sy: Couldn't open port 1 [ 151.187339][ T8004] RDS/IB: sy: added [ 151.190868][ T8032] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.204593][ T8004] smc: adding ib device sy with port count 1 [ 151.222219][ T8004] smc: ib device sy port 1 has no pnetid [ 152.669451][ T8102] nbd: illegal input index 2958377 [ 152.750956][ T8102] __nla_validate_parse: 8 callbacks suppressed [ 152.750978][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.626'. [ 152.813598][ T8109] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 152.847257][ T8109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.011440][ T8122] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 153.035196][ T8122] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 153.039263][ T8121] netlink: 216 bytes leftover after parsing attributes in process `syz.4.632'. [ 153.111059][ T8131] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 153.134450][ T8131] netlink: 500 bytes leftover after parsing attributes in process `syz.0.633'. [ 153.420456][ T8140] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 153.913193][ T8164] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.644'. [ 154.141140][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 154.173561][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 154.334423][ T5896] IPVS: starting estimator thread 0... [ 154.342462][ T8177] IPVS: ip_vs_add_dest(): server weight less than zero [ 154.448936][ T8183] IPVS: using max 32 ests per chain, 76800 per kthread [ 154.507044][ T8192] netlink: 328 bytes leftover after parsing attributes in process `syz.0.654'. [ 154.523440][ T8192] openvswitch: netlink: Flow key attr not present in new flow. [ 154.634647][ T8195] bond1: option miimon: invalid value (18446744073709551585) [ 154.648299][ T8195] bond1: option miimon: allowed values 0 - 2147483647 [ 154.659479][ T8195] bond1 (unregistering): Released all slaves [ 154.832819][ T8207] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 154.922057][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 154.989393][ T8217] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 155.353506][ T8240] pim6reg1: entered promiscuous mode [ 155.369915][ T8240] pim6reg1: entered allmulticast mode [ 155.778140][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 155.804149][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 155.851608][ T8272] netlink: 'syz.0.671': attribute type 6 has an invalid length. [ 156.287499][ T8293] netlink: 'syz.2.676': attribute type 3 has an invalid length. [ 156.808402][ T8316] tipc: Invalid UDP bearer configuration [ 156.808460][ T8316] tipc: Enabling of bearer rejected, failed to enable media [ 156.878777][ T8316] netlink: 'syz.2.684': attribute type 29 has an invalid length. [ 156.920713][ T8318] netlink: 'syz.2.684': attribute type 29 has an invalid length. [ 157.774525][ T8363] __nla_validate_parse: 8 callbacks suppressed [ 157.775765][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.695'. [ 157.861114][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.696'. [ 157.996672][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 158.023595][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 158.086953][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'. [ 158.264221][ T8389] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.639767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.835218][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 158.896089][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 159.345558][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 159.368509][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.377736][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.406643][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.432867][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.467733][ T8439] bond0: (slave batadv0): Releasing backup interface [ 159.471758][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 159.731406][ T8457] xt_hashlimit: max too large, truncated to 1048576 [ 159.747079][ T8457] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 160.042822][ T8470] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 160.092778][ T8472] IPVS: Error connecting to the multicast addr [ 160.397134][ T8498] xt_hashlimit: size too large, truncated to 1048576 [ 160.453056][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.810352][ T8518] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 160.992935][ T8526] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 161.243559][ T8542] syz.4.744: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.260293][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.4.744 Not tainted syzkaller #0 PREEMPT(full) [ 161.260325][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.260346][ T8542] Call Trace: [ 161.260355][ T8542] [ 161.260365][ T8542] dump_stack_lvl+0x189/0x250 [ 161.260405][ T8542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.260435][ T8542] ? __pfx__printk+0x10/0x10 [ 161.260457][ T8542] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 161.260486][ T8542] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 161.260517][ T8542] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 161.260549][ T8542] warn_alloc+0x214/0x310 [ 161.260581][ T8542] ? stack_depot_save_flags+0x40/0x860 [ 161.260618][ T8542] ? __pfx_warn_alloc+0x10/0x10 [ 161.260652][ T8542] ? kasan_save_track+0x3e/0x80 [ 161.260684][ T8542] ? __kasan_kmalloc+0x93/0xb0 [ 161.260715][ T8542] ? xsk_setsockopt+0x4dc/0x8d0 [ 161.260747][ T8542] ? do_sock_setsockopt+0x17c/0x1b0 [ 161.260766][ T8542] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 161.260785][ T8542] ? do_syscall_64+0xfa/0xfa0 [ 161.260825][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.260855][ T8542] __vmalloc_node_range_noprof+0x125/0x12d0 [ 161.260919][ T8542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.260976][ T8542] ? __kasan_kmalloc+0x93/0xb0 [ 161.261016][ T8542] vmalloc_user_noprof+0xad/0xf0 [ 161.261047][ T8542] ? xskq_create+0xbf/0x170 [ 161.261075][ T8542] xskq_create+0xbf/0x170 [ 161.261106][ T8542] xsk_init_queue+0xb0/0x110 [ 161.261136][ T8542] xsk_setsockopt+0x4dc/0x8d0 [ 161.261165][ T8542] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.261194][ T8542] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.261226][ T8542] ? aa_sock_opt_perm+0xff/0x1b0 [ 161.261267][ T8542] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 161.261287][ T8542] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.261314][ T8542] do_sock_setsockopt+0x17c/0x1b0 [ 161.261341][ T8542] __x64_sys_setsockopt+0x13f/0x1b0 [ 161.261370][ T8542] do_syscall_64+0xfa/0xfa0 [ 161.261398][ T8542] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.261427][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.261447][ T8542] ? clear_bhb_loop+0x60/0xb0 [ 161.261472][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.261493][ T8542] RIP: 0033:0x7f0cd6b8f749 [ 161.261525][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.261542][ T8542] RSP: 002b:00007f0cd7a22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.261565][ T8542] RAX: ffffffffffffffda RBX: 00007f0cd6de5fa0 RCX: 00007f0cd6b8f749 [ 161.261580][ T8542] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 161.261593][ T8542] RBP: 00007f0cd6c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 161.261605][ T8542] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.261618][ T8542] R13: 00007f0cd6de6038 R14: 00007f0cd6de5fa0 R15: 00007ffe09e0a978 [ 161.261654][ T8542] [ 161.261763][ T8542] Mem-Info: [ 161.588729][ T8542] active_anon:4742 inactive_anon:0 isolated_anon:0 [ 161.588729][ T8542] active_file:2888 inactive_file:39905 isolated_file:0 [ 161.588729][ T8542] unevictable:768 dirty:39 writeback:0 [ 161.588729][ T8542] slab_reclaimable:11539 slab_unreclaimable:111042 [ 161.588729][ T8542] mapped:29618 shmem:1356 pagetables:1141 [ 161.588729][ T8542] sec_pagetables:0 bounce:0 [ 161.588729][ T8542] kernel_misc_reclaimable:0 [ 161.588729][ T8542] free:1315452 free_pcp:14012 free_cma:0 [ 161.670022][ T8542] Node 0 active_anon:18868kB inactive_anon:0kB active_file:11552kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120372kB dirty:152kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12304kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.755335][ T8542] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.834369][ T8542] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.878778][ T8542] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 161.920826][ T8542] Node 0 DMA32 free:1355516kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18568kB inactive_anon:0kB active_file:11552kB inactive_file:159424kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:38036kB local_pcp:17788kB free_cma:0kB [ 162.047905][ T8542] lowmem_reserve[]: 0 0 0 0 0 [ 162.064457][ T8581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.100009][ T8542] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.138217][ T8542] lowmem_reserve[]: 0 0 0 0 0 [ 162.144278][ T8542] Node 1 Normal free:3890420kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18596kB local_pcp:7488kB free_cma:0kB [ 162.177695][ T8542] lowmem_reserve[]: 0 0 0 0 0 [ 162.186300][ T8542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.199713][ T8542] Node 0 DMA32: 579*4kB (UM) 160*8kB (UME) 109*16kB (UM) 244*32kB (UM) 114*64kB (UME) 55*128kB (UM) 34*256kB (UM) 14*512kB (UM) 9*1024kB (UM) 4*2048kB (UME) 316*4096kB (M) = 1355100kB [ 162.218520][ T8542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.231975][ T8542] Node 1 Normal: 199*4kB (UME) 53*8kB (UME) 43*16kB (UME) 86*32kB (UME) 23*64kB (UME) 8*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3890420kB [ 162.250527][ T8542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.263309][ T8542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.272760][ T8542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.283930][ T8542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.307030][ T8542] 44147 total pagecache pages [ 162.320572][ T8542] 0 pages in swap cache [ 162.328618][ T8542] Free swap = 124996kB [ 162.337358][ T8542] Total swap = 124996kB [ 162.352753][ T8542] 2097051 pages RAM [ 162.356702][ T8542] 0 pages HighMem/MovableOnly [ 162.366167][ T8542] 424120 pages reserved [ 162.371060][ T8542] 0 pages cma reserved [ 162.472077][ T8587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.479020][ T8587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.487967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.645465][ T8599] tipc: Enabling of bearer rejected, failed to enable media [ 162.712929][ T8610] batadv0: entered allmulticast mode [ 162.829730][ T8615] __nla_validate_parse: 7 callbacks suppressed [ 162.829751][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 162.863207][ T8614] netlink: 232 bytes leftover after parsing attributes in process `syz.1.763'. [ 163.054377][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 163.147240][ T8629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.769'. [ 163.518968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.582697][ T8655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 163.744805][ T8662] netlink: 'syz.4.780': attribute type 12 has an invalid length. [ 163.780963][ T8662] bond3: option primary_reselect: invalid value (255) [ 163.804316][ T8662] bond3 (unregistering): Released all slaves [ 163.957263][ T8257] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.036038][ T8257] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.130875][ T8257] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.177547][ T8257] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.292072][ T8675] netlink: 204 bytes leftover after parsing attributes in process `syz.4.787'. [ 164.393192][ T8678] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 164.558943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.559154][ T8257] bridge_slave_1: left allmulticast mode [ 164.592960][ T8257] bridge_slave_1: left promiscuous mode [ 164.605812][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.664063][ T8257] bridge_slave_0: left allmulticast mode [ 164.684203][ T8257] bridge_slave_0: left promiscuous mode [ 164.699792][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.919669][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.930077][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.951194][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.965099][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.981181][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.583312][ T8257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.596823][ T8257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.611185][ T8257] bond0 (unregistering): Released all slaves [ 165.632143][ T8701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.834404][ T8257] tipc: Left network mode [ 165.864122][ T8736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.802'. [ 165.922129][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 165.975351][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 165.997859][ T8733] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 166.055385][ T8733] bond1 (unregistering): Released all slaves [ 166.096410][ T8747] netlink: 'syz.2.804': attribute type 6 has an invalid length. [ 166.454627][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 166.653123][ T8769] syzkaller1: entered promiscuous mode [ 166.669631][ T8769] syzkaller1: entered allmulticast mode [ 166.923771][ T8257] hsr_slave_0: left promiscuous mode [ 166.938818][ T8257] hsr_slave_1: left promiscuous mode [ 167.008142][ T8257] veth1_macvtap: left promiscuous mode [ 167.023286][ T8257] veth0_macvtap: left promiscuous mode [ 167.035021][ T8257] veth1_vlan: left promiscuous mode [ 167.040920][ T5835] Bluetooth: hci1: command tx timeout [ 167.048432][ T8257] veth0_vlan: left promiscuous mode [ 167.081091][ T8787] unsupported nlmsg_type 40 [ 167.170291][ T8793] netlink: 'syz.2.816': attribute type 9 has an invalid length. [ 167.656539][ T8257] team0 (unregistering): Port device team_slave_1 removed [ 167.693247][ T8257] team0 (unregistering): Port device team_slave_0 removed [ 168.257017][ T8803] netlink: 'syz.4.821': attribute type 33 has an invalid length. [ 168.257260][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 168.283328][ T8803] __nla_validate_parse: 3 callbacks suppressed [ 168.283346][ T8803] netlink: 152 bytes leftover after parsing attributes in process `syz.4.821'. [ 168.377412][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 168.451872][ T8814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 168.587667][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.609848][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.617413][ T8706] bridge_slave_0: entered allmulticast mode [ 168.652815][ T8706] bridge_slave_0: entered promiscuous mode [ 168.690335][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.697646][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.709093][ T8706] bridge_slave_1: entered allmulticast mode [ 168.717188][ T8706] bridge_slave_1: entered promiscuous mode [ 168.779101][ T8829] tc_dump_action: action bad kind [ 168.815664][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 168.831918][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 168.844080][ T8706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.874665][ T8706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.917381][ T8257] IPVS: stop unused estimator thread 0... [ 168.921491][ T8841] netlink: 'syz.0.832': attribute type 21 has an invalid length. [ 168.936045][ T8841] netlink: 'syz.0.832': attribute type 22 has an invalid length. [ 168.944282][ T8841] netlink: 'syz.0.832': attribute type 23 has an invalid length. [ 168.952804][ T8841] netlink: 'syz.0.832': attribute type 25 has an invalid length. [ 168.962046][ T8841] netlink: 96 bytes leftover after parsing attributes in process `syz.0.832'. [ 169.015897][ T8706] team0: Port device team_slave_0 added [ 169.027016][ T8706] team0: Port device team_slave_1 added [ 169.119074][ T5835] Bluetooth: hci1: command tx timeout [ 169.142712][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.150573][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.177506][ T8706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.215462][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.222916][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.250444][ T8706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.461761][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 169.493627][ T8706] hsr_slave_0: entered promiscuous mode [ 169.505152][ T8706] hsr_slave_1: entered promiscuous mode [ 169.515263][ T8706] debugfs: 'hsr0' already exists in 'hsr' [ 169.522366][ T8706] Cannot create hsr debugfs directory [ 169.528346][ T8865] netem: change failed [ 169.663534][ T8874] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.685778][ T8874] bridge0: entered allmulticast mode [ 169.706518][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'. [ 169.771390][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 169.970069][ T8891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.843'. [ 170.049769][ T8901] netlink: 'syz.0.846': attribute type 12 has an invalid length. [ 170.049859][ T8900] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 170.294411][ T8901] bond1: option primary_reselect: invalid value (255) [ 170.304123][ T8901] bond1 (unregistering): Released all slaves [ 170.586370][ T8706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.642906][ T8706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.673745][ T8706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.707328][ T8706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.847096][ T8948] netlink: 'syz.4.855': attribute type 13 has an invalid length. [ 170.877968][ T8948] macvtap0: entered allmulticast mode [ 170.890569][ T8948] macvtap0: refused to change device tx_queue_len [ 170.949162][ T8953] tipc: Enabling of bearer rejected, failed to enable media [ 171.086469][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.127711][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.163185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.170495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.198811][ T5835] Bluetooth: hci1: command tx timeout [ 171.211455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.218755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.613942][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.713605][ T8996] x_tables: duplicate underflow at hook 1 [ 171.726070][ T8996] x_tables: duplicate underflow at hook 1 [ 171.732136][ T8998] x_tables: duplicate underflow at hook 1 [ 171.819735][ T9002] xt_nat: multiple ranges no longer supported [ 171.969123][ T8706] veth0_vlan: entered promiscuous mode [ 171.985139][ T8706] veth1_vlan: entered promiscuous mode [ 172.058389][ T8706] veth0_macvtap: entered promiscuous mode [ 172.080195][ T9010] netlink: 'syz.2.871': attribute type 8 has an invalid length. [ 172.080719][ T8706] veth1_macvtap: entered promiscuous mode [ 172.101095][ T9008] syzkaller1: entered promiscuous mode [ 172.106637][ T9008] syzkaller1: entered allmulticast mode [ 172.160102][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.181726][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.213279][ T8261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.222345][ T8261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.251080][ T8261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.308427][ T8261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.440990][ T8259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.480634][ T8259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.595375][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.604424][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.751863][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.840836][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.026480][ T9048] tipc: Started in network mode [ 173.037108][ T9048] tipc: Node identity ac14140f, cluster identity 4711 [ 173.045372][ T9048] tipc: New replicast peer: 255.255.255.255 [ 173.052490][ T9048] tipc: Enabled bearer , priority 10 [ 173.160102][ T9052] Unsupported ieee802154 address type: 0 [ 173.282802][ T5835] Bluetooth: hci1: command tx timeout [ 173.508450][ T9083] netlink: 'syz.4.896': attribute type 30 has an invalid length. [ 173.540270][ T9085] netlink: 'syz.1.895': attribute type 178 has an invalid length. [ 173.672096][ T9093] ip6t_REJECT: ECHOREPLY is not supported [ 173.699932][ T9096] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 173.741061][ T9100] __nla_validate_parse: 14 callbacks suppressed [ 173.741082][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 173.780223][ T9101] syzkaller1: entered promiscuous mode [ 173.801975][ T9101] syzkaller1: entered allmulticast mode [ 173.846662][ T9101] netlink: 240 bytes leftover after parsing attributes in process `syz.2.901'. [ 174.177112][ T5916] tipc: Node number set to 2886997007 [ 174.850258][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.857920][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.868499][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 175.017734][ T9187] netlink: 'syz.5.921': attribute type 10 has an invalid length. [ 175.037635][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.054972][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.289942][ T9187] veth1_macvtap: left promiscuous mode [ 175.326942][ T9191] netlink: 'syz.1.922': attribute type 12 has an invalid length. [ 175.327814][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.335882][ T9191] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.922'. [ 175.343965][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.362243][ T5835] Bluetooth: hci1: command tx timeout [ 175.373834][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.401081][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.435388][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.446401][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.461979][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.472217][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.484563][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.494011][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.503900][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.524147][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.579936][ T9205] netlink: 264 bytes leftover after parsing attributes in process `syz.5.926'. [ 175.599635][ T9200] tipc: New replicast peer: 255.255.255.255 [ 175.610591][ T9200] tipc: Enabled bearer , priority 10 [ 175.617824][ T9205] openvswitch: netlink: Flow key attr not present in new flow. [ 175.738574][ T9217] netlink: 'syz.2.929': attribute type 21 has an invalid length. [ 175.993308][ T9231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.013131][ T9233] netlink: 'syz.5.936': attribute type 10 has an invalid length. [ 176.046317][ T9233] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 176.109275][ T9235] netlink: 'syz.2.937': attribute type 9 has an invalid length. [ 176.171953][ T9240] syzkaller0: entered promiscuous mode [ 176.183508][ T9240] syzkaller0: entered allmulticast mode [ 176.205644][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.938'. [ 176.217523][ T9242] netlink: 104 bytes leftover after parsing attributes in process `syz.4.939'. [ 176.336899][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'. [ 176.379140][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'. [ 176.392292][ T9251] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 176.406692][ T9251] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 176.440991][ T9253] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 176.454496][ T9253] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 176.523446][ T9261] nftables ruleset with unbound set [ 176.537189][ T9262] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.945'. [ 177.011909][ T9296] tipc: Enabled bearer , priority 0 [ 177.033255][ T9298] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 177.042780][ T30] audit: type=1107 audit(1763573062.825:2): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Vèd*`Xk [ 177.042780][ T30] Ko}JZwlx' [ 177.047372][ T9298] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 177.406727][ T9296] tipc: Resetting bearer [ 177.636895][ T9331] validate_nla: 1 callbacks suppressed [ 177.636915][ T9331] netlink: 'syz.5.968': attribute type 15 has an invalid length. [ 177.649898][ T9333] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 177.760947][ T9342] netlink: 'syz.5.968': attribute type 15 has an invalid length. [ 178.396453][ T9391] Cannot find del_set index 3 as target [ 178.642286][ T9394] "syz.5.987" (9394) uses obsolete ecb(arc4) skcipher [ 178.752609][ T9408] __nla_validate_parse: 11 callbacks suppressed [ 178.752662][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 178.775877][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 178.792535][ T9408] tipc: Enabling of bearer rejected, failed to enable media [ 178.829096][ T9416] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:65535 [ 179.010090][ T9437] : entered promiscuous mode [ 179.062627][ T9443] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 179.064221][ T9427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.147522][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 179.168302][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 179.453777][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 179.706987][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 179.834209][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1012'. [ 180.124800][ T9513] netlink: 'syz.5.1019': attribute type 4 has an invalid length. [ 180.176700][ T9518] netlink: 'syz.5.1019': attribute type 4 has an invalid length. [ 180.258917][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 180.277673][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 180.651119][ T9545] syzkaller1: entered promiscuous mode [ 180.657707][ T9545] syzkaller1: entered allmulticast mode [ 180.668133][ T9545] syzkaller1: left promiscuous mode [ 180.673709][ T9545] syzkaller1: left allmulticast mode [ 180.682434][ T9547] netlink: 'syz.0.1025': attribute type 33 has an invalid length. [ 180.925699][ T9556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 181.038348][ T9563] netlink: 'syz.4.1032': attribute type 5 has an invalid length. [ 181.826366][ T9608] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.472928][ T9648] syzkaller0: entered promiscuous mode [ 182.478564][ T9648] syzkaller0: entered allmulticast mode [ 184.267553][ T9740] __nla_validate_parse: 6 callbacks suppressed [ 184.267574][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 184.316423][ T9740] chnl_net:caif_netlink_parms(): no params data found [ 184.320537][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 184.403771][ T9744] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.421166][ T9744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.865854][ T9763] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 184.893881][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 184.910266][ T9767] netlink: 'syz.5.1092': attribute type 3 has an invalid length. [ 185.173358][ T9781] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20000 [ 185.314964][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 185.473027][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1104'. [ 185.486290][ T9801] netlink: 'syz.4.1107': attribute type 4 has an invalid length. [ 185.539490][ T9806] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 185.556522][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1104'. [ 185.606803][ T8259] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.650218][ T8259] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.671660][ T9814] lo speed is unknown, defaulting to 1000 [ 185.671682][ T8259] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.677509][ T8259] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.743088][ T9814] lo speed is unknown, defaulting to 1000 [ 185.770254][ T9814] lo speed is unknown, defaulting to 1000 [ 185.796586][ T9814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.859134][ T9814] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 185.970407][ T9814] lo speed is unknown, defaulting to 1000 [ 185.995133][ T9814] lo speed is unknown, defaulting to 1000 [ 186.017761][ T9814] lo speed is unknown, defaulting to 1000 [ 186.048966][ T9814] lo speed is unknown, defaulting to 1000 [ 186.082012][ T9814] lo speed is unknown, defaulting to 1000 [ 186.174212][ T9836] netlink: 'syz.2.1120': attribute type 11 has an invalid length. [ 186.197759][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1121'. [ 186.244278][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 186.258896][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1121'. [ 186.331386][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'. [ 186.447105][ T9849] syzkaller0: entered promiscuous mode [ 186.463762][ T9849] syzkaller0: entered allmulticast mode [ 186.533129][ T9844] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 186.745254][ T9866] xt_ipcomp: unknown flags 1D [ 187.951175][ T9932] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 188.013198][ T9932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.123724][ T9932] veth3: entered promiscuous mode [ 188.155772][ T9932] bond3: (slave veth3): Enslaving as an active interface with a down link [ 188.179207][ T9941] netlink: 'syz.5.1153': attribute type 1 has an invalid length. [ 188.223679][ T30] audit: type=1800 audit(1763573074.005:3): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1154" name="memory.events" dev="tmpfs" ino=1277 res=0 errno=0 [ 188.286622][ T30] audit: type=1804 audit(1763573074.005:4): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1154" name="/newroot/246/memory.events" dev="tmpfs" ino=1277 res=1 errno=0 [ 188.337200][ T9945] macsec0: entered promiscuous mode [ 188.343116][ T9945] macsec0: entered allmulticast mode [ 188.349546][ T9945] veth1_macvtap: entered promiscuous mode [ 188.355538][ T9945] veth1_macvtap: entered allmulticast mode [ 188.396926][ T9945] macsec0: left promiscuous mode [ 188.413981][ T9945] macsec0: left allmulticast mode [ 188.439737][ T9945] veth1_macvtap: left allmulticast mode [ 188.474621][ T9945] xt_l2tp: v2 doesn't support IP mode [ 188.621735][ T9954] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 188.979697][ T9977] netlink: 'syz.0.1166': attribute type 13 has an invalid length. [ 189.008231][ T9977] tunl0: left promiscuous mode [ 189.062462][ T9977] bridge0: left allmulticast mode [ 189.124438][ T9977] geneve2: left promiscuous mode [ 189.129771][ T9977] geneve2: left allmulticast mode [ 189.136021][ T9977] xfrm1: left promiscuous mode [ 189.141085][ T9977] xfrm1: left allmulticast mode [ 189.280738][ T9990] x_tables: duplicate underflow at hook 1 [ 189.291396][ T9994] netlink: 'syz.0.1170': attribute type 2 has an invalid length. [ 189.444326][T10004] netlink: 'syz.5.1173': attribute type 1 has an invalid length. [ 189.566823][T10006] tipc: Enabled bearer , priority 0 [ 189.631142][T10008] syzkaller0: MTU too low for tipc bearer [ 189.636957][T10008] tipc: Disabling bearer [ 189.667499][T10016] netlink: 'syz.1.1177': attribute type 11 has an invalid length. [ 189.817044][T10026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.840919][T10022] syzkaller0: entered promiscuous mode [ 189.846637][T10022] syzkaller0: entered allmulticast mode [ 190.027018][T10036] __nla_validate_parse: 15 callbacks suppressed [ 190.027039][T10036] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1185'. [ 190.064947][T10036] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1185'. [ 190.147061][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 190.339764][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 190.341943][T10053] xt_nat: multiple ranges no longer supported [ 190.437430][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 190.575547][T10061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1190'. [ 190.645209][T10063] syzkaller1: entered promiscuous mode [ 190.653288][T10063] syzkaller1: entered allmulticast mode [ 190.993409][T10076] validate_nla: 1 callbacks suppressed [ 190.993432][T10076] netlink: 'syz.2.1196': attribute type 32 has an invalid length. [ 191.013949][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 191.053125][T10076] bond5: Setting coupled_control to off (0) [ 191.070014][T10076] x_tables: unsorted underflow at hook 2 [ 191.392220][T10098] sch_fq: defrate 0 ignored. [ 191.599685][T10113] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1210'. [ 191.761487][T10124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.795380][T10124] syzkaller0: entered allmulticast mode [ 191.802277][ T30] audit: type=1804 audit(1763573077.585:5): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1214" name="/newroot/78/cgroup.controllers" dev="tmpfs" ino=441 res=1 errno=0 [ 191.875147][ T30] audit: type=1800 audit(1763573077.615:6): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1214" name="cgroup.controllers" dev="tmpfs" ino=441 res=0 errno=0 [ 191.990568][T10142] C: renamed from team_slave_0 (while UP) [ 192.012763][T10142] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 192.039105][T10142] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.161135][T10148] pimreg: entered allmulticast mode [ 192.199040][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 192.388376][T10165] netlink: 'syz.2.1228': attribute type 15 has an invalid length. [ 192.409457][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 192.451246][T10165] netlink: 'syz.2.1228': attribute type 15 has an invalid length. [ 192.864448][T10198] netlink: 'syz.0.1240': attribute type 23 has an invalid length. [ 192.962203][T10202] nbd: couldn't find a device at index 0 [ 193.004333][T10203] sctp: [Deprecated]: syz.4.1241 (pid 10203) Use of int in max_burst socket option deprecated. [ 193.004333][T10203] Use struct sctp_assoc_value instead [ 193.086511][T10214] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 193.368154][T10238] nbd: must specify at least one socket [ 193.532492][T10249] netlink: 'syz.1.1255': attribute type 2 has an invalid length. [ 193.701389][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.713077][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.729588][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.752659][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.313693][T10290] netlink: 'syz.5.1267': attribute type 1 has an invalid length. [ 194.336747][T10288] netlink: 'syz.4.1266': attribute type 11 has an invalid length. [ 194.345666][T10289] ip6tnl1: entered promiscuous mode [ 194.354512][T10289] ip6tnl1: entered allmulticast mode [ 194.384119][T10293] xt_hashlimit: size too large, truncated to 1048576 [ 194.432811][T10295] : entered promiscuous mode [ 194.493440][T10300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.645453][T10309] netlink: ct family unspecified [ 194.650740][T10309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.923728][T10331] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 194.942679][T10331] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 194.951254][T10331] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 195.042767][T10339] __nla_validate_parse: 14 callbacks suppressed [ 195.042791][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1283'. [ 195.097894][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 195.421777][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 195.619506][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 195.846468][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'. [ 195.888280][T10385] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1298'. [ 196.169862][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 196.231370][T10405] hsr_slave_0 (unregistering): left promiscuous mode [ 196.455219][T10418] set match dimension is over the limit! [ 196.634651][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'. [ 196.755032][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1314'. [ 196.822411][T10440] syzkaller1: entered promiscuous mode [ 196.833812][T10440] syzkaller1: entered allmulticast mode [ 196.993473][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 197.127566][T10457] validate_nla: 3 callbacks suppressed [ 197.127586][T10457] netlink: 'syz.5.1321': attribute type 7 has an invalid length. [ 197.274661][T10466] bridge0: port 3(vlan0) entered blocking state [ 197.282690][T10466] bridge0: port 3(vlan0) entered disabled state [ 197.289346][T10466] vlan0: entered allmulticast mode [ 197.294676][T10466] bridge0: entered allmulticast mode [ 197.334007][T10466] vlan0: left allmulticast mode [ 197.342193][T10466] bridge0: left allmulticast mode [ 197.373830][T10467] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 197.401867][T10471] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 197.410279][T10473] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 197.602254][T10457] lo speed is unknown, defaulting to 1000 [ 197.732959][T10485] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 197.782901][T10485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.837805][T10491] bond3: (slave veth5): Enslaving as an active interface with a down link [ 197.922154][T10499] x_tables: duplicate underflow at hook 1 [ 197.937528][T10485] bond3: (slave veth0_to_bond): making interface the new active one [ 197.969750][T10485] veth0_to_bond: entered promiscuous mode [ 197.977296][T10485] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 198.081352][T10501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.411162][T10522] netlink: zone id is out of range [ 198.416360][T10522] netlink: zone id is out of range [ 198.463041][T10522] netlink: zone id is out of range [ 198.468232][T10522] netlink: zone id is out of range [ 198.511663][T10527] netlink: 'syz.2.1342': attribute type 5 has an invalid length. [ 198.529469][T10522] netlink: zone id is out of range [ 198.535582][T10522] netlink: zone id is out of range [ 198.547895][T10527] netlink: 'syz.2.1342': attribute type 21 has an invalid length. [ 198.572421][T10522] netlink: zone id is out of range [ 198.590687][T10522] netlink: zone id is out of range [ 198.595925][T10522] netlink: zone id is out of range [ 198.618744][T10522] netlink: zone id is out of range [ 199.602225][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.609212][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.141889][T10581] __nla_validate_parse: 13 callbacks suppressed [ 200.141912][T10581] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1361'. [ 200.172090][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 200.184138][T10581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.194407][T10581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.209662][T10581] batman_adv: batadv0: Removing interface: ip6gretap1 [ 200.456650][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 200.588348][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1372'. [ 200.619198][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 200.635058][T10611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1372'. [ 200.655753][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 200.682546][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 200.753517][T10619] team0: Cannot enslave team device to itself [ 200.891284][T10625] gtp0: entered promiscuous mode [ 200.902052][T10625] gtp0: entered allmulticast mode [ 201.121822][T10640] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 201.137058][T10640] bond2: (slave lo): Releasing backup interface [ 201.154960][T10640] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 201.190785][T10640] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 201.608095][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1391'. [ 201.626087][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1393'. [ 201.626141][T10683] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 201.646033][T10683] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 201.756606][T10679] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 201.771124][T10679] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 202.102702][T10715] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 202.464348][T10721] netlink: 'syz.5.1402': attribute type 3 has an invalid length. [ 202.560731][T10716] lo speed is unknown, defaulting to 1000 [ 202.832291][T10746] xt_l2tp: missing protocol rule (udp|l2tpip) [ 202.936021][T10748] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 202.969921][T10748] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 203.351620][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.359455][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.470990][T10771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.486219][T10771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.643903][T10777] geneve2: entered promiscuous mode [ 203.651541][T10777] geneve2: entered allmulticast mode [ 203.674145][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.695056][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.706068][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.715361][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.725566][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.758243][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.815326][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.831608][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.845065][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.854484][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.879086][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.894803][ T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.943709][T10796] Bluetooth: MGMT ver 1.23 [ 203.967786][T10796] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 204.164144][T10791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.188056][T10791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.228237][T10791] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 204.238064][T10791] bond0 (unregistering): Released all slaves [ 204.277719][T10809] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 204.928229][T10848] net_ratelimit: 6 callbacks suppressed [ 204.928249][T10848] 0: reclassify loop, rule prio 0, protocol 800 [ 205.050027][T10853] dvmrp0: entered allmulticast mode [ 205.057435][T10853] dvmrp0: left allmulticast mode [ 205.214903][T10861] __nla_validate_parse: 14 callbacks suppressed [ 205.214924][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 205.363207][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 205.862595][T10898] veth5: entered allmulticast mode [ 205.877042][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 206.093731][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 206.276403][T10925] tipc: Enabled bearer , priority 0 [ 206.295776][T10925] syzkaller0: entered promiscuous mode [ 206.339131][T10925] syzkaller0: entered allmulticast mode [ 206.365991][T10925] tipc: Resetting bearer [ 206.819598][T10956] syzkaller0: entered promiscuous mode [ 206.834617][T10956] syzkaller0: entered allmulticast mode [ 206.882222][T10956] tipc: Started in network mode [ 206.893992][T10956] tipc: Node identity ee638079aa32, cluster identity 4711 [ 206.908499][T10960] netlink: 'syz.1.1470': attribute type 13 has an invalid length. [ 206.915238][T10956] tipc: Enabled bearer , priority 0 [ 206.969190][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.999138][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.042108][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 207.060190][T10960] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 207.093261][T10960] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 207.100719][T10960] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 207.115052][T10960] gtp0: left promiscuous mode [ 207.120430][T10960] gtp0: left allmulticast mode [ 207.127940][T10955] tipc: Resetting bearer [ 207.155627][T10955] tipc: Disabling bearer [ 207.170949][T10918] tipc: Resetting bearer [ 207.203383][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 207.213814][T10918] tipc: Disabling bearer [ 207.237027][T10971] bridge_slave_0: left allmulticast mode [ 207.253573][T10971] bridge_slave_0: left promiscuous mode [ 207.266621][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.696906][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 207.801696][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 207.823216][T11007] veth0_to_bond: entered allmulticast mode [ 207.838188][T11002] macsec1: entered promiscuous mode [ 207.844358][T11002] macsec1: entered allmulticast mode [ 207.850656][T11002] bond4: (slave macsec1): Error -34 calling dev_set_mtu [ 208.005098][T11022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1488'. [ 208.349443][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1496'. [ 208.431487][T11045] netlink: 'syz.0.1497': attribute type 21 has an invalid length. [ 209.944156][ T1158] veth0_to_bond: left promiscuous mode [ 209.969035][T11056] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 209.989481][T11056] netlink: 'syz.2.1498': attribute type 13 has an invalid length. [ 210.100447][T11067] netlink: 'syz.5.1502': attribute type 1 has an invalid length. [ 210.122490][T11067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.144396][T11056] geneve2: left promiscuous mode [ 210.159490][T11056] geneve2: left allmulticast mode [ 210.244527][T11056] veth3: left promiscuous mode [ 210.398469][T11028] lo speed is unknown, defaulting to 1000 [ 210.518241][T11083] netlink: 'syz.2.1506': attribute type 2 has an invalid length. [ 211.963025][T11083] : entered promiscuous mode [ 217.041121][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 217.041568][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 230.319623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.043043][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.050161][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.924697][T11107] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 272.982907][T11114] netlink: 'syz.5.1516': attribute type 3 has an invalid length. [ 273.026264][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1516'. [ 273.057213][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 273.067302][T11114] netlink: 'syz.5.1516': attribute type 3 has an invalid length. [ 273.076419][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1516'. [ 273.280616][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1522'. [ 273.404237][T11144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1522'. [ 273.448016][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1522'. [ 273.487255][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1522'. [ 273.769974][T11171] netlink: 'syz.2.1529': attribute type 13 has an invalid length. [ 273.783645][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 273.829341][T11171] netlink: 'syz.2.1529': attribute type 13 has an invalid length. [ 273.847888][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 273.863723][T11179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.074458][T11189] netlink: 'syz.2.1534': attribute type 32 has an invalid length. [ 274.502756][T11205] syzkaller0: entered promiscuous mode [ 274.508323][T11205] syzkaller0: entered allmulticast mode [ 274.636135][T11227] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 0, id = 0 [ 274.941399][T11239] tipc: Enabled bearer , priority 0 [ 274.967835][T11239] syzkaller0: entered promiscuous mode [ 274.997810][T11239] syzkaller0: entered allmulticast mode [ 275.026060][T11243] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 275.036260][T11239] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.088102][T11251] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 275.132587][T11239] tipc: Resetting bearer [ 275.145391][T11238] tipc: Resetting bearer [ 275.185016][T11238] tipc: Disabling bearer [ 275.212228][T11258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.257668][T11251] veth9: entered promiscuous mode [ 275.297977][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'. [ 275.327460][T11263] veth9: entered promiscuous mode [ 275.434440][T11254] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.467005][T11254] bond5 (unregistering): Released all slaves [ 275.669833][T11262] syzkaller0: entered promiscuous mode [ 275.675400][T11262] syzkaller0: entered allmulticast mode [ 277.469134][T11320] sctp: [Deprecated]: syz.4.1565 (pid 11320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.469134][T11320] Use struct sctp_sack_info instead [ 277.513602][T11325] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 277.571528][T11332] netlink: 'syz.5.1570': attribute type 8 has an invalid length. [ 277.682095][T11341] netlink: 'syz.2.1572': attribute type 33 has an invalid length. [ 277.888455][T11355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.478758][T11371] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.982141][T11400] netlink: 'syz.2.1589': attribute type 3 has an invalid length. [ 278.992115][T11400] __nla_validate_parse: 69 callbacks suppressed [ 278.992138][T11400] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1589'. [ 279.010671][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 279.026551][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 279.111960][T11409] bond5: entered allmulticast mode [ 279.117441][T11372] lo speed is unknown, defaulting to 1000 [ 279.167197][T11408] ip6gretap1: entered allmulticast mode [ 279.176909][T11408] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 279.204422][T11416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1593'. [ 279.222133][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 279.262489][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1593'. [ 279.555144][T11435] netlink: 'syz.4.1599': attribute type 5 has an invalid length. [ 279.568283][T11435] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1599'. [ 280.047795][T11453] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 280.056766][T11453] syzkaller1: Refused to change device type [ 280.105215][T11460] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 280.121519][T11453] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 280.147401][T11453] syzkaller1: Refused to change device type [ 280.458734][T11484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.760828][T11502] netlink: 'syz.1.1619': attribute type 11 has an invalid length. [ 281.291793][T11528] tipc: Enabled bearer , priority 0 [ 281.300349][T11528] syzkaller0: entered promiscuous mode [ 281.305867][T11528] syzkaller0: entered allmulticast mode [ 281.353426][T11528] tipc: Resetting bearer [ 281.366362][T11527] tipc: Resetting bearer [ 281.442979][T11527] tipc: Disabling bearer [ 281.494757][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 281.621000][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 281.880866][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 281.969462][T11555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1638'. [ 282.027598][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 282.116316][T11559] tipc: Enabled bearer , priority 10 [ 282.357855][ T60] bridge_slave_1: left allmulticast mode [ 282.368869][ T60] bridge_slave_1: left promiscuous mode [ 282.385017][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.385084][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.419260][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.429254][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.440044][ T60] bridge_slave_0: left allmulticast mode [ 282.445759][ T60] bridge_slave_0: left promiscuous mode [ 282.470747][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.485438][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.485463][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.694576][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.704791][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.727021][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.737887][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.756036][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.027816][T11550] lo speed is unknown, defaulting to 1000 [ 283.137648][ T60] : left promiscuous mode [ 283.205008][T11595] tipc: Bearer : already 2 bearers with priority 10 [ 283.213844][T11595] tipc: Bearer : trying with adjusted priority [ 283.228514][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 283.248081][ T60] tipc: Left network mode [ 283.268138][ T60] IPVS: stopping backup sync thread 11227 ... [ 283.301563][T11595] tipc: Bearer : already 2 bearers with priority 10 [ 283.309631][T11595] tipc: Bearer : trying with adjusted priority [ 283.316777][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 283.924643][T11571] lo speed is unknown, defaulting to 1000 [ 283.937876][T11580] lo speed is unknown, defaulting to 1000 [ 284.033039][T11575] lo speed is unknown, defaulting to 1000 [ 284.122111][T11585] lo speed is unknown, defaulting to 1000 [ 284.414751][ T60] hsr_slave_0: left promiscuous mode [ 284.429683][ T60] hsr_slave_1: left promiscuous mode [ 284.455630][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.478018][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.558832][ T5847] Bluetooth: hci1: command tx timeout [ 284.627911][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1651'. [ 284.881480][ T5847] Bluetooth: hci4: command tx timeout [ 284.992365][ T60] team0 (unregistering): Port device team_slave_1 removed [ 285.025707][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.036438][ T60] team0 (unregistering): Port device team_slave_0 removed [ 285.105151][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.114498][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.183725][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.202152][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.347245][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.359635][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 285.638100][T11634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1654'. [ 286.059867][T11571] chnl_net:caif_netlink_parms(): no params data found [ 286.343737][T11585] chnl_net:caif_netlink_parms(): no params data found [ 286.490123][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 286.494732][T11672] ------------[ cut here ]------------ [ 286.505971][T11672] WARNING: CPU: 1 PID: 11672 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 286.515987][T11672] Modules linked in: [ 286.521073][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.1.1660 Not tainted syzkaller #0 PREEMPT(full) [ 286.530666][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.540858][T11672] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 286.547077][T11672] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 c4 02 f7 90 0f 0b 90 eb e1 e8 47 c4 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 286.567392][T11672] RSP: 0018:ffffc9000413ef60 EFLAGS: 00010287 [ 286.573829][T11672] RAX: ffffffff8abd3f89 RBX: ffff88802e624000 RCX: 0000000000080000 [ 286.581989][T11672] RDX: ffffc9000b60a000 RSI: 0000000000000447 RDI: 0000000000000448 [ 286.590377][T11672] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd3aa3 [ 286.598399][T11672] R10: dffffc0000000000 R11: ffffed1005cc4831 R12: 1ffff11005cc480a [ 286.606494][T11672] R13: ffff88807c4a8e80 R14: 0000000000000001 R15: ffffffff8abd3aa3 [ 286.614609][T11672] FS: 00007f32726956c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 286.623957][T11672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.630626][T11672] CR2: 0000200000001080 CR3: 0000000069886000 CR4: 00000000003526f0 [ 286.638799][T11672] Call Trace: [ 286.640639][ T5847] Bluetooth: hci1: command tx timeout [ 286.642102][T11672] [ 286.650859][T11672] rate_control_rate_init_all_links+0x109/0x1a0 [ 286.657161][T11672] sta_apply_auth_flags+0x1c2/0x400 [ 286.662498][T11672] sta_apply_parameters+0xe27/0x1570 [ 286.667842][T11672] ieee80211_add_station+0x424/0x6a0 [ 286.673259][T11672] rdev_add_station+0x108/0x290 [ 286.678172][T11672] nl80211_new_station+0x1755/0x1b70 [ 286.683950][T11672] ? __pfx_nl80211_new_station+0x10/0x10 [ 286.689778][T11672] ? netdev_run_todo+0xe1d/0xea0 [ 286.694810][T11672] ? nl80211_pre_doit+0x4f1/0x930 [ 286.700024][T11672] genl_family_rcv_msg_doit+0x215/0x300 [ 286.705650][T11672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.712174][T11672] ? bpf_lsm_capable+0x9/0x20 [ 286.716999][T11672] ? security_capable+0x7e/0x2e0 [ 286.720426][T11585] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 286.722278][T11672] genl_rcv_msg+0x60e/0x790 [ 286.735800][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.736128][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.741271][T11672] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 286.753499][T11672] ? __pfx_nl80211_new_station+0x10/0x10 [ 286.759029][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.759261][T11672] ? __pfx_nl80211_post_doit+0x10/0x10 [ 286.766470][T11571] bridge_slave_0: entered allmulticast mode [ 286.772084][T11672] ? __asan_memcpy+0x40/0x70 [ 286.782566][T11672] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.787996][T11672] netlink_rcv_skb+0x208/0x470 [ 286.792867][T11672] ? __lock_acquire+0xab9/0xd20 [ 286.797763][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.803291][T11672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.808698][T11672] ? down_read+0x1ad/0x2e0 [ 286.813170][T11672] genl_rcv+0x28/0x40 [ 286.817196][T11672] netlink_unicast+0x82f/0x9e0 [ 286.821270][T11571] bridge_slave_0: entered promiscuous mode [ 286.822078][T11672] ? __pfx_netlink_unicast+0x10/0x10 [ 286.833510][T11672] ? netlink_sendmsg+0x642/0xb30 [ 286.838494][T11672] ? skb_put+0x11b/0x210 [ 286.842865][T11672] netlink_sendmsg+0x805/0xb30 [ 286.847684][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.853085][T11672] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.858088][T11672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.863845][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.869245][T11672] __sock_sendmsg+0x21c/0x270 [ 286.873985][T11672] ____sys_sendmsg+0x505/0x830 [ 286.878859][T11672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.884204][T11672] ? import_iovec+0x74/0xa0 [ 286.889111][T11672] ___sys_sendmsg+0x21f/0x2a0 [ 286.893847][T11672] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.899310][T11672] ? __fget_files+0x2a/0x420 [ 286.904035][T11672] ? __fget_files+0x3a0/0x420 [ 286.908828][T11672] __x64_sys_sendmsg+0x19b/0x260 [ 286.913813][T11672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.919768][T11672] ? do_syscall_64+0xbe/0xfa0 [ 286.924516][T11672] do_syscall_64+0xfa/0xfa0 [ 286.929138][T11672] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.934427][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.940616][T11672] ? clear_bhb_loop+0x60/0xb0 [ 286.945349][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.951674][T11672] RIP: 0033:0x7f327178f749 [ 286.956156][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.976501][T11672] RSP: 002b:00007f3272695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.979901][T11668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.985364][T11672] RAX: ffffffffffffffda RBX: 00007f32719e5fa0 RCX: 00007f327178f749 [ 286.994314][ T5847] Bluetooth: hci4: command tx timeout [ 287.001843][T11672] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 287.001863][T11672] RBP: 00007f3271813f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.001877][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.001891][T11672] R13: 00007f32719e6038 R14: 00007f32719e5fa0 R15: 00007ffde45f3808 [ 287.040955][T11672] [ 287.044049][T11672] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.051456][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.1.1660 Not tainted syzkaller #0 PREEMPT(full) [ 287.060869][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.070972][T11672] Call Trace: [ 287.074293][T11672] [ 287.077269][T11672] dump_stack_lvl+0x99/0x250 [ 287.081902][T11672] ? __asan_memcpy+0x40/0x70 [ 287.086555][T11672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.091804][T11672] ? __pfx__printk+0x10/0x10 [ 287.096448][T11672] vpanic+0x237/0x6d0 [ 287.100551][T11672] ? __pfx_vpanic+0x10/0x10 [ 287.105090][T11672] panic+0xb9/0xc0 [ 287.108952][T11672] ? __pfx_panic+0x10/0x10 [ 287.113425][T11672] __warn+0x31b/0x4b0 [ 287.117445][T11672] ? rate_control_rate_init+0x64a/0x6e0 [ 287.123189][T11672] ? rate_control_rate_init+0x64a/0x6e0 [ 287.128788][T11672] report_bug+0x2be/0x4f0 [ 287.133144][T11672] ? rate_control_rate_init+0x64a/0x6e0 [ 287.138701][T11672] ? rate_control_rate_init+0x64a/0x6e0 [ 287.144271][T11672] ? rate_control_rate_init+0x64c/0x6e0 [ 287.149852][T11672] handle_bug+0x84/0x160 [ 287.154119][T11672] exc_invalid_op+0x1a/0x50 [ 287.158663][T11672] asm_exc_invalid_op+0x1a/0x20 [ 287.163530][T11672] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 287.169713][T11672] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 c4 02 f7 90 0f 0b 90 eb e1 e8 47 c4 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 287.189354][T11672] RSP: 0018:ffffc9000413ef60 EFLAGS: 00010287 [ 287.195451][T11672] RAX: ffffffff8abd3f89 RBX: ffff88802e624000 RCX: 0000000000080000 [ 287.203440][T11672] RDX: ffffc9000b60a000 RSI: 0000000000000447 RDI: 0000000000000448 [ 287.211426][T11672] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd3aa3 [ 287.219443][T11672] R10: dffffc0000000000 R11: ffffed1005cc4831 R12: 1ffff11005cc480a [ 287.227450][T11672] R13: ffff88807c4a8e80 R14: 0000000000000001 R15: ffffffff8abd3aa3 [ 287.235465][T11672] ? rate_control_rate_init+0x163/0x6e0 [ 287.241085][T11672] ? rate_control_rate_init+0x163/0x6e0 [ 287.246663][T11672] ? rate_control_rate_init+0x649/0x6e0 [ 287.252253][T11672] rate_control_rate_init_all_links+0x109/0x1a0 [ 287.258564][T11672] sta_apply_auth_flags+0x1c2/0x400 [ 287.263804][T11672] sta_apply_parameters+0xe27/0x1570 [ 287.269126][T11672] ieee80211_add_station+0x424/0x6a0 [ 287.274439][T11672] rdev_add_station+0x108/0x290 [ 287.279324][T11672] nl80211_new_station+0x1755/0x1b70 [ 287.284646][T11672] ? __pfx_nl80211_new_station+0x10/0x10 [ 287.290393][T11672] ? netdev_run_todo+0xe1d/0xea0 [ 287.295375][T11672] ? nl80211_pre_doit+0x4f1/0x930 [ 287.300428][T11672] genl_family_rcv_msg_doit+0x215/0x300 [ 287.306095][T11672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 287.312216][T11672] ? bpf_lsm_capable+0x9/0x20 [ 287.316915][T11672] ? security_capable+0x7e/0x2e0 [ 287.321894][T11672] genl_rcv_msg+0x60e/0x790 [ 287.326448][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.331489][T11672] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 287.336884][T11672] ? __pfx_nl80211_new_station+0x10/0x10 [ 287.342544][T11672] ? __pfx_nl80211_post_doit+0x10/0x10 [ 287.348053][T11672] ? __asan_memcpy+0x40/0x70 [ 287.352759][T11672] ? __pfx_ref_tracker_free+0x10/0x10 [ 287.358170][T11672] netlink_rcv_skb+0x208/0x470 [ 287.362967][T11672] ? __lock_acquire+0xab9/0xd20 [ 287.367865][T11672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.372915][T11672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.378254][T11672] ? down_read+0x1ad/0x2e0 [ 287.382708][T11672] genl_rcv+0x28/0x40 [ 287.386711][T11672] netlink_unicast+0x82f/0x9e0 [ 287.391522][T11672] ? __pfx_netlink_unicast+0x10/0x10 [ 287.396852][T11672] ? netlink_sendmsg+0x642/0xb30 [ 287.401806][T11672] ? skb_put+0x11b/0x210 [ 287.406074][T11672] netlink_sendmsg+0x805/0xb30 [ 287.410867][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.416191][T11672] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.421167][T11672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.426476][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.431804][T11672] __sock_sendmsg+0x21c/0x270 [ 287.436517][T11672] ____sys_sendmsg+0x505/0x830 [ 287.441308][T11672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.446817][T11672] ? import_iovec+0x74/0xa0 [ 287.451352][T11672] ___sys_sendmsg+0x21f/0x2a0 [ 287.456056][T11672] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.461307][T11672] ? __fget_files+0x2a/0x420 [ 287.466005][T11672] ? __fget_files+0x3a0/0x420 [ 287.470706][T11672] __x64_sys_sendmsg+0x19b/0x260 [ 287.475756][T11672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.481249][T11672] ? do_syscall_64+0xbe/0xfa0 [ 287.485951][T11672] do_syscall_64+0xfa/0xfa0 [ 287.490474][T11672] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.495699][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.501786][T11672] ? clear_bhb_loop+0x60/0xb0 [ 287.506522][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.512431][T11672] RIP: 0033:0x7f327178f749 [ 287.516906][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.536544][T11672] RSP: 002b:00007f3272695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.544989][T11672] RAX: ffffffffffffffda RBX: 00007f32719e5fa0 RCX: 00007f327178f749 [ 287.552987][T11672] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 287.560976][T11672] RBP: 00007f3271813f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.568978][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.576978][T11672] R13: 00007f32719e6038 R14: 00007f32719e5fa0 R15: 00007ffde45f3808 [ 287.585022][T11672] [ 287.588411][T11672] Kernel Offset: disabled [ 287.592742][T11672] Rebooting in 86400 seconds..