last executing test programs: 2.133136989s ago: executing program 3 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x19b, 0x0, &(0x7f00000004c0)="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"/411, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.019409369s ago: executing program 3 (id=3992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800100002200000229bd7000fedbdf250d0000006c012d805c0109805801ad8051012280340062800800d2004d7437ba57a6d286853b41073aa450807d77b0531095de959bfc3f34cc14e141546e1e9f50c77d02de13405f1f422323c50000000000000002000000", @ANYRES32=0x0, @ANYBLOB="897c745520d9647943d8b27fd70dc991363f1cd864fffcbee3e2752c94ed6039d3000000d500cf80a0356d3c8747a87afafdc9d91377ec09c910d0074f9ffb9acac333dbe3cfa9c777210b0078fc01df8a5fd3a6dd3083c04eed80115274e7d70b9e2c7ee5f3b4dcaa22ec719f3910af68e86b62f970c044eacfbd84bdf222b71fb36905ae846b1a4c9d13c7e584a01f91417e0d6fd6896dbde0d08b94f7c27921c3235277cab1783b5a5eb03c25d2d42ad42c039e3a72309e95d9105db6e9f82bd4d6bdb535c060105f9ba964549635480b415b17ea054204b1e1e3988abc2fc75a70bbfc3402141e4b6a7f992f0a0d8608005f00", @ANYRES32=0x0, @ANYBLOB="000000c78a094284b8e817c4fedbc21bbb104dab0c1bc6cdaeca1e3c871f94d907071b81f260820f2a67d6cc6054df68e1036aeceeae8afaa058b58ae79b3ab7a781f54b00000009001800a568355932000000"], 0x180}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) 1.25702335s ago: executing program 4 (id=4005): r0 = socket(0x9, 0x6, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 1.220292277s ago: executing program 0 (id=4006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001006e657464657673696d0000000f0002004b6574646576000000000000a7b0fc8473788bec6d1dd44812bcfa537f8646c7e7c6ae47d80b656995f19b76a3a3f771f6a6f91dd16f3c082082e63bfce8a07719feec5751aa9006718f839947f2f9fd81428128d0f36a0b697ca9c1c5a2ec5569926ac6e5f069b999e27a0bc3a63454db0db6e0c2ed6f712cb00bdd82b9b06a02af04fe49ab93d47ec7fc7b89addf74829c0cd46c68ddc10691bbdf213426f0a4855efae5f86667ce8975e5df"], 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003704000000006929b283f499f376", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.142806452s ago: executing program 1 (id=4007): socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) connect$netrom(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$netrom(r5, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) 1.14224567s ago: executing program 3 (id=4008): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000001340)=@assoc_value={0x0}, &(0x7f0000000080)=0x63) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3}, &(0x7f0000000100)=0x8) write$cgroup_pid(r0, &(0x7f0000001300), 0x12) (async) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803000000a8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async, rerun: 64) r5 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000340)=@phonet={0x23, 0x3, 0x0, 0x14}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="270502001cffba00060000", 0xb}, {&(0x7f0000000240)="2456d1", 0x3}], 0x2}, 0x800) (async) socket$inet6(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000440)=r7, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="27000000140007f3020e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="5500000018007f03c0fe15b20b00000000000000ff6c02000000000400009b3100b125ca997b5fdf13090200fb572fbc1008000004002402288d02c1b7d960370a9cce00e2eccba79a93502fda3de1171a5049f76df7a37849cb03282a01c635ed23c04e7099314593a33408920b8fee7a88dcf49a30dde7f5b6e9871d1cbc178dd400170fa5eb3f9986d85237bbe96a1ce2cdb595aa14e052", 0x99}], 0x1}, 0x8040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000003480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x10, 0x20000003}, 0x10}, 0x94) getsockopt$MRT6(r10, 0x29, 0xce, 0x0, &(0x7f0000000040)) (async, rerun: 32) ioctl(r9, 0x5, &(0x7f00000000c0)="edc46ba2831633bbab80b7e9ac7f83e885fcae82da6b35d035bc082bf28e1e9eb91d449c4be29df273") (rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) (async) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000820004000500110002000000"], 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.109329769s ago: executing program 4 (id=4010): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x7) r3 = accept(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r5, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba74", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6(0xa, 0x800, 0x80000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x28) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x4, 0xfff1}, {0xffff, 0xffe0}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 982.745229ms ago: executing program 0 (id=4011): bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0xd13d5365b1c00304, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0xd13d5365b1c00304, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 977.255164ms ago: executing program 2 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="1e935200410ed247d57d778f159912eb2fcead8108e3de18b2a6cab1cb9106aa154246bdbe17835af050aee24364799630084f5f3d43e953159bc824df0688a386210f1e78cb411469c8307b4f2d44fd2bb8f01ee9ad739b4d6162f7d656bb70ee1d95a625beafbb4b01e9b6932b58b17dbb9fd5ad49e704d185730845d209350fac3852a5b8986c261f39bb17a24d227c00c001168e3fbad8c397140dac3afd36422757f3b5a6287d3f00684619a8f24537a1800d61c8fce9febcc00a349561", @ANYRES32=0x0, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x2000010}, 0x8084) r9 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) (async) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) (async) accept4(r0, 0x0, 0x0, 0xc0800) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r5, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="adc734370000000008000a00", @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x24000801) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r11, 0x8008f513, &(0x7f00000002c0)) 949.823363ms ago: executing program 1 (id=4013): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 897.306609ms ago: executing program 0 (id=4014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'macvtap0\x00', @multicast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) 801.062822ms ago: executing program 1 (id=4015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2bbd8e72b0", 0x5}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000080)="ac3b1417f52f3d4f371c730692a66def50b294c618b2e3c35ba4e558c4a9051b2d46c5cb484c3f4c41d3f3dd40e215449ee6a88b", 0x34}, {&(0x7f00000000c0)="14e4b6752d4e826911ddb4da7ab1c0718dd762ca25c69557f8304353b09457cad585e30e81a6d1cdf5464ada5435a90dd6b0b1dcdf2df432f0c0a268207a75c1a93c0c171e7b4792c804be69578572f52a475f6afd7c6bf66d8b120e48e1defa3e6a4e9e15c532ba045bd58d4c6f0268f707e82a3b6407b311e2f3bdb122378260ad400c1f0601665151924ec608e6c13798a564d1f720e4417e20875fb83cedbf4fbf966d", 0xa5}, {&(0x7f0000000300)="ccabc0820f0165604a848a7abc68c7645ab6c67b6275ae4a0316808a1f785e852e5e03e91a58bd312377779d088ff22984022c7a60da35e561ab4365576b2c400740b3eb68133af880b3179ea1f21c7793de2b74285d1a61daec192f48e2", 0x5e}, {&(0x7f0000000240)="77df25fd2d77acdb56c8cb2cb66d7dbe247fe85899d266b052187d1220bb51774e124cf5361a33a557dad3c2d7b2147a6e455b9c82bbc42d66b6fbde232d60be334dcd9d0fb6dbd3b2e8bab12643e9d8c379f6", 0x53}, {&(0x7f0000000540)="5a30a45d12c37948f60684f3309eba700727898c30c55cfb6c8969b042f4c0b596d0c6c8dc0070cf82c629163f7e494615804baeb7bae677a1eb9fd1945557213de00a330c828a3e229fd027d1dfa28a54abaeef83119bf690ff91053a131b86a807e0e2bcf9dfe49df9d23e6609fbcf86527449", 0x74}], 0x7, &(0x7f0000000400)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4000000f}}], 0x48}, 0x20040455) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000001908000140000000010900010073797a30230000000900020073797a3200000000140000001100010000000000000000000000000e"], 0x7c}}, 0x0) 800.440595ms ago: executing program 3 (id=4016): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc0d}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) 800.049641ms ago: executing program 4 (id=4017): syz_init_net_socket$ax25(0x3, 0x2, 0xce) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000080)="4eec56a9d2959fbdadf0608385d8d047550ad317d08b21e71528b37ea52ac3847cc71bf156c3a42c719c449a267e69387fb36c543d1578dc59c001ea3be5c25c354ada1e7daba08c49c8fbac3cbad1231c2cdee2b33d370886b08699b9f9d9d4f0958be803b63e59c44740743786065790d7b7c11eba6c09d5e07c5f020250d464ad0ac90487ed4e72e1d0817f6527ee7bcdac90b3b7e7584d0a7705ad7c62ecbd55bab1a1c570d107595f754fd4b593f3e7943d4a76421705297075bc64cbb0f390c2bb1994aa03079786ae57cd2da76688e4fb07ceff4f7f824382c576", 0xde) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) 687.000196ms ago: executing program 1 (id=4018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 685.733828ms ago: executing program 2 (id=4019): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff070035060000f0000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_U32_SEL={0x44, 0x5, {0x45, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @mcast1, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a9a840016602bff5cd1aedb13cff91f4c12f0c03c35e376b29f673f1590387acb501916b16a50f288a667f4d80484f3d5c1064caf50855fb75bc01788d45728e9c7f0a8b52d83bc03b7320b986ef235168c216966a4e06b99501d9d25430779fd4c1c72fded0b8d784c4a9f890c703d261b2dca81ee43b5a9ac686092ae3f72efb139ac65c9c76ff62a9fadc6453373eb4a12e635a47b38ee006a83a0bf210caa74c4b945a86d53a3a3faee037859a5a9157cc9d98c6d566076f00", 0xbb}, {&(0x7f0000000280)="20a9f093743d6c5f7f86d4dc2718f71a3ac3e815c828a30f502b0ebfd84812478ade9bc0df6129d0", 0x28}], 0x2, &(0x7f0000000300)=[@dstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x0, 0x12, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xa5, 0x6e, "c6c7aacb434465d551505c482df80dba57b42e79a8fc717f26cd6348a90662cdc72cbb87984f26a0c4ad2a9336e3fdcca3a2e5b11b5b9f6392b6d2af7690bbc4ac6a8046dc86438b3c59f0866ec6f115cf201a42df90cc1adb7a5ad001020f1333d14ce61cbb532a272e7a25bbe0"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x7ff}, @enc_lim={0x4, 0x1, 0x67}]}}}], 0xe0}}], 0x1, 0x4000000) 685.443825ms ago: executing program 4 (id=4020): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113590000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 615.513701ms ago: executing program 4 (id=4021): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}], 0x2, 0x10000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x3, 0x8, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x0, 0x29, 0x0, @local, @multicast1, {[@noop]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}]}, {0x0, [0x2e]}}, &(0x7f0000000340)=""/199, 0x33, 0xc7, 0x0, 0x44}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc54d, 0x0, 0x0, 0x0, 0x40}, @alu={0x4, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffe0, 0x10}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x19}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xa6, &(0x7f0000000140)=""/166, 0x41000, 0x74, '\x00', r7, 0x25, r9, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0xe19}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x5, 0x1, 0x2, 0xa}, {0x2, 0x3, 0x8, 0x7}, {0x1, 0x2, 0x2, 0xc}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000008c0)={{r9, &(0x7f00000006c0)='\x00', 0x400c00, &(0x7f0000000700)={@_ha_fsid={[0x5, 0xb51]}, {0x6cc, 0x8000, 0x5, 0x8}}, 0xffffff16, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x6}, {[0x8, 0x4, 0x3, 0x1]}, 0x8, 0xf5, &(0x7f00000007c0)=""/245}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f0000002e80)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b40)={0x14c, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4888, 0x9}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r13 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) close(r3) ioctl$FS_IOC_GETFSSYSFSPATH(r13, 0x80811501, &(0x7f0000000600)={0x80}) 565.506118ms ago: executing program 3 (id=4022): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 427.345775ms ago: executing program 2 (id=4023): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}, [@generic={0x4, 0x8, 0x6, 0x4, 0xf}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 426.620742ms ago: executing program 1 (id=4024): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "07f1d98f665121083e3ca87410701205129141f2aa25c14361955e601c8adf09", 0x401, 0x400, 0x40, 0xd03}, 0x3c) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/104, &(0x7f00000000c0)=0x68) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000001640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000000180)={0x1464, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x77}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0xe3, 0xfa, "19f8c3727fbf5cfbf7383296da6f597487f8ec93e99867444ff8b8f3faf8afe37dbf58f0e2c52d0676b2c12dcfb95ea10e987b5ec781fd38350ca49d20692f601b25eea15158552e0893ca65e2cabfe43505e22c244b6dca10ad2381649a4d411a926a3e0a9d27cb49483c324f5ae6aeb4cfcb2568b8504d5fd2175ee3a399ae497674b45274245d3f7b5551821faea7cba10edbbf1f102cfa08bcee9231261e382129bdc7e693580eecb8a56a161f72ff81a35699c7d7846c0658df7d326e3d30dde732a58441d9254b578d2743251619575af4dcf08b08b5cddebdc061b8"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "27bb"}, @NL80211_ATTR_FILS_ERP_RRK={0x103, 0xfc, "4b1b68988a1ccbd5959eb3932e05f25f837f3323131d68b1cbaeeec3e0ac8cee7ee4ed277c3c803612659bb1080d52681869d8488e62d336a6b9bfce3f0027f7775ccc30874d1c4797dd376a383fc8f7add0776cb45a434ed3545c7ddea54f15ccfb8389d47338ff453839d50c536e9760363a896834bf6dd95cd675af0d371341404386367affad1f35ed16ee48e5df881bc4951821e6dc832c4a35824d96ff1c62cdfee6f0e582c29eedd5a08ba977c885480f345f7b4912fc9269feada14350336e5888b61f393b2d37536e59327ef045facd3bfe59df754596be319e3bac79d852f8a2b789536a673e01b2e88687ab78b8777ebcf9250c2ddecb525a51"}], @NL80211_ATTR_IE={0x16, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xff}}, @chsw_timing={0x68, 0x4, {0x7f}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_IE={0x69, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5f}, 0x5, 0x3, @device_b, 0x9e, 0x6, 0x4}}, @peer_mgmt={0x75, 0x14, {0x1, 0x3, @void, @void, @val="d39931264b6480755fe163bdd04deaf3"}}, @channel_switch={0x25, 0x3, {0x0, 0x88, 0x3}}, @dsss={0x3, 0x1, 0xaf}, @dsss={0x3, 0x1, 0xac}, @cf={0x4, 0x6, {0x6, 0xf7, 0x9, 0x1}}, @mic={0x8c, 0x18, {0x31a, "6a62858c4bb8", @long="62ca4d8523ee8da46dc614c9cec0b8c1"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x5, 0x3f, 0xfbff}}, @dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_IE={0x18f, 0x2a, [@ibss={0x6, 0x2, 0x9}, @tim={0x5, 0x78, {0x9, 0xf8, 0x0, "a1829c9dff33b38941801f1f4b875c4b8a39a2d18e1a95530afafb82ba58938be6564f83f65739c4916924e543aec511e81d222dfa7c3b4cb84a500cc1f49ccb13ef97182ff78971ab96034dfbb7ea3fc9678196d329d72296cee05e68955886f5061fc925608fd095576811a0cab87368ab185297"}}, @peer_mgmt={0x75, 0x6, {0x1, 0xc, @void, @val=0x2c, @void}}, @supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x2, 0x1}, {0x6c}, {0x6c, 0x1}]}, @supported_rates={0x1, 0x8, [{0x48}, {0xb, 0x1}, {0xb, 0x1}, {0x4}, {0x6, 0x1}, {0x12}, {0x1b, 0x1}, {0x9, 0x1}]}, @chsw_timing={0x68, 0x4, {0x11eb, 0x24}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @void, @val=0x1d, @val="ebdb318aa58f38029c91d210fe2c0fd7"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x60}}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0x8cd2, 0x40, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x6, 0x4}}, @measure_req={0x26, 0xb0, {0x81, 0x6, 0x3, "947c9d6898de8852f7af6662d876aaef74ea1044afb34060626d8b35b8bda8560389de242a029ed0306eb937650c5993852f0f9716ca574900b7af3d4ad3df241dece91ecc0d94e6d21b629aeb67a02c3dfdde4163e4a4c3adbc9d22472c62f1e6eb5058950039de0fec2056e5692e3962f7e171e2d6d0db17b9fc6be8a93f295cd6d48182de0985b721a686c7a74bab1a1198dff7c7de03977157ff53759793d21e2aa24055cf9fa6f8011885"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x6, 0xfa, "b063"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "1e2324ec7e9a2bcad219"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "621d7384723cafafae1ba8"}]]}, 0x1464}}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x800}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x58b1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e24, 0x3, @local, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000017c0)={'ip6tnl0\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x6, 0x2, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x92a, 0xfffffff8}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001800)={@empty, @local, r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a00)=0x14, 0x0) r8 = accept4$packet(r6, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a80)=0x14, 0x80800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000001c00)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001c40)=0x28) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x10}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x40800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x880) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001ec0), r1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000002880)={{r8, &(0x7f0000001f00)='}\x1d\x00', 0x101441, &(0x7f0000001f40)={@_ha_fsid={[0x4, 0xab]}, {0x7000, 0xf1e, 0xffffffff, 0x1}}, 0x8, &(0x7f0000001f80), &(0x7f0000001fc0)=0x2}, 0x7, &(0x7f0000002780)=[{0x1, 0x3, &(0x7f0000002000)='^\x00', &(0x7f0000002040)="0a275d328764a1d59fed539dc2af2e786b9a196fbab9a08228d2ad882898382779e6b5c906561c794fa492132f48c5d22ba7c9f44e8dfba35a645f01566137b3939d65d24a5583cb97766d6e3475228cdb4407fda1e0765339ae9f78eb46e11fd239726da8099998b98113e79eb28952bad34651be8655606360c01d61c53c16b4bad9ddc4d37659b70ede8b9e828d4ab4201f09ea8eb2b5e45a", 0x9a, 0x8}, {0x1, 0x2, &(0x7f0000002100)='\\}\x00', &(0x7f0000002140)="6480a6474776249c09525c5de278fbc9fdab367fabb4c96d0304f1142747ec03f3882f1fc7c087aa92e30242dd6d9b78bb266cb89b6c0fbb96929371d542621e4cbf51f0051e118fbf9bf6dc4e0db28e8aa2809fb23d5d9b487d807ea6fb513056b375180ad6ef940df4f396b157019b40ffc02829337eaaceeab138f84f92ee09f38f4e8033b0babb97378cf64550297d23d836f0f4b8b7ef98af53c29d5d5266c2fd1084b2d03657777a6c91763a80a7be8ffff36b58ab146af804aa97268df6c82c775bd596d2c5bd53f02c29c8a296f0e633b0b91210e91254055ac063ccf024424b5b08944b33cc279da1", 0xed, 0x22}, {0x2, 0x81, &(0x7f0000002240)='syztnl2\x00', &(0x7f0000002280)="d30e30b3e89ce9d901a7b2e639ada7ba54ec9a2731cc6f178874df", 0x1b, 0x12}, {0x3, 0x0, &(0x7f00000022c0)='\x00', &(0x7f0000002300)="f9933c14114383bf7fde2e6570c2c961b9df52340736e9e15034eeb6f23639562a0ee1481b310d2ffeae1887cecf630b667cc008d51fcc5903f20b45e6561d839519383c245d4089e125dbf98e252accd53203f1c59c5e13a617249c8f6a39e01b3ed817ed1f9b2dcbe43e7c1be58865696052d15e5369f344c63000eeeb9648ac2bb6eb217ed0880bc6de13bbedd7c5c596ff7508b985ff4df18becf71e8daf0e6934379807a974f8c13f0f05245c563c945717e6b4347badf9126c6910882c7adacdbea07531373a16ecdf58dbe4", 0xcf, 0x1a}, {0x0, 0x8, &(0x7f0000002400)='\x00', &(0x7f0000002440)="61bc505a5ec1c5c54b29479ea1bb473ab7fec93d583aaddd50f48840e5f453ad304bbc37257f4f6f6e972281ed6f87c6aea5a23400785dbd952b87d07127ae707bc6187c3e986e5c3a7eb07ac61834a47914862bc8acc3be4e7a17d5d380c5faea47134607e69474051dde0a40ab1b3f663aad2559e1026647c096dc91c996843672a075c463e3ee807057f1aafd730dca6da8e05a6fe0fcbb98c5c205a9d051dcf96445751ce37607f66c374139aadfb730278aa706ded4e3160b446f65ea2641b1d5923b", 0xc5, 0x28}, {0x3, 0x6, &(0x7f0000002540)='/!&%\x00', &(0x7f0000002580)="aa6e58cf50dc40fdf478faa630f5eba3d381d09b49eebb88a8e0b68de519fcf5b1acf9fce35aae8ace9c4011be2d0a495eef29abfc1c8c19c17a4ad2a8270395bd826ab0c5d8ba92ae9a3fadef4dc93b560bd86839b78359c3974a7d6dca63784616168e6a4aa2f8e4a3bc0188661aa119ea524b93bd5b59440d23695442b6a3ed84e0d517714755bd5ec325ba8c53bf51c42fa97a762ec6d1cc6e18c3d4647b561927d69a66d3f219a41bf96c57f8e13eb060c7ff42830d7fef1e35fc", 0xbd, 0x30}, {0x3, 0xfffffffb, &(0x7f0000002640)='wlan1\x00', &(0x7f0000002680)="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", 0xfe, 0x28}]}) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002980)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x3c, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x100) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), r11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r13, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0xa8, r14, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x32}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2068}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xaa8deaab0d311eb9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20040011) sendmsg$AUDIT_TRIM(r11, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x10, 0x3f6, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d00)={r11, 0x58, &(0x7f0000002c80)}, 0x10) socket$netlink(0x10, 0x3, 0x1a) 340.834978ms ago: executing program 2 (id=4025): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-asm)\x00'}, 0xfffffffffffffd19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x4000000, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x8008}], 0x1, 0x0) recvmsg$unix(r5, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) 318.012043ms ago: executing program 0 (id=4026): r0 = socket(0xa, 0x3, 0x3a) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010101}}, 0x24) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x4, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x3, 0x4) 238.970736ms ago: executing program 3 (id=4027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x108) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'hsr0\x00'}) 207.070643ms ago: executing program 4 (id=4028): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x32, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000087f00000000000c0300000000305f5f3011002e61615f00"], &(0x7f0000000340)=""/253, 0x30, 0xfd, 0x0, 0x1, 0x10000, @value=r3}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0xc, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x5f, 0x2e]}}, &(0x7f0000000680)=""/252, 0x29, 0xfc, 0x1, 0x3}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x14000800) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty}, 0x1c) write(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000040)={@local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) 151.168086ms ago: executing program 1 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_SRC={0x8, 0x2, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 86.398369ms ago: executing program 2 (id=4030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8d0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x320}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4c007) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x401, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r6, &(0x7f0000000300)=@generic={0x1d, "89d079df2815ae43ccda410d348bbaf2c702c43620d58cdcb15013f741d03baaac7b8af347ca8ca97c8c3809f4ce980c1cc8c67d21e7f9df75174022adfe4be24c8bdd3404567381bdb993980ee0e2e9c718953d01b39522000cc983dffd0c0b4dd1d9a48151cb47dfb833b15605350d8a722fa9893e21643cd43ffd3fd8"}, 0x80) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r5}) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x164, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}, 0x164}, 0x1, 0x0, 0x0, 0x20084}, 0x4000) (async) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x801813}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6102a1edcc05e3c7}, 0xc020080) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48014}, 0x20050001) close(0x4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="150b000000000000000001000000"], 0x14}}, 0x80) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x0, 0x4, 0xe, 0xb, 0xc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], &(0x7f0000000a80)='GPL\x00', 0x7f, 0x59, &(0x7f0000000ac0)=""/89, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0x5fb4365f, 0xa}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000b80)=[{0x0, 0x2, 0x4, 0x9}, {0x2, 0x2, 0x2, 0xa}, {0x1, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x7}], 0x10, 0x80000000}, 0x94) 85.806232ms ago: executing program 0 (id=4031): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 26.532483ms ago: executing program 2 (id=4032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00050424000000000000000c000200ffff000000000000"], 0x3c}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r10, 0x0, 0xfe80, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="0100f098700069db8e9505257c3cd3bd5deeafad5f4800f9789b67c0217a0d6132b5686e5591e6195a9a5511a120d23e7ab156c60e9d46f97a27230600ba68f185c06d0767ea45f8c137e7e3b1fa935a516647670803879f892337301309f7b0cec99bf8ced50731eed8fa838a1d1bbadea33b1f3d5fbd32bbbf1f2189cbc265d98d98693244229a60da5d7228db8163a142c5cb0856f79bdd5afbb3cf8e124d66c256167d974c219b22532bf3223139d8ed8b8bb8529fab1526ba33caa6e04704aad157e9cfa4791668999be5f104de707c539252a5b595c4000000000000000000", @ANYRES32=r11, @ANYBLOB="d0005a805400038005000700010000001400050004000600030007000400a400ffff0000050006000200000005000700020000000500060001000000140005000b00f6ff018002000800010002000e0006000200460d000078000380210001000c050118044830046c05241b181b01056c160b181b1818360506061812000000140005000300030005000000e0000400080008001400030024340200010005d707000300ffff810005000700000000000500060000000000050004000200000005000600010000000500040001000000"], 0xec}}, 0x2000c840) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r12, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r13, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r14, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 0 (id=4033): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) (async) kernel console output (not intermixed with test programs): tes in process `syz.3.2558'. [ 259.057069][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 259.546227][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'. [ 259.556829][T15168] netlink: 294 bytes leftover after parsing attributes in process `syz.3.2567'. [ 259.564395][T15174] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 259.574638][T15168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.590863][T15174] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 259.602032][T15168] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 259.610904][T15174] netlink: 'syz.1.2569': attribute type 2 has an invalid length. [ 259.612818][T15168] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.2567'. [ 259.626013][T15174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2569'. [ 259.631896][T15168] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2567'. [ 259.706209][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2571'. [ 259.898778][T15198] netlink: 'syz.1.2574': attribute type 39 has an invalid length. [ 260.051881][T15201] syzkaller0: entered promiscuous mode [ 260.066482][T15201] syzkaller0: entered allmulticast mode [ 260.278117][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2577'. [ 260.422656][T15230] netlink: 'syz.3.2581': attribute type 2 has an invalid length. [ 260.453907][T15227] netlink: 'syz.2.2580': attribute type 13 has an invalid length. [ 260.709014][T15234] lo: Caught tx_queue_len zero misconfig [ 260.764612][ T6880] bond6: (slave bridge3): link status up again after 0 ms [ 260.805395][ T60] bond6: (slave bridge3): link status up again after 0 ms [ 260.854296][ T60] bond6: (slave bridge3): link status up again after 0 ms [ 260.875532][ T6880] bond6: (slave bridge3): link status up again after 0 ms [ 260.924174][ T6880] bond6: (slave bridge3): link status up again after 0 ms [ 260.945675][ T60] bond6: (slave bridge3): link status up again after 0 ms [ 260.974433][ T6887] bond6: (slave bridge3): link status up again after 0 ms [ 260.994057][ T6887] bond6: (slave bridge3): link status up again after 0 ms [ 261.014939][ T60] bond6: (slave bridge3): link status up again after 0 ms [ 261.114329][T15248] veth0_macvtap: left allmulticast mode [ 261.142608][ T6887] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.159870][ T6887] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.193847][ T6887] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.217917][T15261] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.514844][T15279] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 262.039600][T15302] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 262.103591][T15302] bond4 (unregistering): Released all slaves [ 262.192285][T15327] IPVS: Error joining to the multicast group [ 262.715291][T15357] delete_channel: no stack [ 263.039229][T15383] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 263.184436][T15400] netlink: 'syz.4.2624': attribute type 10 has an invalid length. [ 263.270426][T15410] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 263.315838][T15410] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.336972][T15398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.418433][T15418] netlink: 'syz.1.2626': attribute type 8 has an invalid length. [ 263.685819][T15426] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 263.715010][T15426] team0: Device ipvlan1 failed to register rx_handler [ 263.916308][T15439] netlink: 'syz.1.2632': attribute type 5 has an invalid length. [ 263.935736][ T6887] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.947485][ T6887] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.967335][ T6887] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.979716][ T6887] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.154883][T15459] __nla_validate_parse: 16 callbacks suppressed [ 264.154900][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 264.201142][T15459] nbd: nbd0 already in use [ 264.211682][T15459] block nbd0: NBD_DISCONNECT [ 264.221265][T15459] block nbd0: Send disconnect failed -32 [ 264.254076][T15459] block nbd0: shutting down sockets [ 264.300544][ C0] blk_print_req_error: 138 callbacks suppressed [ 264.300566][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.316403][ C0] buffer_io_error: 138 callbacks suppressed [ 264.316418][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.330115][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.339612][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.347424][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.356914][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.364721][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.374217][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.395028][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.405714][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.416628][ T5818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.472225][ T5818] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.493125][ T5818] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.508450][ T5818] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.547561][ T5818] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.577737][ T5818] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.615406][ T60] net_ratelimit: 32 callbacks suppressed [ 264.615423][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 264.637085][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.655536][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.680158][ T5818] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.705075][ T5818] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.727177][ T5818] ldm_validate_partition_table(): Disk read failed. [ 264.744585][ T5818] Dev nbd0: unable to read RDB block 0 [ 264.759752][ T5818] nbd0: unable to read partition table [ 264.773535][T15490] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 264.789365][ T5818] ldm_validate_partition_table(): Disk read failed. [ 264.799396][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 264.810865][T15490] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 264.819981][ T5818] Dev nbd0: unable to read RDB block 0 [ 264.826388][ T5818] nbd0: unable to read partition table [ 264.827479][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 264.843141][T15497] block nbd5: Unsupported socket: should be TCP or UNIX. [ 264.934291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.945735][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 265.084646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.094170][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 265.150462][T15512] tipc: Can't bind to reserved service type 1 [ 265.160271][ T6887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.170964][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.184903][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.215374][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 265.637648][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 265.728212][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 265.865189][T15565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2665'. [ 266.175778][T15526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.414389][T15581] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2669'. [ 266.548221][T15583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2670'. [ 266.635877][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2671'. [ 266.875154][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 266.956735][T15595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.605169][T15594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.631691][T15594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.652973][T15594] bond0 (unregistering): Released all slaves [ 268.349517][T15528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.498021][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 268.767775][T15610] gre2: entered promiscuous mode [ 268.773365][T15610] gre2: entered allmulticast mode [ 268.791846][T15621] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 268.794153][T15622] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 268.841697][T15621] netlink: 'syz.2.2682': attribute type 39 has an invalid length. [ 268.931149][T15621] syz_tun (unregistering): left allmulticast mode [ 269.023727][T15634] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003 [ 269.227940][T15655] __nla_validate_parse: 2 callbacks suppressed [ 269.227958][T15655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2688'. [ 269.328978][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 269.557868][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 269.717366][ T60] net_ratelimit: 31 callbacks suppressed [ 269.717385][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 269.864414][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 269.974349][ T2958] bond6: (slave bridge3): failed to get link speed/duplex [ 270.094470][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 270.206012][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 270.314264][T15710] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2702'. [ 270.385105][T15710] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2702'. [ 270.484023][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 270.624164][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 270.734306][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 270.845851][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 270.853263][T15745] netlink: 'syz.2.2715': attribute type 2 has an invalid length. [ 270.867457][T15747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.916100][ T6882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.063794][T15762] sit0: Caught tx_queue_len zero misconfig [ 271.085229][T15766] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 271.131414][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2719'. [ 271.146100][T15772] syz_tun: Device is already in use. [ 271.428157][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 271.549061][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'. [ 271.654977][T15808] bond5: (slave syz_tun): Releasing backup interface [ 271.698164][T15808] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 271.968663][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 271.994843][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 272.199599][T15850] syzkaller0: entered promiscuous mode [ 272.221241][T15850] syzkaller0: entered allmulticast mode [ 272.534717][T15873] bond2: (slave lo): Releasing backup interface [ 272.544826][T15873] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 272.589987][T15873] team0: left allmulticast mode [ 272.636715][T15873] team_slave_0: left allmulticast mode [ 272.665057][T15873] team_slave_1: left allmulticast mode [ 272.676403][T15873] team0: left promiscuous mode [ 272.681202][T15873] team_slave_0: left promiscuous mode [ 272.710264][T15873] team_slave_1: left promiscuous mode [ 272.726435][T15873] bridge0: port 4(team0) entered disabled state [ 272.752419][T15873] bridge_slave_0: left allmulticast mode [ 272.824375][T15873] bridge_slave_0: left promiscuous mode [ 272.830397][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.858142][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 272.920654][T15873] bridge_slave_1: left allmulticast mode [ 272.934185][T15873] bridge_slave_1: left promiscuous mode [ 272.944259][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.999409][T15873] team0: Port device team_slave_0 removed [ 273.041551][T15873] team0: Port device team_slave_1 removed [ 273.060371][T15873] vlan2: left promiscuous mode [ 273.066442][T15873] gretap0: left promiscuous mode [ 273.071847][T15873] bridge0: port 3(vlan2) entered disabled state [ 273.095712][T15873] bond8: (slave vti0): Releasing backup interface [ 273.102443][T15873] vti0: left promiscuous mode [ 273.269448][T15900] netlink: 'syz.0.2747': attribute type 4 has an invalid length. [ 273.466081][T15910] lo: Caught tx_queue_len zero misconfig [ 273.666215][T15921] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.855518][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.985253][T15938] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 274.035854][T15938] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.064139][T15938] macvlan2: entered promiscuous mode [ 274.069784][T15938] macvlan2: entered allmulticast mode [ 274.543344][T15960] nbd: must specify a device to reconfigure [ 274.549948][T15961] netlink: 'syz.2.2767': attribute type 39 has an invalid length. [ 274.757994][T15964] netlink: 'syz.2.2769': attribute type 4 has an invalid length. [ 274.774283][ T6880] net_ratelimit: 28 callbacks suppressed [ 274.774301][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 274.776403][T15964] netlink: 'syz.2.2769': attribute type 4 has an invalid length. [ 274.803189][T15967] netlink: 'syz.2.2769': attribute type 4 has an invalid length. [ 274.885050][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 274.888096][T15971] __nla_validate_parse: 13 callbacks suppressed [ 274.888111][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 274.998671][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 275.011389][T15973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2772'. [ 275.114396][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 275.224054][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 275.334194][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 275.531286][T16013] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 275.544931][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 275.552434][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 275.605830][T16016] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 275.667233][T16008] can: request_module (can-proto-0) failed. [ 275.684766][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 275.894470][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 276.017051][T16029] netlink: 'syz.3.2787': attribute type 6 has an invalid length. [ 276.112951][T16041] netlink: 'syz.3.2787': attribute type 6 has an invalid length. [ 276.426143][T16032] pim6reg1: entered promiscuous mode [ 276.454171][T16032] pim6reg1: entered allmulticast mode [ 276.754324][ T6882] wlan1: Trigger new scan to find an IBSS to join [ 277.078560][T16078] netlink: 'syz.3.2800': attribute type 4 has an invalid length. [ 277.094417][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 277.538174][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 277.713087][T16118] netlink: 'syz.1.2811': attribute type 4 has an invalid length. [ 277.939726][T16123] syzkaller0: entered promiscuous mode [ 277.975424][T16123] syzkaller0: entered allmulticast mode [ 278.021079][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2815'. [ 278.268105][T16135] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.281121][T16135] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 278.292240][T16135] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 278.407370][T16140] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 278.443774][T16140] bond8: (slave vcan0): making interface the new active one [ 278.469650][T16140] bond8: (slave vcan0): Enslaving as an active interface with an up link [ 279.129111][T16175] validate_nla: 1 callbacks suppressed [ 279.129139][T16175] netlink: 'syz.0.2828': attribute type 8 has an invalid length. [ 279.196814][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2828'. [ 279.214454][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2829'. [ 279.224728][T16180] netlink: 'syz.4.2830': attribute type 3 has an invalid length. [ 279.376982][T16178] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 279.530594][T16194] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2834'. [ 279.715362][ T6887] wlan1: Trigger new scan to find an IBSS to join [ 279.727923][T16207] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 279.743644][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2837'. [ 279.844850][T16207] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.888198][T16218] xt_hashlimit: size too large, truncated to 1048576 [ 279.918901][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 279.936316][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 279.952502][T16214] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 279.992354][T16216] team0: Port device team_slave_0 removed [ 280.063595][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 280.073059][T16231] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2839'. [ 280.089638][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 280.193850][T16207] 8021q: adding VLAN 0 to HW filter on device bond12 [ 280.212423][T16207] bond11: (slave bond12): Enslaving as an active interface with a down link [ 280.224667][ T6884] net_ratelimit: 25 callbacks suppressed [ 280.224685][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 280.319482][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 280.346465][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 280.504230][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 280.663850][T16267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.674056][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 280.675194][T16273] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2856'. [ 280.766576][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 280.790163][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 280.924188][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 280.995646][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2862'. [ 281.022990][T16300] ip6tnl0: Caught tx_queue_len zero misconfig [ 281.056125][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 281.192572][T16313] tipc: Enabling of bearer rejected, failed to enable media [ 281.312117][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 281.336915][T16309] macvtap2: entered promiscuous mode [ 281.342294][T16309] vlan0: entered promiscuous mode [ 281.348114][T16309] macvtap2: entered allmulticast mode [ 281.353557][T16309] vlan0: entered allmulticast mode [ 281.358848][T16309] veth0_vlan: entered allmulticast mode [ 281.393337][T16320] lec:lec_atm_send: lec0: Unknown message type 13 [ 281.464444][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 281.522187][T16295] lec:lec_atm_close: lec0: Shut down! [ 281.574021][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 281.694165][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 281.898790][T16348] team0: Caught tx_queue_len zero misconfig [ 282.389829][T16384] team0: Device gtp1 is up. Set it down before adding it as a team port [ 282.658071][T16399] ip6tnl0: Caught tx_queue_len zero misconfig [ 282.673646][T16399] sch_fq: defrate 0 ignored. [ 282.760552][ T60] wlan1: Trigger new scan to find an IBSS to join [ 283.089295][T16434] x_tables: duplicate entry at hook 3 [ 283.514418][T16460] netlink: 'syz.2.2897': attribute type 11 has an invalid length. [ 283.686903][ T60] wlan1: Creating new IBSS network, BSSID 16:b4:b8:84:58:60 [ 283.760183][ T5483] lec:lec_start_xmit: lec0:No lecd attached [ 284.380149][T16499] syzkaller0: entered promiscuous mode [ 284.400458][T16499] syzkaller0: entered allmulticast mode [ 285.724515][ T2958] net_ratelimit: 19 callbacks suppressed [ 285.724532][ T2958] bond6: (slave bridge3): failed to get link speed/duplex [ 285.798605][ T5138] Bluetooth: hci0: command 0x080f tx timeout [ 285.804742][T16465] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 285.811077][T16465] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 285.844557][ T2958] bond6: (slave bridge3): failed to get link speed/duplex [ 285.886512][T16539] __nla_validate_parse: 13 callbacks suppressed [ 285.886530][T16539] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2916'. [ 285.941986][T16543] netlink: 'syz.1.2918': attribute type 12 has an invalid length. [ 285.962372][T16543] netlink: 'syz.1.2918': attribute type 29 has an invalid length. [ 285.991402][T16543] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2918'. [ 286.022033][T16543] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 286.043231][T16543] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2918'. [ 286.075197][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 286.184277][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 286.295877][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 286.401870][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 286.414553][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 286.524150][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 286.541659][T16465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.549402][T16465] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 286.564737][T16465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.571348][T16465] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 286.599724][T16465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.613974][T16465] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 286.634117][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 286.744565][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 286.841102][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.852312][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.860523][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.871492][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.885010][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.913206][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.941519][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.950159][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.958765][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.967687][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.986369][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 287.196083][T16603] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2923'. [ 287.362542][T16609] bond9: Removing last ns target with arp_interval on [ 287.390364][T16626] netlink: 'syz.2.2926': attribute type 10 has an invalid length. [ 287.461054][T16626] team0 (unregistering): left allmulticast mode [ 287.468722][T16626] team_slave_0: left allmulticast mode [ 287.475473][T16626] team_slave_1: left allmulticast mode [ 287.482249][T16626] batadv1: left allmulticast mode [ 287.489801][T16626] team0 (unregistering): left promiscuous mode [ 287.496341][T16626] team_slave_0: left promiscuous mode [ 287.502037][T16626] team_slave_1: left promiscuous mode [ 287.509198][T16626] batadv1: left promiscuous mode [ 287.514526][T16626] bridge0: port 3(team0) entered disabled state [ 287.540000][T16626] team0 (unregistering): Port device team_slave_0 removed [ 287.572087][T16626] team0 (unregistering): Port device team_slave_1 removed [ 287.610195][T16626] team0 (unregistering): Port device batadv1 removed [ 287.785458][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2931'. [ 288.488905][T16507] chnl_net:caif_netlink_parms(): no params data found [ 288.609351][T16695] x_tables: unsorted entry at hook 3 [ 288.774950][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.783267][ C1] lec:lec_tx_timeout: lec0 [ 288.789915][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.904945][T16507] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.912751][T16717] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 288.922385][T16507] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.940896][T16507] bridge_slave_0: entered allmulticast mode [ 288.958890][T16507] bridge_slave_0: entered promiscuous mode [ 288.997369][ T5827] Bluetooth: hci5: command tx timeout [ 289.018108][T16507] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.043671][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.089198][T16507] bridge_slave_1: entered allmulticast mode [ 289.101711][T16725] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2944'. [ 289.115836][T16507] bridge_slave_1: entered promiscuous mode [ 289.201427][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 289.211712][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 289.243538][T16727] bond13: entered promiscuous mode [ 289.249361][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'. [ 289.310156][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.326595][T16741] tipc: Trying to set illegal importance in message [ 289.367746][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.463486][T16507] team0: Port device team_slave_0 added [ 289.485453][T16507] team0: Port device team_slave_1 added [ 289.597874][T16755] syzkaller0: entered promiscuous mode [ 289.613620][T16755] syzkaller0: entered allmulticast mode [ 289.651280][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.658666][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.686289][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.752329][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.763791][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.793737][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.962020][T16507] hsr_slave_0: entered promiscuous mode [ 289.995973][T16507] hsr_slave_1: entered promiscuous mode [ 290.002277][T16507] debugfs: 'hsr0' already exists in 'hsr' [ 290.030255][T16787] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 290.042403][T16507] Cannot create hsr debugfs directory [ 290.089475][T16787] lo: MTU too low for tipc bearer [ 290.095112][T16787] tipc: Enabling of bearer rejected, failed to enable media [ 290.229979][T16779] syzkaller0: entered promiscuous mode [ 290.239379][T16779] syzkaller0: entered allmulticast mode [ 290.266764][T16782] ip6gre2: entered promiscuous mode [ 291.074116][ T5827] Bluetooth: hci5: command tx timeout [ 291.534135][ T6880] net_ratelimit: 154 callbacks suppressed [ 291.534153][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 291.560480][T16820] __nla_validate_parse: 2 callbacks suppressed [ 291.560498][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'. [ 291.627703][T16820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.635329][T16820] IPv6: NLM_F_CREATE should be set when creating new route [ 291.669229][T16820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.676496][T16820] IPv6: NLM_F_CREATE should be set when creating new route [ 291.702164][T16823] netlink: 'syz.0.2963': attribute type 13 has an invalid length. [ 291.996104][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 292.028240][T16843] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2968'. [ 292.037689][T16843] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 292.124526][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 292.141676][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2971'. [ 292.382465][T16867] netlink: 'syz.0.2975': attribute type 12 has an invalid length. [ 292.401765][T16867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2975'. [ 292.437604][T16873] netlink: 'syz.2.2973': attribute type 4 has an invalid length. [ 292.445468][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 292.614176][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 292.637572][T16880] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2979'. [ 292.720556][T16507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.753669][T16507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.797495][T16507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.823138][T16507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.871646][T16903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.884212][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 293.074817][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 293.159904][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.168826][ T5827] Bluetooth: hci5: command tx timeout [ 293.224604][ T6884] bond6: (slave bridge3): failed to get link speed/duplex [ 293.272656][T16507] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.350189][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 293.369277][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.376465][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.385886][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2987'. [ 293.399710][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.406930][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.408984][T16934] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2989'. [ 293.524726][ T6882] bond6: (slave bridge3): failed to get link speed/duplex [ 293.708840][T16954] lo: left promiscuous mode [ 293.752849][T16954] tunl0: left promiscuous mode [ 293.803993][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.812059][ C1] lec:lec_tx_timeout: lec0 [ 293.817577][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.271546][T16956] bond9 (unregistering): Released all slaves [ 294.499888][T16989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2997'. [ 294.738479][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.803036][T17011] netlink: 'syz.0.3000': attribute type 10 has an invalid length. [ 294.833877][T17011] veth0_macvtap: left promiscuous mode [ 294.880672][T16507] veth0_vlan: entered promiscuous mode [ 294.919575][T16507] veth1_vlan: entered promiscuous mode [ 295.026543][T16507] veth0_macvtap: entered promiscuous mode [ 295.037314][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3003'. [ 295.057923][T16507] veth1_macvtap: entered promiscuous mode [ 295.139090][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.199951][T16507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.234512][ T5827] Bluetooth: hci5: command tx timeout [ 295.243401][ T2958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.344629][ T2958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.374628][ T2958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.435441][ T2958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.467529][T17048] bond_slave_1: Caught tx_queue_len zero misconfig [ 295.675451][T17070] netlink: 'syz.1.3015': attribute type 2 has an invalid length. [ 295.973630][T17071] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.035700][T17085] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 296.121672][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.146496][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.225962][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.241377][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.584716][ T60] net_ratelimit: 14 callbacks suppressed [ 296.584735][ T60] bond6: (slave bridge3): failed to get link speed/duplex [ 296.746634][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 296.854820][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 296.898335][T17118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 296.917951][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.952975][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.975432][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.984379][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 297.033753][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.043458][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.293831][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 297.444766][ T2958] bond6: (slave bridge3): failed to get link speed/duplex [ 297.550141][T17138] __nla_validate_parse: 6 callbacks suppressed [ 297.550158][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 297.648646][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 297.695994][ T6887] bond6: (slave bridge3): failed to get link speed/duplex [ 297.705414][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 297.776220][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 297.814800][ T6880] bond6: (slave bridge3): failed to get link speed/duplex [ 297.843875][T17153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3031'. [ 297.935851][T17157] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3033'. [ 298.036436][ T60] bridge_slave_0: left allmulticast mode [ 298.044936][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.136658][T17172] netlink: 'syz.4.3035': attribute type 17 has an invalid length. [ 298.145323][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 298.158319][T17172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3035'. [ 298.236184][ T60] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 298.497855][ T60] bond6 (unregistering): (slave bridge3): Removing an active aggregator [ 298.507483][ T60] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 298.516688][ T60] bridge3 (unregistering): left promiscuous mode [ 298.523033][ T60] bridge3 (unregistering): left allmulticast mode [ 298.747098][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.757845][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.768595][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 298.779690][ T60] bond0 (unregistering): Released all slaves [ 298.789341][ T60] bond1 (unregistering): Released all slaves [ 298.803134][ T60] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 298.813024][ T60] bond2 (unregistering): Released all slaves [ 298.824044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.826793][ T60] bond3 (unregistering): Released all slaves [ 298.832098][ C1] lec:lec_tx_timeout: lec0 [ 298.843343][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.852867][ T60] bond4 (unregistering): Released all slaves [ 298.887590][ T60] bond5 (unregistering): Released all slaves [ 298.907065][ T60] bond6 (unregistering): Released all slaves [ 298.931989][ T60] bond7 (unregistering): Released all slaves [ 298.955480][T17172] gretap0: entered promiscuous mode [ 298.964055][T17172] gretap0: left promiscuous mode [ 299.064799][T17120] chnl_net:caif_netlink_parms(): no params data found [ 299.155463][ T5138] Bluetooth: hci3: command tx timeout [ 299.165127][ T60] tipc: Disabling bearer [ 299.176754][ T60] tipc: Left network mode [ 299.264467][T17183] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3037'. [ 299.817107][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.836327][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.850222][T17120] bridge_slave_0: entered allmulticast mode [ 299.859818][T17238] netlink: 'syz.0.3048': attribute type 4 has an invalid length. [ 299.888411][T17120] bridge_slave_0: entered promiscuous mode [ 299.934239][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.947678][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.961545][T17120] bridge_slave_1: entered allmulticast mode [ 299.969944][T17120] bridge_slave_1: entered promiscuous mode [ 300.121033][T17251] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 300.136934][T17241] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 300.209636][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.266839][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.376264][T17261] netlink: 'syz.3.3053': attribute type 10 has an invalid length. [ 300.430058][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.437809][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.467686][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.474902][T17261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.481749][T17273] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.482363][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.496972][T17261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.517889][T17261] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 300.532320][T17120] team0: Port device team_slave_0 added [ 300.558771][T17273] batadv_slave_1: entered promiscuous mode [ 300.581792][T17274] batadv_slave_1: left promiscuous mode [ 300.600363][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 300.632709][T17120] team0: Port device team_slave_1 added [ 300.864225][T17298] netlink: zone id is out of range [ 300.869376][T17298] netlink: zone id is out of range [ 300.925988][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.942359][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.982608][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.027133][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.037392][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.094625][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.132110][T17298] pim6reg: entered allmulticast mode [ 301.233693][ T60] hsr_slave_0: left promiscuous mode [ 301.239175][ T5138] Bluetooth: hci3: command tx timeout [ 301.313159][ T60] hsr_slave_1: left promiscuous mode [ 301.337973][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.365508][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.391937][T17321] netlink: 'syz.0.3066': attribute type 6 has an invalid length. [ 301.438337][T17317] netlink: 'syz.1.3064': attribute type 39 has an invalid length. [ 301.686260][T17317] bond7: (slave syz_tun): Releasing backup interface [ 301.707568][T17321] netlink: 'syz.0.3066': attribute type 6 has an invalid length. [ 301.726590][T17120] hsr_slave_0: entered promiscuous mode [ 301.732797][T17120] hsr_slave_1: entered promiscuous mode [ 301.739249][T17120] debugfs: 'hsr0' already exists in 'hsr' [ 301.745267][T17120] Cannot create hsr debugfs directory [ 302.037583][T17343] netlink: 'syz.0.3070': attribute type 9 has an invalid length. [ 302.059952][ T60] IPVS: stop unused estimator thread 0... [ 302.064557][T17343] netlink: 'syz.0.3070': attribute type 6 has an invalid length. [ 302.291784][T17356] block nbd0: Unsupported socket: should be TCP or UNIX. [ 302.360550][T17361] "syz.3.3075" (17361) uses obsolete ecb(arc4) skcipher [ 302.793699][T17389] xt_l2tp: v2 doesn't support IP mode [ 302.953021][T17120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.015048][T17120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.098955][T17120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.137744][T17403] syzkaller1: entered promiscuous mode [ 303.143257][T17403] syzkaller1: entered allmulticast mode [ 303.178235][T17120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.315311][ T5138] Bluetooth: hci3: command tx timeout [ 303.615134][T17448] blkio.reset_stats is deprecated [ 303.696815][T17452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.862227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.870295][ C1] lec:lec_tx_timeout: lec0 [ 303.874966][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.203701][T17460] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 304.242833][T17460] __nla_validate_parse: 10 callbacks suppressed [ 304.242852][T17460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3094'. [ 304.283521][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.342501][T17120] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.422514][T17471] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3098'. [ 304.541359][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.548559][ T6880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.592143][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.599344][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.619059][T17482] xt_TCPMSS: Only works on TCP SYN packets [ 305.394550][ T5138] Bluetooth: hci3: command tx timeout [ 305.430685][T17120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.481883][T17120] veth0_vlan: entered promiscuous mode [ 305.525855][T17120] veth1_vlan: entered promiscuous mode [ 305.556274][T17532] netlink: 'syz.0.3111': attribute type 1 has an invalid length. [ 305.651463][T17120] veth0_macvtap: entered promiscuous mode [ 305.679163][T17120] veth1_macvtap: entered promiscuous mode [ 305.702952][T17120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.716241][T17120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.770800][ T6882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.787686][T17538] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 305.791170][ T2958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.825787][ T2958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.834425][T17538] netlink: 'syz.0.3113': attribute type 1 has an invalid length. [ 305.862330][T17538] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3113'. [ 305.869743][ T2958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.887197][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3115'. [ 305.891652][T17538] NCSI netlink: No device for ifindex 813332851 [ 306.050293][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.075508][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.163157][ T6884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.178243][ T6884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.615824][T17580] netlink: 'syz.0.3129': attribute type 12 has an invalid length. [ 306.630893][T17582] netlink: 'syz.2.3128': attribute type 1 has an invalid length. [ 306.653579][T17580] netlink: 'syz.0.3129': attribute type 2 has an invalid length. [ 306.706586][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.717712][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.726625][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.736895][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.764689][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.159687][T17584] chnl_net:caif_netlink_parms(): no params data found [ 307.241124][T17606] Bluetooth: MGMT ver 1.23 [ 307.480683][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3137'. [ 307.515150][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3137'. [ 307.639690][T17626] net_ratelimit: 141 callbacks suppressed [ 307.639709][T17626] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.676868][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 307.687125][T17612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 307.816460][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 307.844321][T17612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 307.860633][ T2958] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.907036][ T2958] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.015411][ T2958] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.036319][ T2958] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.077077][T17584] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.104618][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.125376][T17584] bridge_slave_0: entered allmulticast mode [ 308.144536][T17584] bridge_slave_0: entered promiscuous mode [ 308.166775][T17584] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.191184][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.199277][T17584] bridge_slave_1: entered allmulticast mode [ 308.212414][T17584] bridge_slave_1: entered promiscuous mode [ 308.288198][T17656] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 308.338625][T17584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.386465][T17584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.462919][T17584] team0: Port device team_slave_0 added [ 308.484511][T17584] team0: Port device team_slave_1 added [ 308.564271][T17584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.582732][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.611506][T17584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.665186][T17584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.672213][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.715507][T17584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.805883][T17682] netlink: 'syz.2.3153': attribute type 11 has an invalid length. [ 308.806986][T17584] hsr_slave_0: entered promiscuous mode [ 308.821002][T17584] hsr_slave_1: entered promiscuous mode [ 308.827754][T17584] debugfs: 'hsr0' already exists in 'hsr' [ 308.833839][T17584] Cannot create hsr debugfs directory [ 308.839461][ T5138] Bluetooth: hci4: command tx timeout [ 308.883958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.892026][ C1] lec:lec_tx_timeout: lec0 [ 308.896947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.915307][T17687] netlink: 'syz.3.3152': attribute type 3 has an invalid length. [ 308.924654][T17686] tunl0: entered promiscuous mode [ 308.931259][T17686] netlink: 'syz.2.3154': attribute type 3 has an invalid length. [ 309.035704][T17689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.046475][T17689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.099162][T17584] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.137781][T17689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.148523][T17689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.189352][T17584] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.216217][T17689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.227173][T17689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.269579][T17584] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.348605][T17689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.360256][T17689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.387290][T17692] veth0: entered promiscuous mode [ 309.400484][T17584] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.434959][T17698] __nla_validate_parse: 3 callbacks suppressed [ 309.434976][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 309.502151][T17691] veth0: left promiscuous mode [ 309.541367][ T2958] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.559988][ T2958] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.592992][ T2958] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.601902][ T2958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.647042][ T2958] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.671332][ T2958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.692764][ T6880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.701284][ T6880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.770363][T17584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.788567][T17703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3158'. [ 309.819745][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 309.841705][T17584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.899344][T17584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.945882][T17584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.012323][T17723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3163'. [ 310.113171][T17725] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3164'. [ 310.209509][T17729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3165'. [ 310.258839][T17729] netlink: 212112 bytes leftover after parsing attributes in process `syz.3.3165'. [ 310.295513][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3165'. [ 310.314390][T17584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.389038][T17584] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.417812][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 310.445745][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.452909][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.502148][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.509316][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.561186][T17746] xt_hashlimit: overflow, rate too high: 0 [ 310.631604][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'. [ 310.663424][T17748] syzkaller1: entered promiscuous mode [ 310.672596][T17748] syzkaller1: entered allmulticast mode [ 310.924738][ T5138] Bluetooth: hci4: command tx timeout [ 311.000239][T17584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.158937][T17778] vxcan0: Caught tx_queue_len zero misconfig [ 311.281561][T17787] x_tables: duplicate underflow at hook 2 [ 311.463736][T17584] veth0_vlan: entered promiscuous mode [ 311.494364][T17584] veth1_vlan: entered promiscuous mode [ 311.557966][T17584] veth0_macvtap: entered promiscuous mode [ 311.584958][T17584] veth1_macvtap: entered promiscuous mode [ 311.616102][T17584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.636921][T17584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.673738][ T6887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.776924][ T6887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.818996][ T6887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.853227][ T6887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.948201][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.964962][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.017162][ T6880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.029533][ T6880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.354956][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.367652][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.375724][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.386793][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.395359][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.570600][T17842] macvtap1: entered promiscuous mode [ 312.579611][T17842] macvtap1: entered allmulticast mode [ 312.586032][T17842] veth1_vlan: entered allmulticast mode [ 312.639426][T17842] macvtap2: entered promiscuous mode [ 312.645755][T17842] macvtap2: entered allmulticast mode [ 312.682196][T17847] syzkaller0: entered promiscuous mode [ 312.689134][T17847] syzkaller0: entered allmulticast mode [ 312.812040][T17832] chnl_net:caif_netlink_parms(): no params data found [ 312.957834][T17832] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.965022][T17832] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.972140][T17832] bridge_slave_0: entered allmulticast mode [ 312.979478][T17832] bridge_slave_0: entered promiscuous mode [ 312.987804][T17832] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.995138][ T5138] Bluetooth: hci4: command tx timeout [ 313.001276][T17832] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.008886][T17832] bridge_slave_1: entered allmulticast mode [ 313.016245][T17832] bridge_slave_1: entered promiscuous mode [ 313.045523][T17832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.057429][T17832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.085375][T17832] team0: Port device team_slave_0 added [ 313.093501][T17832] team0: Port device team_slave_1 added [ 313.118124][T17832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.125383][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.151316][T17832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.166103][T17832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.173056][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.199409][T17832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.259870][T17832] hsr_slave_0: entered promiscuous mode [ 313.266334][T17832] hsr_slave_1: entered promiscuous mode [ 313.272379][T17832] debugfs: 'hsr0' already exists in 'hsr' [ 313.279341][T17832] Cannot create hsr debugfs directory [ 313.287960][T17863] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 313.340729][T17868] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 313.526196][T17882] netlink: 'syz.4.3208': attribute type 25 has an invalid length. [ 313.543274][T17882] netlink: 'syz.4.3208': attribute type 25 has an invalid length. [ 313.552905][T17882] netlink: 'syz.4.3208': attribute type 25 has an invalid length. [ 313.563123][T17882] netlink: 'syz.4.3208': attribute type 25 has an invalid length. [ 313.575419][T17882] netlink: 'syz.4.3208': attribute type 25 has an invalid length. [ 313.624587][T17832] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 313.649230][T17832] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 313.697793][T17832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.788252][T17832] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 313.849757][T17832] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 313.870933][T17832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.899830][T17904] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 313.915567][T17901] syzkaller1: entered promiscuous mode [ 313.925151][T17901] syzkaller1: entered allmulticast mode [ 314.042591][T17914] veth3: entered promiscuous mode [ 314.050563][T17832] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 314.060482][T17832] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 314.071127][T17832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.096463][T17914] vlan2: entered allmulticast mode [ 314.103384][T17914] veth0_to_bond: entered allmulticast mode [ 314.168226][T17832] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 314.201034][T17832] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 314.227504][T17832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.253546][T17925] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 314.362852][T17927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.370150][T17927] IPv6: NLM_F_CREATE should be set when creating new route [ 314.406503][T17927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.413779][T17927] IPv6: NLM_F_CREATE should be set when creating new route [ 314.429289][T17832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.438155][ T5138] Bluetooth: hci1: command tx timeout [ 314.450614][T17929] __nla_validate_parse: 12 callbacks suppressed [ 314.450625][T17929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3219'. [ 314.469202][T17832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.482282][T17929] netlink: 'syz.2.3219': attribute type 11 has an invalid length. [ 314.498937][T17832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.508085][T17929] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3219'. [ 314.521832][T17832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.621914][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3221'. [ 314.669648][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.673985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 314.684312][ C1] lec:lec_tx_timeout: lec0 [ 314.690040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.737275][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.767492][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.774671][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.831290][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.838471][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.882663][T17832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.924061][T17832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.991516][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 315.029060][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 315.082266][ T5138] Bluetooth: hci4: command tx timeout [ 315.095408][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 315.111149][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 315.334893][T17975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.456579][T17832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.568719][T17832] veth0_vlan: entered promiscuous mode [ 315.586218][T17832] veth1_vlan: entered promiscuous mode [ 315.620179][T17832] veth0_macvtap: entered promiscuous mode [ 315.639234][T17832] veth1_macvtap: entered promiscuous mode [ 315.691068][T17998] xt_hashlimit: size too large, truncated to 1048576 [ 315.696597][T17832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.747354][T17832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.781728][ T6878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.820555][ T6878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.870786][ T6878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.957643][ T6878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.158875][T18014] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 316.181961][T18014] veth0: entered promiscuous mode [ 316.197999][T18014] veth0: left promiscuous mode [ 316.202986][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.224118][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.286893][ T6887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.295494][ T6887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.311924][T18019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.388507][T18025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 316.449824][T18025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.508514][T18026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3240'. [ 316.510030][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 316.521135][ T5138] Bluetooth: hci1: command tx timeout [ 316.559534][T18032] bond1: option mode: invalid value (133) [ 316.591368][T18032] bond1 (unregistering): Released all slaves [ 317.120713][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.133655][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.142624][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.150645][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.157649][ T5824] Bluetooth: hci4: command 0x0401 tx timeout [ 317.168863][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.347468][T18080] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.355647][ T5948] IPVS: starting estimator thread 0... [ 317.444128][T18082] IPVS: using max 32 ests per chain, 76800 per kthread [ 317.496990][T18070] chnl_net:caif_netlink_parms(): no params data found [ 317.567210][T18070] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.574475][T18070] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.581771][T18070] bridge_slave_0: entered allmulticast mode [ 317.589432][T18070] bridge_slave_0: entered promiscuous mode [ 317.597281][T18070] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.604931][T18070] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.612738][T18070] bridge_slave_1: entered allmulticast mode [ 317.619925][T18070] bridge_slave_1: entered promiscuous mode [ 317.650951][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.663153][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.691798][T18070] team0: Port device team_slave_0 added [ 317.699497][T18070] team0: Port device team_slave_1 added [ 317.723153][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.731661][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.763796][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.776777][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.783720][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.810928][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.854297][T18070] hsr_slave_0: entered promiscuous mode [ 317.860641][T18070] hsr_slave_1: entered promiscuous mode [ 317.867466][T18070] debugfs: 'hsr0' already exists in 'hsr' [ 317.873177][T18070] Cannot create hsr debugfs directory [ 317.976565][T18070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.987079][T18070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.997840][T18070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.060836][T18070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.071185][T18070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.081827][T18070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.160993][T18070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.171666][T18070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.182373][T18070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.246402][T18070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.256946][T18070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.267575][T18070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.594275][ T5138] Bluetooth: hci1: command tx timeout [ 319.234448][ T5138] Bluetooth: hci0: command tx timeout [ 319.713981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 319.722040][ C1] lec:lec_tx_timeout: lec0 [ 319.726639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.895235][T18057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.925758][T18070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.019403][T18070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.082796][T18070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.126476][T18101] __nla_validate_parse: 3 callbacks suppressed [ 320.126493][T18101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3255'. [ 320.170683][T18070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.288236][T18114] Bluetooth: MGMT ver 1.23 [ 320.323879][T18122] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3260'. [ 320.409553][T18070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.469328][T18128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3262'. [ 320.493511][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 320.507169][T18070] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.533781][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.540925][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.544928][T18128] x_tables: unsorted underflow at hook 1 [ 320.625567][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.632737][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.678729][ T5138] Bluetooth: hci1: command tx timeout [ 320.908441][T18152] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3267'. [ 321.090936][T18169] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3271'. [ 321.159452][T18169] netlink: 'syz.2.3271': attribute type 83 has an invalid length. [ 321.202263][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 321.294492][T18180] netlink: 401 bytes leftover after parsing attributes in process `syz.0.3272'. [ 321.323823][ T5138] Bluetooth: hci0: command tx timeout [ 321.351017][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.420662][T18070] veth0_vlan: entered promiscuous mode [ 321.448121][T18186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3273'. [ 321.490334][T18186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3273'. [ 321.503039][T18191] smc: net device team0 applied user defined pnetid SYZ2 [ 321.510798][T18070] veth1_vlan: entered promiscuous mode [ 321.522716][T18191] smc: net device caif0 applied user defined pnetid SYZ2 [ 321.577412][T18070] veth0_macvtap: entered promiscuous mode [ 321.608013][T18070] veth1_macvtap: entered promiscuous mode [ 321.690601][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.742141][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.772369][ T6882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.793541][ T6882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.895508][ T6882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.924414][ T6882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.382233][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.417352][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.441799][T18238] GUP no longer grows the stack in syz.3.3286 (18238): 200000003000-20000000a000 (200000001000) [ 322.527033][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.541188][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.546893][T18238] CPU: 0 UID: 0 PID: 18238 Comm: syz.3.3286 Not tainted syzkaller #0 PREEMPT(full) [ 322.546922][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.546941][T18238] Call Trace: [ 322.546948][T18238] [ 322.546958][T18238] dump_stack_lvl+0xe8/0x150 [ 322.546987][T18238] __get_user_pages+0x2453/0x29d0 [ 322.547028][T18238] ? __gup_longterm_locked+0xc4e/0x1630 [ 322.547049][T18238] ? down_read_killable+0x1bb/0x340 [ 322.547075][T18238] ? try_get_folio+0xec/0x650 [ 322.547100][T18238] __gup_longterm_locked+0xdcf/0x1630 [ 322.547144][T18238] gup_fast_fallback+0x1d82/0x22e0 [ 322.547194][T18238] ? __pfx_gup_fast_fallback+0x10/0x10 [ 322.547216][T18238] ? is_valid_gup_args+0x11f/0x200 [ 322.547237][T18238] ? get_user_pages_fast+0x4d/0xb0 [ 322.547265][T18238] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 322.547293][T18238] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 322.547318][T18238] iov_iter_get_pages2+0x5e/0xa0 [ 322.547340][T18238] __se_sys_vmsplice+0x7b3/0x1490 [ 322.547377][T18238] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 322.547397][T18238] ? __pfx_futex_wait+0x10/0x10 [ 322.547428][T18238] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.547504][T18238] do_syscall_64+0x14d/0xf80 [ 322.547526][T18238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.547544][T18238] ? trace_irq_disable+0x37/0x100 [ 322.547564][T18238] ? clear_bhb_loop+0x40/0x90 [ 322.547586][T18238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.547604][T18238] RIP: 0033:0x7f8e9499c629 [ 322.547626][T18238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.547642][T18238] RSP: 002b:00007f8e9591b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 322.547668][T18238] RAX: ffffffffffffffda RBX: 00007f8e94c15fa0 RCX: 00007f8e9499c629 [ 322.547683][T18238] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 322.547695][T18238] RBP: 00007f8e94a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 322.547706][T18238] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 322.547717][T18238] R13: 00007f8e94c16038 R14: 00007f8e94c15fa0 R15: 00007ffe9642d688 [ 322.547748][T18238] [ 322.630395][T18238] netlink: 'syz.3.3286': attribute type 9 has an invalid length. [ 323.292989][T18279] geneve2: entered promiscuous mode [ 323.331633][T18279] geneve2: entered allmulticast mode [ 323.366677][T18284] veth0: entered promiscuous mode [ 323.405963][ T5138] Bluetooth: hci0: command tx timeout [ 324.557454][T18359] netlink: 'syz.2.3309': attribute type 61 has an invalid length. [ 324.733951][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.741979][ C1] lec:lec_tx_timeout: lec0 [ 324.754035][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.438699][T18389] __nla_validate_parse: 17 callbacks suppressed [ 325.438720][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3320'. [ 325.474283][ T5138] Bluetooth: hci0: command tx timeout [ 325.549406][T18405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3324'. [ 325.587729][T12620] IPVS: starting estimator thread 0... [ 325.663263][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 325.694138][T18406] IPVS: using max 32 ests per chain, 76800 per kthread [ 325.699104][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 325.716482][T18413] syzkaller1: entered promiscuous mode [ 325.743826][T18413] syzkaller1: entered allmulticast mode [ 325.762625][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.772933][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.819618][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.863518][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.882811][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 326.184517][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 326.193551][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 326.215755][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3334'. [ 326.241281][T18438] IPVS: set_ctl: invalid protocol: 5 224.0.0.2:20003 [ 326.325689][T18446] lo speed is unknown, defaulting to 1000 [ 326.331960][T18446] lo speed is unknown, defaulting to 1000 [ 326.358368][T18446] lo speed is unknown, defaulting to 1000 [ 326.377549][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'. [ 326.386576][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'. [ 326.442199][T18446] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 326.583375][T18444] syzkaller0: entered promiscuous mode [ 326.611830][T18444] syzkaller0: entered allmulticast mode [ 326.651563][T18446] lo speed is unknown, defaulting to 1000 [ 326.665548][T18446] lo speed is unknown, defaulting to 1000 [ 326.681054][T18446] lo speed is unknown, defaulting to 1000 [ 326.738587][T18446] lo speed is unknown, defaulting to 1000 [ 326.747505][T18446] lo speed is unknown, defaulting to 1000 [ 326.772197][T18446] lo speed is unknown, defaulting to 1000 [ 326.809224][T18446] lo speed is unknown, defaulting to 1000 [ 326.824668][T18446] lo speed is unknown, defaulting to 1000 [ 326.824916][T18465] syz_tun: entered allmulticast mode [ 326.841134][T18446] lo speed is unknown, defaulting to 1000 [ 326.930155][T18472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.961280][T18472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.028245][T18464] syz_tun: left allmulticast mode [ 327.548259][T18070] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 327.675952][T18070] CPU: 0 UID: 0 PID: 18070 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 327.675977][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.675987][T18070] Call Trace: [ 327.675993][T18070] [ 327.676001][T18070] dump_stack_lvl+0xe8/0x150 [ 327.676028][T18070] dump_header+0xd3/0x4c0 [ 327.676051][T18070] oom_kill_process+0x3ab/0x970 [ 327.676076][T18070] out_of_memory+0x106c/0x1410 [ 327.676094][T18070] ? percpu_ref_put+0x19/0x180 [ 327.676114][T18070] ? __pfx___mutex_lock+0x10/0x10 [ 327.676140][T18070] ? __pfx_out_of_memory+0x10/0x10 [ 327.676155][T18070] ? do_raw_spin_unlock+0xf5/0x210 [ 327.676186][T18070] try_charge_memcg+0xc53/0x1560 [ 327.676223][T18070] ? __pfx_try_charge_memcg+0x10/0x10 [ 327.676239][T18070] ? xa_load+0x60/0x210 [ 327.676260][T18070] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 327.676281][T18070] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 327.676304][T18070] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 327.676326][T18070] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 327.676350][T18070] __read_swap_cache_async+0x212/0x480 [ 327.676375][T18070] swap_cluster_readahead+0x358/0x680 [ 327.676398][T18070] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 327.676428][T18070] ? get_vma_policy+0x27b/0x3c0 [ 327.676453][T18070] swapin_readahead+0x196/0xc50 [ 327.676468][T18070] ? finish_task_switch+0x161/0x920 [ 327.676487][T18070] ? swap_table_get+0x1e/0x260 [ 327.676508][T18070] ? __pfx_swapin_readahead+0x10/0x10 [ 327.676527][T18070] ? swap_table_get+0x1e/0x260 [ 327.676542][T18070] ? swap_table_get+0x1e/0x260 [ 327.676556][T18070] ? swap_table_get+0x1e/0x260 [ 327.676573][T18070] ? swap_table_get+0x216/0x260 [ 327.676591][T18070] ? swap_cache_get_folio+0x513/0x520 [ 327.676613][T18070] do_swap_page+0x8ce/0x5e10 [ 327.676630][T18070] ? do_raw_spin_unlock+0xf5/0x210 [ 327.676671][T18070] ? __pte_offset_map+0x29/0x240 [ 327.676691][T18070] ? __pte_offset_map+0x29/0x240 [ 327.676709][T18070] ? do_swap_page+0x18b/0x5e10 [ 327.676723][T18070] ? __pfx_do_swap_page+0x10/0x10 [ 327.676741][T18070] ? __lock_acquire+0x6b5/0x2cf0 [ 327.676758][T18070] ? __pfx_default_wake_function+0x10/0x10 [ 327.676778][T18070] ? __pte_offset_map+0x1ae/0x240 [ 327.676797][T18070] ? pte_offset_map_rw_nolock+0xea/0x160 [ 327.676816][T18070] handle_mm_fault+0x12d2/0x32a0 [ 327.676847][T18070] ? handle_mm_fault+0xee/0x32a0 [ 327.676872][T18070] ? __pfx_handle_mm_fault+0x10/0x10 [ 327.676888][T18070] ? lock_vma_under_rcu+0x45a/0x500 [ 327.676930][T18070] do_user_addr_fault+0xa73/0x1360 [ 327.676960][T18070] ? rcu_is_watching+0x15/0xb0 [ 327.676978][T18070] ? trace_page_fault_user+0x84/0x1c0 [ 327.676997][T18070] exc_page_fault+0x6a/0xc0 [ 327.677017][T18070] asm_exc_page_fault+0x26/0x30 [ 327.677033][T18070] RIP: 0033:0x7f69bbf5cece [ 327.677049][T18070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.677063][T18070] RSP: 002b:00007fff2c14cc48 EFLAGS: 00010246 [ 327.677078][T18070] RAX: 0000000000000000 RBX: 000055558984e500 RCX: 00007f69bbf5cece [ 327.677089][T18070] RDX: 00007fff2c14cca0 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.677100][T18070] RBP: 00007fff2c14cd0c R08: 0000000000000000 R09: 0000000000000000 [ 327.677110][T18070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 327.677120][T18070] R13: 00000000000927c0 R14: 000000000004fd8e R15: 00007fff2c14cd60 [ 327.677149][T18070] [ 327.677180][T18070] memory: usage 307200kB, limit 307200kB, failcnt 475 [ 328.144124][T18070] memory+swap: usage 278280kB, limit 9007199254740988kB, failcnt 0 [ 328.152056][T18070] kmem: usage 277192kB, limit 9007199254740988kB, failcnt 0 [ 328.164412][T18070] Memory cgroup stats for /syz1: [ 328.164934][T18070] cache 0 [ 328.183577][T18070] rss 0 [ 328.197099][T18070] rss_huge 0 [ 328.213361][T18070] shmem 0 [ 328.230992][T18070] mapped_file 0 [ 328.253274][T18070] dirty 0 [ 328.264612][T18070] writeback 0 [ 328.279272][T18070] workingset_refault_anon 2 [ 328.310198][T18070] workingset_refault_file 0 [ 328.320845][T18070] swap 204800 [ 328.344933][T18070] swapcached 8192 [ 328.352110][T18070] pgpgin 46684 [ 328.362355][T18070] pgpgout 46682 [ 328.389055][T18070] pgfault 107123 [ 328.402006][T18070] pgmajfault 3 [ 328.410400][T18070] inactive_anon 0 [ 328.435461][T18070] active_anon 8192 [ 328.442597][T18070] inactive_file 0 [ 328.452109][T18070] active_file 0 [ 328.482097][T18070] unevictable 0 [ 328.504686][T18070] hierarchical_memory_limit 314572800 [ 328.510098][T18070] hierarchical_memsw_limit 9223372036854771712 [ 328.554028][T18070] total_cache 0 [ 328.557522][T18070] total_rss 0 [ 328.560811][T18070] total_rss_huge 0 [ 328.592468][T18070] total_shmem 0 [ 328.609391][T18070] total_mapped_file 0 [ 328.613410][T18070] total_dirty 0 [ 328.624505][T18070] total_writeback 0 [ 328.628335][T18070] total_workingset_refault_anon 2 [ 328.633350][T18070] total_workingset_refault_file 0 [ 328.652331][T18070] total_swap 204800 [ 328.656507][T18070] total_swapcached 8192 [ 328.660676][T18070] total_pgpgin 46684 [ 328.675291][T18070] total_pgpgout 46682 [ 328.685276][T18070] total_pgfault 107123 [ 328.689365][T18070] total_pgmajfault 3 [ 328.693253][T18070] total_inactive_anon 0 [ 328.715700][T18070] total_active_anon 8192 [ 328.719968][T18070] total_inactive_file 0 [ 328.732032][T18070] total_active_file 0 [ 328.741802][T18070] total_unevictable 0 [ 328.751706][T18070] anon_cost 0 [ 328.761639][T18070] file_cost 0 [ 328.765408][T18070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3337,pid=18442,uid=0 [ 328.802149][T18070] Memory cgroup out of memory: Killed process 18442 (syz.1.3337) total-vm:102416kB, anon-rss:1224kB, file-rss:23180kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 329.766445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.774464][ C1] lec:lec_tx_timeout: lec0 [ 329.779071][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.979964][T18485] dvmrp0: entered allmulticast mode [ 329.997347][T18496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 330.317039][T18519] openvswitch: netlink: Flow key attr not present in new flow. [ 331.047973][T18569] __nla_validate_parse: 4 callbacks suppressed [ 331.047991][T18569] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3373'. [ 331.080218][T18569] 8021q: VLANs not supported on ip6gre0 [ 331.109254][T18568] netlink: 4744 bytes leftover after parsing attributes in process `syz.1.3375'. [ 331.119752][T18572] netlink: 4744 bytes leftover after parsing attributes in process `syz.1.3375'. [ 331.169592][T18580] netlink: 'syz.4.3374': attribute type 2 has an invalid length. [ 331.193232][T18580] 9: entered promiscuous mode [ 331.501113][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 331.565791][T18602] syzkaller1: entered promiscuous mode [ 331.571438][T18602] syzkaller1: entered allmulticast mode [ 331.588566][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 331.599427][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 331.683175][T18612] netlink: 'syz.1.3386': attribute type 10 has an invalid length. [ 331.707716][T18612] team0: Device veth0_macvtap failed to register rx_handler [ 331.906508][T18622] netlink: 'syz.1.3390': attribute type 1 has an invalid length. [ 331.937379][T18624] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3391'. [ 332.103850][T18638] netlink: 'syz.1.3393': attribute type 11 has an invalid length. [ 332.163538][T18640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.190100][T18643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.396111][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 332.416798][T18656] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 332.509137][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'. [ 332.524024][T18663] netlink: 'syz.1.3403': attribute type 30 has an invalid length. [ 332.552705][ T2958] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.596754][T18665] netlink: 'syz.2.3404': attribute type 3 has an invalid length. [ 332.604122][ T2958] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.613201][ T2958] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.664970][ T2958] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.920185][T18688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3415'. [ 333.042445][T18702] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 333.220633][T18692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 333.278105][T18692] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.427900][T18715] syzkaller0: entered promiscuous mode [ 333.433400][T18715] syzkaller0: entered allmulticast mode [ 333.778296][ T30] audit: type=1800 audit(1771501408.444:10): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3428" name="memory.events" dev="tmpfs" ino=269 res=0 errno=0 [ 333.827614][ T30] audit: type=1804 audit(1771501408.474:11): pid=18741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3428" name="/newroot/49/memory.events" dev="tmpfs" ino=269 res=1 errno=0 [ 333.880188][ T5948] lo speed is unknown, defaulting to 1000 [ 334.255387][T18764] bond1: entered promiscuous mode [ 334.265356][T18764] bond1: entered allmulticast mode [ 334.283123][T18764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.330790][T18769] macvlan2: entered promiscuous mode [ 334.352122][T18769] macvlan2: entered allmulticast mode [ 334.405709][T18769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.793992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.802054][ C1] lec:lec_tx_timeout: lec0 [ 334.807431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.043864][T18818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.042126][T18756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.203599][T18837] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 337.264502][T18842] Cannot find set identified by id 65534 to match [ 337.319303][T18837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.418445][T18861] netlink: 'syz.4.3449': attribute type 39 has an invalid length. [ 337.451295][T18837] bond1: entered promiscuous mode [ 337.468497][T18837] bond1: entered allmulticast mode [ 337.522769][T18858] bond1: (slave veth0_to_bond): making interface the new active one [ 337.534901][T18858] veth0_to_bond: entered promiscuous mode [ 337.551116][T18858] veth0_to_bond: entered allmulticast mode [ 337.576090][T18858] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 337.885355][T18856] syzkaller0: entered promiscuous mode [ 337.891460][T18856] syzkaller0: entered allmulticast mode [ 338.094730][T18886] __nla_validate_parse: 7 callbacks suppressed [ 338.094749][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 338.300914][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3456'. [ 338.375122][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.397091][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.409022][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 338.433034][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.455818][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.465567][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.500228][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.518814][T18900] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 338.954460][T18936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.987198][T18941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.024853][T18928] netlink: 'syz.2.3463': attribute type 13 has an invalid length. [ 339.033292][T18926] veth1: entered allmulticast mode [ 339.075692][T18945] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3467'. [ 339.098519][T18936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.149714][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 339.208596][T18945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3467'. [ 339.221495][T18945] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.260394][T18952] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3470'. [ 339.535675][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3475'. [ 339.773327][T18980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3478'. [ 339.795787][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.803847][ T5138] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 339.814210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.822243][ C1] lec:lec_tx_timeout: lec0 [ 339.826950][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.101878][T19002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.365692][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'. [ 340.453204][T19026] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 340.649019][T19031] veth0: entered promiscuous mode [ 341.703829][T19095] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 341.720429][T19095] bond1 (unregistering): Released all slaves [ 342.245649][T19132] validate_nla: 70 callbacks suppressed [ 342.245667][T19132] netlink: 'syz.0.3511': attribute type 5 has an invalid length. [ 342.419939][T19137] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 342.433868][T19147] netlink: 'syz.4.3514': attribute type 13 has an invalid length. [ 342.570917][T19153] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 343.122159][T19190] netlink: 'syz.3.3524': attribute type 3 has an invalid length. [ 343.155636][T19194] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 343.163528][T19194] __nla_validate_parse: 11 callbacks suppressed [ 343.163541][T19194] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3527'. [ 343.170598][T19185] lo speed is unknown, defaulting to 1000 [ 343.188923][T19190] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 343.334614][T19201] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3528'. [ 343.398156][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 343.600579][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3531'. [ 344.834451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.842527][ C1] lec:lec_tx_timeout: lec0 [ 344.847263][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.979811][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3534'. [ 345.033295][T19203] lo speed is unknown, defaulting to 1000 [ 345.192720][T19240] openvswitch: netlink: Flow key attr not present in new flow. [ 345.375030][T19249] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 345.520700][T19259] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.587353][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 345.659158][T19264] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3542'. [ 346.500105][T19298] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3554'. [ 347.046906][T19324] dvmrp8: entered allmulticast mode [ 347.068257][T19324] dvmrp0: left allmulticast mode [ 347.082603][T19324] dvmrp8: left allmulticast mode [ 349.854200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.862241][ C1] lec:lec_tx_timeout: lec0 [ 349.866853][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.873970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 354.881988][ C1] lec:lec_tx_timeout: lec0 [ 354.886737][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 359.893953][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 359.901989][ C1] lec:lec_tx_timeout: lec0 [ 359.906833][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.274019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6370 ms [ 366.282057][ C1] lec:lec_tx_timeout: lec0 [ 366.286986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.033917][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 372.041978][ C1] lec:lec_tx_timeout: lec0 [ 372.047824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.293396][T19450] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3570'. [ 372.339164][T19453] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3571'. [ 372.352132][T19450] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 372.371798][T19454] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 372.505730][T19468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3574'. [ 372.550009][T19470] set match dimension is over the limit! [ 372.762706][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.817099][T19494] netlink: 'syz.2.3579': attribute type 1 has an invalid length. [ 372.825740][T19490] netlink: 'syz.4.3580': attribute type 4 has an invalid length. [ 372.896603][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 372.940026][T11862] lo speed is unknown, defaulting to 1000 [ 372.974118][T11862] syz0: Port: 1 Link DOWN [ 373.007087][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 373.018996][T19494] xt_CT: No such helper "syz1" [ 373.064571][T19510] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 373.074675][T19510] syzkaller1: Refused to change device type [ 373.275920][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 373.336487][ T6873] bridge_slave_1: left allmulticast mode [ 373.342341][ T6873] bridge_slave_1: left promiscuous mode [ 373.348831][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.359660][ T6873] bridge_slave_0: left allmulticast mode [ 373.366289][ T6873] bridge_slave_0: left promiscuous mode [ 373.371941][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.477641][ T6873] ip6gretap0 (unregistering): left promiscuous mode [ 373.878739][ T6873] dvmrp0 (unregistering): left allmulticast mode [ 373.893033][ T6873] bond1 (unregistering): (slave geneve2): Releasing active interface [ 374.420050][ T6873] bond0 (unregistering): left promiscuous mode [ 374.426417][ T6873] bond_slave_0: left promiscuous mode [ 374.432020][ T6873] bond_slave_1: left promiscuous mode [ 374.443373][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.456979][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.466727][ T6873] bond0 (unregistering): Released all slaves [ 374.476735][ T6873] bond1 (unregistering): Released all slaves [ 374.489213][ T6873] bond2 (unregistering): Released all slaves [ 374.504556][ T6873] bond3 (unregistering): Released all slaves [ 374.517699][ T6873] bond4 (unregistering): Released all slaves [ 374.531587][ T6873] bond5 (unregistering): Released all slaves [ 374.550374][ T6873] bond6 (unregistering): Released all slaves [ 374.564071][ T6873] bond7 (unregistering): Released all slaves [ 374.577104][ T6873] bond8 (unregistering): (slave vcan0): Releasing backup interface [ 374.586042][ T6873] bond8 (unregistering): Released all slaves [ 374.708039][ T6873] tipc: Left network mode [ 374.925261][ T6873] hsr_slave_0: left promiscuous mode [ 374.931102][ T6873] hsr_slave_1: left promiscuous mode [ 374.937347][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.945609][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.962703][ T6873] veth1_vlan: left allmulticast mode [ 374.969112][ T6873] veth0_to_batadv: left promiscuous mode [ 374.975222][ T6873] veth1_vlan: left promiscuous mode [ 374.980494][ T6873] veth0_vlan: left promiscuous mode [ 375.035670][ T6873] pim6reg (unregistering): left allmulticast mode [ 375.098285][ T6873] team0 (unregistering): Port device batadv1 removed [ 375.211021][ T6873] team0 (unregistering): Port device team_slave_1 removed [ 375.230329][ T6873] team0 (unregistering): Port device team_slave_0 removed [ 375.789935][T19499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.935723][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 375.996336][T19541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3593'. [ 376.121131][ T5138] Bluetooth: hci0: link tx timeout [ 376.130279][ T5138] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.141248][ T5138] Bluetooth: hci0: link tx timeout [ 376.146544][ T5138] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 376.518851][T19580] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 376.774804][T19600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3611'. [ 376.789097][T19600] tipc: Invalid UDP bearer configuration [ 376.789202][T19600] tipc: Enabling of bearer rejected, failed to enable media [ 376.879373][T19604] IPVS: set_ctl: invalid protocol: 60 172.20.20.35:20004 [ 377.064454][ T6873] IPVS: stop unused estimator thread 0... [ 377.192962][T19623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 377.199859][T19623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 377.265208][T19631] syzkaller0: create flow: hash 3058306047 index 1 [ 377.290300][T19633] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 377.299283][T19633] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3620'. [ 377.306702][T19635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3621'. [ 377.309818][T19633] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3620'. [ 377.327073][T19633] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3620'. [ 377.342714][ T2958] syzkaller0: tun_net_xmit 76 [ 377.348343][ T2958] syzkaller0: tun_net_xmit 48 [ 377.358598][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 377.367832][ T5964] syzkaller0: tun_net_xmit 76 [ 377.431359][T19633] bond2: option resend_igmp: invalid value (32767) [ 377.440321][T19633] bond2: option resend_igmp: allowed values 0 - 255 [ 377.440429][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 377.459068][T19633] bond2 (unregistering): Released all slaves [ 377.520792][T19638] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3622'. [ 377.553630][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'. [ 377.678355][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 377.701958][T19656] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3627'. [ 377.712389][T19656] gretap0: entered promiscuous mode [ 377.732557][T19659] syzkaller0: entered promiscuous mode [ 377.740123][T19659] syzkaller0: entered allmulticast mode [ 377.793914][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 377.801931][ C1] lec:lec_tx_timeout: lec0 [ 377.808320][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.001500][T19618] syzkaller0: delete flow: hash 3058306047 index 1 [ 378.197336][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 379.419986][T19688] netlink: 'syz.0.3636': attribute type 17 has an invalid length. [ 379.467956][T19688] erspan0: entered promiscuous mode [ 379.502674][T19688] gretap0: entered promiscuous mode [ 380.130684][T19740] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 380.276228][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.337312][T19751] sctp: [Deprecated]: syz.0.3650 (pid 19751) Use of int in max_burst socket option deprecated. [ 380.337312][T19751] Use struct sctp_assoc_value instead [ 380.339716][T19753] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.613381][T19764] xt_l2tp: invalid flags combination: 8 [ 380.613452][T19773] syzkaller0: entered promiscuous mode [ 380.643975][T19773] syzkaller0: entered allmulticast mode [ 381.129133][T19800] lo speed is unknown, defaulting to 1000 [ 381.683716][T19831] netlink: 'syz.4.3669': attribute type 1 has an invalid length. [ 381.715250][T19835] netlink: 'syz.1.3666': attribute type 8 has an invalid length. [ 381.902413][T19842] bond2 (unregistering): Released all slaves [ 382.001639][T19831] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 382.209245][T19862] netlink: 'syz.2.3672': attribute type 10 has an invalid length. [ 382.367046][T19869] __nla_validate_parse: 15 callbacks suppressed [ 382.367065][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3673'. [ 382.461360][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3673'. [ 382.668011][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 382.730951][T19889] netlink: 'syz.4.3678': attribute type 11 has an invalid length. [ 382.790710][T19889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3678'. [ 382.824230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.832285][ C1] lec:lec_tx_timeout: lec0 [ 382.837245][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.864262][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 382.874207][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 382.883073][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 382.906559][T19890] netlink: 'syz.4.3678': attribute type 11 has an invalid length. [ 382.935014][T19890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3678'. [ 383.075131][T19916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3683'. [ 383.332689][T19933] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3686'. [ 383.603134][T19946] netlink: 'syz.1.3690': attribute type 1 has an invalid length. [ 383.799877][T19960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.839946][T19960] bond1: (slave bond2): making interface the new active one [ 383.850116][T19960] bond1: (slave bond2): Enslaving as an active interface with an up link [ 383.855969][T19974] netlink: 'syz.1.3690': attribute type 3 has an invalid length. [ 383.906835][T19946] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 384.191433][T19972] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.227800][T19972] syzkaller0: entered promiscuous mode [ 384.233295][T19972] syzkaller0: entered allmulticast mode [ 384.249846][T19946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.371070][T19999] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 384.411203][T19999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.554616][T20005] netlink: 'syz.3.3702': attribute type 21 has an invalid length. [ 384.844704][T20023] gretap2: entered promiscuous mode [ 384.881168][T20023] gretap2: entered allmulticast mode [ 384.935457][T20024] xt_hashlimit: size too large, truncated to 1048576 [ 385.059121][T20023] netlink: 'syz.4.3706': attribute type 13 has an invalid length. [ 385.420462][T20058] netlink: 'syz.3.3714': attribute type 1 has an invalid length. [ 385.456048][T20055] netem: invalid attributes len -24 [ 385.484297][T20055] netem: change failed [ 385.952653][T20096] netlink: 'syz.4.3722': attribute type 7 has an invalid length. [ 385.991545][T20096] erspan0: entered promiscuous mode [ 386.035069][T20096] erspan0: left promiscuous mode [ 386.489263][T20121] netlink: 'syz.2.3729': attribute type 12 has an invalid length. [ 386.508911][T20121] netlink: 'syz.2.3729': attribute type 12 has an invalid length. [ 386.555129][T20121] netlink: 'syz.2.3729': attribute type 12 has an invalid length. [ 386.621413][T20121] netlink: 'syz.2.3729': attribute type 12 has an invalid length. [ 387.131436][T20163] netlink: 'syz.0.3739': attribute type 4 has an invalid length. [ 387.440597][T20182] __nla_validate_parse: 28 callbacks suppressed [ 387.440614][T20182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3744'. [ 387.538487][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035980000: rx timeout, send abort [ 387.548678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035980000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 387.561959][T20193] xt_NFQUEUE: number of total queues is 0 [ 387.735089][T20202] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 387.843985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 387.852058][ C1] lec:lec_tx_timeout: lec0 [ 387.856633][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 387.872664][T20210] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3752'. [ 387.920316][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'. [ 388.155877][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 388.201939][T20233] gre0: entered promiscuous mode [ 388.218575][T20233] gre0: entered allmulticast mode [ 388.431399][T20250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3760'. [ 388.482030][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3760'. [ 388.527934][T20253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3760'. [ 388.554864][ T5923] IPVS: starting estimator thread 0... [ 388.587141][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3760'. [ 388.654226][T20281] IPVS: using max 32 ests per chain, 76800 per kthread [ 389.250432][T20311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3769'. [ 389.399303][T20311] syzkaller1: entered promiscuous mode [ 389.406722][T20311] syzkaller1: entered allmulticast mode [ 389.426692][T20320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3772'. [ 389.444964][T20320] openvswitch: netlink: Flow key attr not present in new flow. [ 389.908651][T20355] netlink: 'syz.4.3779': attribute type 4 has an invalid length. [ 390.075088][T20362] syzkaller0: entered promiscuous mode [ 390.080597][T20362] syzkaller0: entered allmulticast mode [ 390.195333][T20372] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 390.257995][T20375] batman_adv: batadv0: Adding interface: dummy0 [ 390.266238][T20375] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.295692][T20375] batman_adv: batadv0: Interface activated: dummy0 [ 390.428443][T20375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.473385][T20381] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 390.636159][T20375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.669961][T20398] Unsupported ieee802154 address type: 0 [ 390.755796][T20375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.908987][T20375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.162333][T20257] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.192897][T20272] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.220924][T20257] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.245316][T20257] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.720068][T20452] netlink: 'syz.3.3811': attribute type 15 has an invalid length. [ 391.858376][T20468] netlink: 'syz.4.3814': attribute type 1 has an invalid length. [ 392.123053][T20485] nbd: must specify at least one socket [ 392.195196][T20488] bridge_slave_0: invalid flags given to default FDB implementation [ 392.381120][T20495] bond3 (unregistering): Released all slaves [ 392.450887][T20505] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 392.460953][T20505] __nla_validate_parse: 21 callbacks suppressed [ 392.460973][T20505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3824'. [ 392.864002][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 392.872079][ C1] lec:lec_tx_timeout: lec0 [ 392.877057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.137052][T20534] pim6reg: entered allmulticast mode [ 393.159068][T20534] pim6reg: left allmulticast mode [ 393.392211][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.478490][T20553] batadv1: entered allmulticast mode [ 393.501895][T20559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3844'. [ 394.094828][T20597] netlink: 'syz.3.3853': attribute type 1 has an invalid length. [ 394.129451][T20597] sctp: [Deprecated]: syz.3.3853 (pid 20597) Use of int in max_burst socket option. [ 394.129451][T20597] Use struct sctp_assoc_value instead [ 394.155477][T20599] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3854'. [ 394.245155][T20605] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 394.372144][T20617] netlink: 'syz.3.3858': attribute type 10 has an invalid length. [ 394.404927][T20617] team0 (unregistering): Port device team_slave_0 removed [ 394.417901][T20617] team0 (unregistering): Port device team_slave_1 removed [ 394.433804][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 394.557377][T20627] syzkaller0: entered promiscuous mode [ 394.563521][T20627] syzkaller0: entered allmulticast mode [ 394.640663][T20629] can: request_module (can-proto-0) failed. [ 394.771719][T20636] xt_HMARK: spi-set and port-set can't be combined [ 395.080394][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 395.317142][T20666] lo: Caught tx_queue_len zero misconfig [ 395.473789][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'. [ 395.484571][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.516986][T20675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3877'. [ 395.526898][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.553739][T20675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3877'. [ 395.573679][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.596382][T20679] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3879'. [ 395.606476][T20675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3877'. [ 395.623090][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.633130][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.679183][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.688008][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.705189][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.738001][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 395.765318][T20675] netlink: 'syz.3.3877': attribute type 21 has an invalid length. [ 396.010928][T20707] tipc: Started in network mode [ 396.020135][T20707] tipc: Node identity 12d90b3cc6f7, cluster identity 4711 [ 396.068853][T20707] tipc: Enabled bearer , priority 0 [ 396.125030][T20711] syzkaller0: entered promiscuous mode [ 396.130599][T20711] syzkaller0: entered allmulticast mode [ 396.136884][T20711] tipc: Resetting bearer [ 396.182417][T20717] xt_hashlimit: max too large, truncated to 1048576 [ 396.195978][T20716] xt_hashlimit: max too large, truncated to 1048576 [ 396.206718][T20706] tipc: Resetting bearer [ 397.762644][T20706] tipc: Disabling bearer [ 397.771763][T20728] __nla_validate_parse: 31 callbacks suppressed [ 397.771779][T20728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3890'. [ 397.805854][T11862] tipc: Node number set to 3559787324 [ 397.884192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 397.892272][ C1] lec:lec_tx_timeout: lec0 [ 397.897782][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.948794][T20753] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3897'. [ 398.294869][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 398.328893][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 398.338258][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 398.588878][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3910'. [ 398.742988][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3914'. [ 398.774517][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 399.023018][T20834] x_tables: unsorted entry at hook 2 [ 399.096241][T20842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.305114][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 399.335733][T20857] bond0: Caught tx_queue_len zero misconfig [ 399.352706][T20857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 399.386890][T20854] bond0: entered promiscuous mode [ 399.391964][T20854] bond_slave_0: entered promiscuous mode [ 399.403684][T20854] bond_slave_1: entered promiscuous mode [ 399.431740][T20854] batadv0: entered promiscuous mode [ 399.446781][T20863] IPVS: set_ctl: invalid protocol: 160 127.0.0.1:20001 [ 399.465328][T20854] hsr1: entered promiscuous mode [ 399.470306][T20854] hsr1: entered allmulticast mode [ 399.486190][T20854] bond0: entered allmulticast mode [ 399.501810][T20854] bond_slave_0: entered allmulticast mode [ 399.521024][T20854] bond_slave_1: entered allmulticast mode [ 399.529817][T20854] batadv0: entered allmulticast mode [ 399.537491][T20854] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 399.550783][T20854] bond0: left promiscuous mode [ 399.557051][T20854] bond_slave_0: left promiscuous mode [ 399.563260][T20872] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 399.574608][T20854] bond_slave_1: left promiscuous mode [ 399.581481][T20854] batadv0: left promiscuous mode [ 399.660745][T20873] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 399.709931][T20875] syzkaller0: entered promiscuous mode [ 399.734165][T20875] syzkaller0: entered allmulticast mode [ 400.189874][T20901] bond1: (slave bridge2): making interface the new active one [ 400.212057][T20901] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 400.515189][T20920] validate_nla: 25 callbacks suppressed [ 400.515208][T20920] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 400.635746][T20920] gretap1: entered promiscuous mode [ 400.649856][T20920] bond2: (slave gretap1): making interface the new active one [ 400.660896][T20920] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 400.685010][T20923] syzkaller0: entered promiscuous mode [ 400.690507][T20923] syzkaller0: entered allmulticast mode [ 400.733328][T20920] macvlan2: entered promiscuous mode [ 400.780552][T20920] macvlan2: entered allmulticast mode [ 400.806248][T20920] bond2: entered promiscuous mode [ 400.832074][T20920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.860193][T20920] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 400.877676][T20920] bond2: left promiscuous mode [ 401.078673][T20948] syzkaller1: entered promiscuous mode [ 401.098309][T20948] syzkaller1: entered allmulticast mode [ 401.144486][T20948] netlink: 'syz.4.3953': attribute type 10 has an invalid length. [ 401.204996][T20948] bridge0: port 3(team0) entered blocking state [ 401.213753][T20948] bridge0: port 3(team0) entered disabled state [ 401.244384][T20948] team0: entered allmulticast mode [ 401.250608][T20948] team_slave_0: entered allmulticast mode [ 401.279920][T20948] team_slave_1: entered allmulticast mode [ 401.293192][T20948] team0: entered promiscuous mode [ 401.317132][T20968] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 401.328920][T20948] team_slave_0: entered promiscuous mode [ 401.345541][T20948] team_slave_1: entered promiscuous mode [ 401.377285][T20948] bridge0: port 3(team0) entered blocking state [ 401.383715][T20948] bridge0: port 3(team0) entered forwarding state [ 401.422440][T20972] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 401.808925][T20984] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 402.005636][T20999] netlink: 'syz.3.3968': attribute type 1 has an invalid length. [ 402.401164][T20984] bond1 (unregistering): Released all slaves [ 402.505634][T21009] netlink: 'syz.1.3969': attribute type 4 has an invalid length. [ 402.628986][T21015] netlink: 'syz.1.3972': attribute type 11 has an invalid length. [ 402.995927][T21044] __nla_validate_parse: 17 callbacks suppressed [ 402.995947][T21044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3979'. [ 402.998790][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3981'. [ 403.043654][T21046] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3980'. [ 403.060027][T21044] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3979'. [ 403.105667][T21050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3982'. [ 403.410652][T21077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3989'. [ 403.445687][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 403.471215][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 403.490142][T21077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3989'. [ 403.505697][T21077] IPv6: sit1: Disabled Multicast RS [ 403.511857][T21077] sit1: entered allmulticast mode [ 403.562326][T21086] netlink: 'syz.2.3993': attribute type 13 has an invalid length. [ 403.571881][T21086] veth0_macvtap: left promiscuous mode [ 403.579300][T21086] macvtap0: entered allmulticast mode [ 403.589406][T21086] macvtap0: refused to change device tx_queue_len [ 403.614751][T21088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3990'. [ 403.713900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 403.721949][ C1] lec:lec_tx_timeout: lec0 [ 403.727295][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.752228][T21091] geneve3: entered promiscuous mode [ 403.758334][T21091] geneve3: entered allmulticast mode [ 403.879759][T21095] veth0: entered promiscuous mode [ 403.939545][T21097] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 404.185686][T21106] No such timeout policy "syz0" [ 404.713509][T21141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.747136][T21141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.882782][T21146] bond2 (unregistering): Released all slaves [ 405.031430][ T30] audit: type=1800 audit(1771501479.694:12): pid=21161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4018" name="memory.events" dev="tmpfs" ino=831 res=0 errno=0 [ 405.176612][ T30] audit: type=1800 audit(1771501479.844:13): pid=21168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4022" name="memory.events" dev="tmpfs" ino=1161 res=0 errno=0 [ 405.551202][ T6897] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 405.563131][ T6897] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 405.571563][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 405.581116][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.591175][ T6897] Workqueue: krdsd rds_tcp_accept_worker [ 405.596825][ T6897] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 405.602625][ T6897] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 405.622218][ T6897] RSP: 0018:ffffc90003e9f960 EFLAGS: 00010202 [ 405.628274][ T6897] RAX: 1ffff1100a116e63 RBX: 0000000000000012 RCX: 0000000000000000 [ 405.636240][ T6897] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 405.644200][ T6897] RBP: ffffc90003e9fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 405.652162][ T6897] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff88807adc5840 [ 405.660126][ T6897] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff920007d3f34 [ 405.668089][ T6897] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 405.677005][ T6897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.683574][ T6897] CR2: 000000110c2ff5e5 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 405.691529][ T6897] Call Trace: [ 405.694795][ T6897] [ 405.697716][ T6897] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 405.703253][ T6897] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.708264][ T6897] ? lock_acquire+0x106/0x330 [ 405.712924][ T6897] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.718284][ T6897] ? process_scheduled_works+0xa0f/0x17a0 [ 405.723989][ T6897] ? process_scheduled_works+0xa0f/0x17a0 [ 405.729698][ T6897] rds_tcp_accept_worker+0x1d/0x70 [ 405.734801][ T6897] ? process_scheduled_works+0xa0f/0x17a0 [ 405.740512][ T6897] process_scheduled_works+0xaec/0x17a0 [ 405.746046][ T6897] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.752008][ T6897] ? assign_work+0x3d5/0x5e0 [ 405.756579][ T6897] worker_thread+0xa50/0xfc0 [ 405.761163][ T6897] kthread+0x388/0x470 [ 405.765220][ T6897] ? __pfx_worker_thread+0x10/0x10 [ 405.770317][ T6897] ? __pfx_kthread+0x10/0x10 [ 405.774895][ T6897] ret_from_fork+0x51e/0xb90 [ 405.779472][ T6897] ? __pfx_ret_from_fork+0x10/0x10 [ 405.784564][ T6897] ? __switch_to+0xc7d/0x1400 [ 405.789223][ T6897] ? __pfx_kthread+0x10/0x10 [ 405.793797][ T6897] ret_from_fork_asm+0x1a/0x30 [ 405.798555][ T6897] [ 405.801568][ T6897] Modules linked in: [ 405.806565][ T6897] ---[ end trace 0000000000000000 ]--- [ 405.819229][ T6897] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 405.825547][ T6897] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 405.846463][ T6897] RSP: 0018:ffffc90003e9f960 EFLAGS: 00010202 [ 405.853336][ T6897] RAX: 1ffff1100a116e63 RBX: 0000000000000012 RCX: 0000000000000000 [ 405.865383][ T6897] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 405.886773][ T6897] RBP: ffffc90003e9fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 405.896739][ T6897] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff88807adc5840 [ 405.905712][ T6897] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff920007d3f34 [ 405.922365][ T6897] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 405.931562][ T6897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.938501][ T6897] CR2: 00007f484f5d4ff8 CR3: 0000000046f00000 CR4: 00000000003526f0 [ 405.944202][T21203] nbd0: detected capacity change from 0 to 127 [ 405.946917][ T6897] Kernel panic - not syncing: Fatal exception [ 405.952962][ T6897] Kernel Offset: disabled