last executing test programs: 2.829095483s ago: executing program 4 (id=8266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) splice(r6, 0x0, r5, 0x0, 0xffffffff, 0x4) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 2.805983408s ago: executing program 1 (id=8267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a400000011d00081500030014000200fc02000000000000000000000000000014000100200100"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc"], 0x5c}}, 0x0) 2.732923415s ago: executing program 1 (id=8269): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e1d, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d085f8", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xb}, {0x0, 0xfff3}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r7, 0x385, 0x6, 0x800}, &(0x7f0000000080)=0x10) 2.185092313s ago: executing program 0 (id=8278): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x11, 0x2, 0x10001) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netrom(r1, 0x0, 0x0) 2.012671109s ago: executing program 3 (id=8282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.951638296s ago: executing program 0 (id=8283): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @fwd={0x4}, @const={0x6, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000640)=""/218, 0x5b, 0xda, 0x1, 0x4}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'caif0\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f0000002540)=""/209, 0xd1}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.865349746s ago: executing program 3 (id=8284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xa) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000000)={&(0x7f0000000140)=[{0x4, 0xffffffff, 0x5}, {0x100000000, 0x4, 0x7f, 0x8c}, {0xfffffffffffffff7, 0x2, 0x7fffffff, 0x36}, {0x8, 0x2, 0x3, 0x6}, {0x3, 0x6, 0x7, 0x6}, {0x1f, 0xfffffffffffffff6, 0x800, 0x195}, {0x8, 0x7, 0x0, 0x3}, {0x7, 0xa, 0x7fffffff, 0x9}], 0x8, 0x20, 0x1, 0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) syz_emit_ethernet(0x0, 0x0, 0x0) 1.862930251s ago: executing program 4 (id=8286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f00000004c0)=0x29) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000580)={{r5}, 0x7, &(0x7f0000000440)=[0x6, 0x401, 0x80200000000, 0x7, 0x0, 0xffffffffffff20af, 0x3], 0x7fffffffffffffff, 0x4}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3b, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}, @typed={0x8, 0x18, 0x0, 0x0, @uid=r8}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc040) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x32, 0x3c, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @multicast1}, "28afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea2"}}}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r14, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r14, &(0x7f00000000c0)={0x2, 0x5e21, @multicast2}, 0x10) connect$inet(r14, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)={0x358, r15, 0x2, 0x4, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x54, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9d6b09f668652ab675a69c2721efb3a4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c2c60e1ff99cc08e1756450c435968ee2088fb680ca6881b8f09664f9995d67e"}]}, @NL802154_ATTR_SEC_KEY={0x160, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6b48067efa0697df5f12fcb4a4414e62e0f524dc4d6f0842ec8690a3b84b9a37"}, @NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9b507dd0aaaf3298946646abede39050"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1bf338c026d600f7}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2ffb}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "522257156820c8f48285ae89d84b1425ad12039ca0ce9fb6c7776af3c337393a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5f3c9695d8215af8f9c3b7e536e0308a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d1e856797ec163ca84f6807ecae8bdf5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f86a4343dc883fe8faeeaec373e9b25f"}, @NL802154_KEY_ATTR_ID={0x98, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffe01}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "313edccf9792562b42b296c76b59a993"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x45}]}, @NL802154_ATTR_SEC_KEY={0x68, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "879e61cf02005fbd82a4557dadd8bf30b683170ab54db1158c36d7844b6b7a4e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fd78ac9387a3606e7829bb1b0979007d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "84b5867737dc632026e5dd0df14c852dec5d63f05b0523a46cd96defaeeb696b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x358}, 0x1, 0x0, 0x0, 0x18000000}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000020000000080a01030000000000f6e2000200000009000100001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.820494832s ago: executing program 1 (id=8287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @generic={0xa, "c1a091c089a419a0bf5613e26a44"}, @isdn={0x22, 0x7f, 0xfc, 0xe2, 0xff}, @ax25={0x3, @bcast, 0x1}, 0x43, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='pimreg1\x00', 0x4, 0x0, 0x7}) (async, rerun: 32) getsockopt$inet_buf(r1, 0x118, 0x2, 0x0, &(0x7f00000003c0)) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) 1.745206131s ago: executing program 2 (id=8288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1ff}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x40804) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="0800234ac70601f6", @ANYRES32=r9, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x20000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000200a000001040000000c0009000000000000000000"], 0x24}}, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r10, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000ec0600000004000000000000000000000000000000000000cd3ce1ceb4919adaf60001000009040000000100000004000000050000000000000700000000100000040000000800"], 0x0, 0x5a}, 0x28) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xc, 0xa}, {0xc, 0xffff}, {0xd, 0xc}}, [{0x8, 0xb, 0x9755}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.692858214s ago: executing program 0 (id=8289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, &(0x7f0000000180), 0x0}, 0x20) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r10 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r10, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0xffffffff, 0x4) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.692184561s ago: executing program 1 (id=8290): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}}}}, 0x108) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xc1, &(0x7f0000000400)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r5 = socket$kcm(0x29, 0x5, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4}) (async, rerun: 32) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000540)={@rand_addr, @dev, 0x0}, &(0x7f0000000580)=0xc) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x8000000000000003, {}, 0xfd}, 0x18) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast1, @private}, &(0x7f0000000640)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x80, 0xfffffffb, {{0x9, 0x4, 0x3, 0x24, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @local, {[@rr={0x7, 0xf, 0x0, [@local, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@private0, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x180, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0xc000}, 0x40080c0) (async) r14 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) r15 = socket(0x26, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, 0xfffffffffffffffe, 0x78) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r14, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r16}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000006a00130129bd7000fedbdf250a00000000000000040009005ba9e4502eed19ccd3ecadb22ac59643f67ab24d98aee07def4fb1d5b0afdd94621db12415c36e240ed5a7da9dca5e93c565a17cfd2779794b03e3da8ef7aaef59755e22d89730e14515b3328d4afe0acc7412a9b5ed4751a10c6a7627151d7244aea77a1423165ed2418a6a8dbd8cafe86152a9c3a967c26417891297215bf2e1d839c4e279"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.539165438s ago: executing program 1 (id=8291): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)="cef15528bda132dd29d5f26426045d6690030cd7b3ace18ff2d4c35fe84f1d63ce6bbe5cecb6c807d895cd1e819a89e10137862c9c4754e7e79f844c8ea78ba82ab2d1477a4c70100b6316dbd0612f20e0b5b0ca1d2be4ba62ae9f6c71eba8842185813843fa00d6d335653550bb3d3c5944420ca73db4b0f6369342d2dacd75e8c29290dbac666ed434139a8849f23d160e7b2758", 0x95}], 0x1, &(0x7f0000000700)=[{0x1010, 0x116, 0x56ec, "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"}, {0xc0, 0x103, 0x0, "c8a345d574abed871a62ea8c21edab5437085a3aecdc1e2093df0e8ca8fef130fc89726e91a349dea25058d19459bff75565b1a4d5870d3f0f2dfd0996e617ff469e9cf63d15bd0b0f736eed9072c97c2f5cff69245d96c386e67cbc3d5b49109adf24c5630c8fceb9f54f9c22ac9e9146a7b20461e2e73198d4129cc0cfa8382a87196e19684b02e645ea43e3f81d960d2a1b1af8eee1e82be1f31d44d12f14ef22308da768d5b249a5"}], 0x10d0}, 0x8050) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 1.459691848s ago: executing program 4 (id=8292): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="ea26d5e6630c9961a0a4192f4ee5d295dbc43355b098958c96132bd7b600"/39, @ANYRES16=0x0, @ANYBLOB="0200ffffffff00000000010000000800010000000000"], 0x1c}}, 0x40008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020400", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "2f8703", 0x0, 0x6c, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @remote}, [], "8763be05bdbf976f"}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x4d4, r3, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x238, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7d7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13c, 0xe, 0x0, 0x1, [{0xaf, 0x0, "ddc3cd5e843ceb87d9474e8df953fb5b11fcc98c2128a5102b5c0c99d56b73f73707279f02da76492fba2b471a532c64afcb87d58ebee78aa06926eb911965589eb677a0ca05ed25f52e1aea0a6aca0e6aba5890fa493f026425de761f4a1a3e62237e4f5c781f868c39c2749f121d143ade53218557ea3fd7602b3a0c512020159563a5367bb275ce1e31988bd5bf8f70f188f7671a9b7ae261761858860b0e25b1435e13ea2f3b13ab8f"}, {0x87, 0x0, "df56d82f39c6d452b83301a9462056a3a4d9182e004c4206f62a5f8acc7de4fa30c23fce76ebf18d0ef48d9140502edcb21aa6f9e1554879624fee583008e69d63941bf76f5f395f245ed45814abe2b27fb6f1d8fed353fca732008c79c22b65068986b3a2b6e78a78b50c282505ac92411f1a21f7e63f8506ec29379af3c5254df45f"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc4, 0xb, "757ddd6e9a95995cc2b3f5c196bdd3963ac410f1d81d0c07f3f4ce14e2ebad40961e8b50c5f5e43449ab0e3523192081cfd0730cb3c8eaec8325fb046e2546fdcfe8165375c62ef931cc8fdd4d85c5bb41fc9782b8a16b1c7fa60183b11de891a381c8fb0e627638257fca51e1ecd6ba2bcbae5e86e7575aae37c6199980e479665a93d42db75ccfc1f0c42df8fc142510cab9f9d37bb966a807b513e813b501ba3d2d014af80f45d6f1fda55a2e0407804da792fcea0ba998f79ebbacbb604d"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x280, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x268, 0xd, 0x0, 0x1, [{0xbc, 0x0, "9d28d990e1f99dddbca507605b776aa20e79b31cb5a1c458bd598a83490a8cb0664406c72059d6efad28bb3267f31e99ad3ace09e54accea351f22eea1a92d309904f970ef8483ab0916c257ed94e70ec0f43def4f613bd5fc3423d83b9e78ab6aaf9c6d9511d8163540b40aec67f8ff1ff2840b676fcf250b0b023c10326566bfa866a98f9307dbbebf2b1f8db1d3b14406578aa36075cd49e0e93cda09ddb198769e7ac4bbf0ca867aa96a915d924a7366934b2a94a0fb"}, {0x5f, 0x0, "732180438198745e2b0d88c54b53b28e56232f062d1051ea50a7a4fbd186e8d41a456f6d4956efad64a66d86cd918d6a8cca582101ad3c9a32a636f1db646e20c6e947f8af0d55aa49fcf662beef75beb767ff00178a297f392aa5"}, {0x80, 0x0, "52e6cadb6e9e11f00db66f3a6fd9417422095f0362ec39c8add2991b122f45b81b95d48137b384150d6fd297c8614109c3a1146f1e0be699271e76702f63b7b7b59dbc093394f34f3ad1ec2e4a24f23782aa3053a2020f08568755f4a3da4aa34929acf4e08841dffeaa9436fde31f4918265934d38b5157d0292566"}, {0xc5, 0x0, "fa7ebf792971ab252f46415693b127c68c02ad9ce5c4c1c28ad8e0daf070988a8f5fd951b31811e6d59d935212cb5677f3c782c733b55defcf8f50c15ab529c67ba2fa570efc27a47b73525a576d402fc97c3686e3d7d326ca00015bfa48ea3a4dbb1d4ff9aa51c04271f0ebafdf28866ef0fc0c97200aab0439246408e785038d58fca571b92e86b9784d5656f3a725eadd69971a59723d3de05ceec1370b7f020317169d941381bab3ccc6f328b81422b7d4e1546b40ba41510ff2e01ec7b27b"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1.36526368s ago: executing program 3 (id=8293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x7, 0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08"], 0x122}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000fcff00180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000d39d2c78c18eb1ae7322f89fd84df6189d4f5b155250c6be12e413e2cb19f174dfbd022bfa5490cd4c588389199e04e97b597299768cbaddf163c628e664bee170b43c35166b06cc0a2af3b48cfc"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 1.351595353s ago: executing program 2 (id=8294): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000180)=0x8) getsockname$llc(0xffffffffffffffff, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000500)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000001aebf3cc6dbd1c4600"/40], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xf7e, 0x5, 0x5, 0x1, 0x7ff}, &(0x7f0000000080)=0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ff050000200000000e0001006e657464657673696d0000000f0002006e657464657673696d3000003600"], 0x4c}}, 0x8000) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x7, 0x8, 0x1000}, &(0x7f0000000100)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r9, 0x601, 0x70bd25}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000380)='THAWED\x00', 0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000440)={'ip_vti0\x00', @local}) 1.343683245s ago: executing program 4 (id=8295): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200000046", 0x48}], 0x1}, 0x10004000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x161, 0x161, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x9, 0x3}, {0xe, 0x2}, {0xe, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0xf, 0x1}]}, @union={0xd, 0x9, 0x0, 0x5, 0x1, 0x40, [{0xa, 0x4, 0x2}, {0x2, 0x3, 0xcfa}, {0x9, 0x6, 0x8}, {0x0, 0x2, 0x7fffffff}, {0x9, 0x2, 0x3}, {0xb, 0x4, 0x5dd4}, {0xe, 0x3, 0x1}, {0xb, 0x5, 0x7}, {0x2, 0x3, 0xb}]}, @ptr={0xb}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x200, 0xf}, {0x2, 0x28b, 0x400}, {0x3, 0x4a2, 0x9}, {0x2, 0x0, 0x7}, {0x2, 0x5, 0x4}], "f3"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa}, {0x4, 0x1}, {0x9, 0x4}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x20002}, @enum64={0xd, 0x0, 0x0, 0x13, 0x1, 0x6}, @const={0xf, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000040)=""/46, 0x17f, 0x2e, 0x1, 0x7fff, 0x10000, @value=r3}, 0x28) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0000, 0x0) 1.253192518s ago: executing program 3 (id=8296): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x4008004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000000000000100000009000100730000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c000102400000000f0800014000000014080003400000000404000480040005800900010073797a3000000000140000001100010000000000000000000300000a00"/249], 0x108}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r4, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$key(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x2, 0xa, 0x2, 0x6, 0x43, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e22, 0x9, @local, 0x3}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x800}, @in={0x2, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x1, {0x6, 0x2b, 0x9, 0xe8, 0x0, 0x8, 0x0, @in6=@remote, @in=@private=0xa010100}}, @sadb_key={0x1d, 0x9, 0x6e8, 0x0, "c748394172d8d99520d300f983b684a52409220eb3e0c66fe441c09c52492e856c8cc2bfa16c9c989e927fb2bc11c3902e250ffb72ce83e6b97bc26a0494808678d0e60819490f6dff5994f484e464ee92588d35cb4d0c3703e3505ecd06d5b41270c581734229b47d9772168fb762401ab51203ac971766195e2d728ae49d861b878dfcd60a7257a788a73661447c126cd495057b42cb09c6d9e4f04f113eb9d31f4e97dd78f19489c810ec96d3d06df568a316dbf243c5c1f1b45e056d60f19e54dc29d617a11ed1e284a4e2193f0d55a9578d391471f9a9c42927eb"}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0xc, 0x45, 0x0, 0x40000001}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_key={0x6, 0x8, 0x130, 0x0, "9b0c89f5d1d0325c2daed4e1caccd2bdaa1e2420b26dfb8b4840e57a3e22e5742f25383aa707"}]}, 0x218}}, 0x10) write$tun(r1, &(0x7f0000001b40)={@val={0x0, 0x8914}, @void, @llc={@llc={0x4, 0x2, "dd", "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"}}}, 0x4c1) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbb040800450000380000000002019078ac1e000cac1414aa030190781200183f250000001d000000008407faac1414327f000001ffffff7f00000000"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700f82800"], 0x48) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x28, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0x2, 0xa, 0x3, 0x4, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xe9, &(0x7f00000004c0)=""/233, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r5], &(0x7f0000000640)=[{0x3, 0x5, 0xc, 0xb}, {0x5, 0x2, 0x4, 0xc}, {0x3, 0x4, 0x0, 0x7}, {0x0, 0x5, 0xe, 0x4}, {0x1, 0x4, 0x1, 0x5}, {0x4, 0x1, 0xb, 0x2}, {0x2, 0x1, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r7, 0x0, 0x25, 0x9, @val=@kprobe_multi=@addrs={0x1, 0x9, 0x0, &(0x7f0000000780)=[0x8000000000000001, 0x800, 0x1, 0x5, 0xd, 0x6, 0x881, 0xbb, 0xffffffff00000000], 0x4}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$ax25(r6, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) 1.249342766s ago: executing program 4 (id=8297): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {0xffff}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 1.205223177s ago: executing program 2 (id=8298): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x7ff, 0x6, 0x4, 0x8, 0x80, 0xf}, 0xc) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f63e5148e4111b5e22ebaf581f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x24000840) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x7b) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000000000000000100e1fa9d852385584db0ab5e1ddabebccf939d7de9e621ebc196dfa0562d1fd4f34cafae7002eadafe4703fc66efc1c4eb8567546011169fc8c04e6a58b18707477f9761f1b447843f22f0dbb048fa63465f1937af681f3cc375034aea55a4f1ea610af55af36b9bf8e03c485a6e9152c650f88f21e5104a7a672b517354f2003d579b"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 793.124781ms ago: executing program 0 (id=8299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2a500, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 769.590821ms ago: executing program 0 (id=8300): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000)="e6", 0x0}, 0x20) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x100, 0x0, 0x1, {{'rfc7539esp(xts(twofish),rmd160-generic)\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbd}, @alu={0x7, 0x0, 0xa, 0xb, 0x1, 0x18, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000300)=""/7, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x80000000, 0xff7ffff8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x7}, 0x94) syz_emit_ethernet(0x20, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaacdaaaaaabb0011aa000db308008824ed2810b6294bab4e25bd"], 0x0) 714.835865ms ago: executing program 3 (id=8301): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r3, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r6 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x802, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7, 0x4, 0x2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x38, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 641.170676ms ago: executing program 2 (id=8302): socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="5ff524061a9a328b1ee075", 0xb}, {&(0x7f00000001c0)}], 0x2) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 629.325439ms ago: executing program 1 (id=8303): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x9, 0xfff1}, {0x9, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8c81) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') r6 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000000000)=0x8, 0x12) close(r8) splice(r7, 0x0, r8, 0x0, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000000714000229bd7000ffdbdf25090002007379073000000000080001000500000005005400010000000900020073797a0100000000"], 0x38}}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x6c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4a000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000feffffff060000000e0001006e657464657673696d0000000f0002006e657464657673ff0100000008000300000010000006001600940707000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x5, 0x2, {0x28}}}]}, 0x38}}, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) 108.268896ms ago: executing program 2 (id=8304): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 107.760594ms ago: executing program 4 (id=8305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 17.359119ms ago: executing program 0 (id=8306): r0 = socket(0xa, 0x1, 0x0) r1 = accept$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000480)=0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e22, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r0) close(r0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x0, 0x3, 0x0, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="78ab966b12afee5eae8f2c3c30becb2aa0bf47b35cb7d1117c6d03746618407d153882879da2267bb9e5500d61482fb3b9be712257ffd1201a37c78032cc4b256c6d8bf0c0fd533118b3998bfb788a255cf96e8a0362fc0ccfccdcacb136ceae5ceb743ec4cac1228e47d296380df8b528af44a98b1f580f599909aa600944c9e6bdfea8e0264d6d6dd16cc9440880a36ac159b9228cac867dd6e423746112749dd682d05c16b08e3f1f429148ae74bbfc", 0xb1}, {&(0x7f0000000300)="a08c3b3f30c129b02499add01ad57e84e730cfcf6f3a58135031d4c6d75556c1b4256577d9517612af47fa89d638868e9f8db06b5c2c5104a8a09554549ba44b672d24ee459589365a59c10ba054ca980a58ea4817d917a7758fafd45b611a3c6390ca45b8c7d8b457d59674fd1cac27ed8e262edc557ba339c06cb99b68de1b43e5d40a438387198a42", 0x8a}], 0x2, &(0x7f00000003c0)=[{0x68, 0x10b, 0x9, "3c0b53ba4bb60bd339b1090be7cc4fe0cc5e42b97e3f6d506721dc4e32f4061f046c0717632bfeb6e72222058aa472e1ad75e22768e8e296acbb07d26d9dec0d62aaa61bcedd5f29456e3e730b9a6a12592c6b1960fe"}], 0x68}, 0x20048004) 16.292438ms ago: executing program 3 (id=8307): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x6a4, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x648, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x5b0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5a4, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x128, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "acfd342b8c4032bc5fc7d13c2d5930b4c51405cf41027ce7aa1ede2e9cf4d3bc7bfb7bfc350e8ba852ebe4ee7538366127ebc0b1bd330bf39f56e36e514270d13ffe519e94562bcf08460382f4ddf67d8bbbe6d88256a176b2b2b92933a80784ad14e72c58cc70ea2c3410d4959d525d7cf5b6c71fe3c811fe5817be3a5d40f07aab4d7e56d946ff97f6770b8887ca63e7aca9662c3c6025977196f56bca91b912dce92c5079949274be24ec64d8c3adabdf57b337cd56e7d67441bc3704d1f253f04dc83792a85c14201b470b548377"}, @NFTA_DATA_VALUE={0x4f, 0x1, "da58872dc40ecaf37fd6255eb97582852006ee9433f49e983e85a08c1a9f6f26b14b40a17bbc51c0570ffd013033de9766d80dc0259b7dbc52b68e1590e2cd60c7a3e55b7a79eb7b8e37d6"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x14c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "81a5c80e9c11fe2f3fbf4072b3f7523f96cadc624a7bf5dbe38bbbcfc67348239928a3829745f514ea807e8b9ec4ee437a34162e317d815a9bc2819c49931496d3ea9804ce40577582d9f72c3ecc9d292c54e1050eaccb41406df4828a570d991fd0333fd894bf1f7c5495a236857d43de458dce0958552f08f2ac0233bb7a2321db7b6213500f137aebbdcc026465265d0692235f03848a4de71c65be16008d47fdbf168d26dc75051837d5866f5160aa1507640ebf444e37b7e19b86a91f5655af5ae45bbed3952a8fd930a9a0be27f80a5fb756ec238a02870d95789df1d633501a591bbf04c801df2795"}]}, @NFTA_CMP_DATA={0x188, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "4430626fcb9b88d75f28ad4f25d019e12738a0852d38c3e856f5c7a94a0379087bbbfba518f40999c9f148840696f3837a89f773e72792e33350cd39781735985290df3745aa828d0042d24cd5688fbe71d4461000f323da132eca62a48d550bba5c2f825d587b2cc2c09eead670d83d84541d5720d304eb9f0ddef420a4b0586cca5b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "870eb5328ace4d3fbead8bcaa0ed52825aafaca191e84436067cdb30b3b4266462159232d744ac209ca04b91c4b6ce16544c38e7147a1d10f86315d4f66218118a244020bcfe0a67620c5385d8a3d17a5b615ccfb964212c08026c56ccc604c452dac6d0d21cd7701a1766b88b78cf1c9419b7d0c137d3632380a13ec5a3969774cd3ebde5baa35c2be46ff03b3dd9b67a848132408de393cb051cc74e37a2796726223ecdb6f97bab4ac44bccc6fa3e0f00aabd8c11160be46cf8512347be8860a564ea7dbd7a105bb9f6d8ffb58b854a799c"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x18c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "1c2784c8b1608c6599c542ec48e64a0dc847559a3082b8c78768c509059589084d5c37c2d046c503c5dd556106e271566c776b128e90d84db994c3c8a32f2ce9f5dd56d6af1b09487346e0b6ab34685cc2efffe22d1a9a1d0bfe1e47f83b1bcff44132d3de78e747712b8b75e10c22206430c5689e76e4db275bc7437dc28ecf64af7305c282e3f2a279ca6b129b56416e371a2f"}, @NFTA_DATA_VALUE={0x22, 0x1, "534cfa53576b5729b8d2db869a84762bc203a76e678578ca543543274627"}, @NFTA_DATA_VALUE={0x1b, 0x1, "aadd7fbac71b1f76e30e3b6b7a474eb7bb351073b65f45"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "4611b676234d3fb9efc14955c9d02eacfccbdd042b8d84e4b3f94b20fe61fcf0f6ff9cde51fb59d7499e014dc197ce23d0e18b13ffc945aba5a020863dcef4161be50e"}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x4008084}, 0x8d0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x8080) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000002e80)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000280), 0x0}, 0x20) (async) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r6, 0x2f, 0xc5, 0x15, 0x13, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x8, 0x2}}) (async) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 0s ago: executing program 2 (id=8308): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(r2) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000340)=@ax25={{0x3, @bcast}, [@remote, @default, @default, @null, @netrom, @null, @remote, @netrom]}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/101, 0x65}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3, &(0x7f0000000680)=""/129, 0x81}, 0x40}, {{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000980)=""/177, 0xb1}], 0x3, &(0x7f0000000a40)=""/68, 0x44}, 0x8}], 0x2, 0x40000020, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r9, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x120000, 0x800, 0x5}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv6_getaddr={0x38, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x222}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): ] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 579.493749][T28497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6131'. [ 579.503061][T28498] x_tables: duplicate underflow at hook 1 [ 579.503061][T28499] x_tables: duplicate underflow at hook 1 [ 579.520062][T28499] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6130'. [ 579.553660][T28498] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 579.677811][T28523] vcan0: entered allmulticast mode [ 579.869678][T28532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6138'. [ 579.929467][T28534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6133'. [ 579.929847][T28532] netlink: 'syz.4.6138': attribute type 1 has an invalid length. [ 579.946128][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6133'. [ 579.947211][T28532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.635178][T21506] Bluetooth: hci1: command 0x040f tx timeout [ 580.716158][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 582.567591][T28506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.715693][ T5839] Bluetooth: hci1: command 0x040f tx timeout [ 582.859121][T28548] batadv_slave_0: entered promiscuous mode [ 582.870072][T28547] batadv_slave_0: left promiscuous mode [ 583.041901][T28564] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 583.062029][T28564] delete_channel: no stack [ 583.067887][T28564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6147'. [ 583.248734][T28574] ip6t_srh: unknown srh match flags 5F28 [ 583.604686][T28605] wireguard: wg2: Could not create IPv4 socket [ 584.184010][T28637] netlink: 'syz.2.6161': attribute type 2 has an invalid length. [ 584.215164][T28637] netlink: 'syz.2.6161': attribute type 2 has an invalid length. [ 584.238287][ T30] audit: type=1107 audit(1774691115.782:10): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 584.266562][T28637] netlink: 'syz.2.6161': attribute type 2 has an invalid length. [ 584.480314][T28656] xt_hashlimit: size too large, truncated to 1048576 [ 584.590504][T28659] syzkaller0: entered promiscuous mode [ 584.606768][T28659] syzkaller0: entered allmulticast mode [ 584.757281][T28669] lo speed is unknown, defaulting to 1000 [ 584.795437][ T5839] Bluetooth: hci1: command 0x040f tx timeout [ 584.959609][T28676] erspan0: entered allmulticast mode [ 585.127760][T28685] __nla_validate_parse: 2 callbacks suppressed [ 585.127777][T28685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6174'. [ 585.143749][T28687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6175'. [ 585.267539][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6178'. [ 585.301104][T28701] batman_adv: batadv0: Adding interface: dummy0 [ 585.312180][T28701] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.399223][T28701] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 585.478278][T28717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6184'. [ 585.534292][T28717] 0: renamed from hsr_slave_1 [ 585.553691][T28717] 0: entered allmulticast mode [ 585.561509][T28717] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 585.603438][T28724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.643900][T28726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6189'. [ 585.832876][T28729] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6187'. [ 585.878695][T28729] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6187'. [ 585.907532][T28729] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6187'. [ 585.939537][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6194'. [ 586.153398][T28760] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 586.237434][T28762] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 586.517423][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6201'. [ 586.640743][T28785] netlink: zone id is out of range [ 586.653711][T28785] netlink: zone id is out of range [ 586.675228][T28785] netlink: zone id is out of range [ 586.680558][T28785] netlink: zone id is out of range [ 586.690389][T28785] netlink: zone id is out of range [ 586.706683][T28785] netlink: zone id is out of range [ 586.766261][T28794] netlink: 'syz.1.6205': attribute type 4 has an invalid length. [ 586.991665][T28808] netlink: 'syz.0.6211': attribute type 29 has an invalid length. [ 587.020446][T28813] netlink: 'syz.1.6212': attribute type 1 has an invalid length. [ 587.169125][T28820] netlink: 'syz.3.6216': attribute type 1 has an invalid length. [ 587.259663][T28820] bond1: entered promiscuous mode [ 587.276734][T28820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.296949][T28827] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 587.309496][T28827] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 587.320469][T28827] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 587.331269][T28827] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 588.002480][T28876] Bluetooth: MGMT ver 1.23 [ 588.111327][T28877] xt_hashlimit: overflow, rate too high: 0 [ 588.300462][T28893] netlink: 'syz.4.6241': attribute type 1 has an invalid length. [ 588.348184][T28898] veth0_to_bond: entered allmulticast mode [ 588.441753][T28904] bridge1: port 1(veth3) entered blocking state [ 588.448710][T28904] bridge1: port 1(veth3) entered disabled state [ 588.462590][T28904] veth3: entered allmulticast mode [ 588.471356][T28904] veth3: entered promiscuous mode [ 588.508063][T28912] netlink: 'syz.3.6247': attribute type 10 has an invalid length. [ 588.516368][T28912] bridge_slave_1: left allmulticast mode [ 588.527608][T28912] bridge_slave_1: left promiscuous mode [ 588.543013][T28912] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.586525][T28912] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 588.855211][T28941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.233703][T28961] netlink: 'syz.4.6262': attribute type 1 has an invalid length. [ 589.267361][T28961] netlink: 'syz.4.6262': attribute type 2 has an invalid length. [ 589.586645][T21506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.599361][T21506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.610029][T21506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.628084][T21506] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.638195][T21506] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.707488][T28970] lo speed is unknown, defaulting to 1000 [ 589.711025][T28975] syzkaller1: entered promiscuous mode [ 589.769564][T28975] syzkaller1: entered allmulticast mode [ 589.906771][T28979] netlink: 'syz.4.6268': attribute type 11 has an invalid length. [ 590.358760][T28990] netlink: 'syz.2.6271': attribute type 11 has an invalid length. [ 590.363394][T28970] chnl_net:caif_netlink_parms(): no params data found [ 590.393354][T28990] __nla_validate_parse: 20 callbacks suppressed [ 590.393369][T28990] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.6271'. [ 590.415969][ T6658] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.427461][ T6658] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.514868][ T6658] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.561041][ T6658] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.646830][ T6658] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.658215][ T6658] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.678556][T28970] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.690106][T28970] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.704032][T28970] bridge_slave_0: entered allmulticast mode [ 590.722288][T28970] bridge_slave_0: entered promiscuous mode [ 590.738436][T28970] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.753626][T28970] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.762112][T28970] bridge_slave_1: entered allmulticast mode [ 590.771809][T28970] bridge_slave_1: entered promiscuous mode [ 590.789972][ T6658] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.807098][ T6658] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.909873][T28970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.930691][T28970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.048053][T28970] team0: Port device team_slave_0 added [ 591.089249][T28970] team0: Port device team_slave_1 added [ 591.185106][T29016] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6277'. [ 591.265072][T29024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6278'. [ 591.288705][T28970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.299228][T28970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.322107][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6281'. [ 591.336091][T28970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.395430][T28970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.402405][T28970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.425406][T29030] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6281'. [ 591.457080][T29032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6282'. [ 591.469046][T28970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.496018][T29029] xt_l2tp: v2 tid > 0xffff: 1114244 [ 591.578392][T29032] syzkaller0: entered promiscuous mode [ 591.583953][T29032] syzkaller0: entered allmulticast mode [ 591.686262][ T5839] Bluetooth: hci3: command tx timeout [ 591.745630][T29043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6286'. [ 593.202830][ T6658] bridge_slave_1: left allmulticast mode [ 593.208893][ T6658] bridge_slave_1: left promiscuous mode [ 593.214599][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.224776][ T6658] bridge_slave_0: left allmulticast mode [ 593.230768][ T6658] bridge_slave_0: left promiscuous mode [ 593.237609][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.261236][ T6658] veth11: left allmulticast mode [ 593.270867][ T6658] veth11: left promiscuous mode [ 593.276451][ T6658] bridge5: port 2(veth11) entered disabled state [ 593.285333][ T6658] veth9: left allmulticast mode [ 593.290695][ T6658] veth9: left promiscuous mode [ 593.297366][ T6658] bridge5: port 1(veth9) entered disabled state [ 593.560849][ T6658] gretap0 (unregistering): left promiscuous mode [ 593.755343][ T5839] Bluetooth: hci3: command tx timeout [ 593.976223][ T6658] bond0 (unregistering): left promiscuous mode [ 593.982401][ T6658] bond_slave_0: left promiscuous mode [ 593.988092][ T6658] bond_slave_1: left promiscuous mode [ 593.994789][ T6658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.007998][ T6658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.018150][ T6658] bond0 (unregistering): Released all slaves [ 594.029001][ T6658] bond1 (unregistering): (slave lo): Releasing backup interface [ 594.037973][ T6658] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 594.051036][ T6658] bond1 (unregistering): Released all slaves [ 594.064005][ T6658] bond2 (unregistering): (slave veth3): Releasing active interface [ 594.077147][ T6658] bond2 (unregistering): (slave veth5): Releasing active interface [ 594.087677][ T6658] bond2 (unregistering): Released all slaves [ 594.100246][ T6658] bond3 (unregistering): Released all slaves [ 594.114102][ T6658] bond4 (unregistering): Released all slaves [ 594.127086][ T6658] bond5 (unregistering): Released all slaves [ 594.141387][ T6658] bond6 (unregistering): Released all slaves [ 594.164246][ T6658] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 594.175170][ T6658] bond7 (unregistering): (slave bond8): Releasing active interface [ 594.183675][ T6658] bond7 (unregistering): Released all slaves [ 594.196038][ T6658] bond8 (unregistering): Released all slaves [ 594.209864][ T6658] bond9 (unregistering): (slave veth7): Releasing active interface [ 594.226621][ T6658] bond9 (unregistering): Released all slaves [ 594.239627][ T6658] bond10 (unregistering): (slave vxcan3): Releasing backup interface [ 594.248925][ T6658] bond10 (unregistering): Released all slaves [ 594.309400][T28970] hsr_slave_0: entered promiscuous mode [ 594.330778][T28970] hsr_slave_1: entered promiscuous mode [ 594.354524][T28970] debugfs: 'hsr0' already exists in 'hsr' [ 594.361680][T28970] Cannot create hsr debugfs directory [ 594.471995][ T6658] 9: left promiscuous mode [ 594.609747][ T6658] tipc: Left network mode [ 594.667881][T29094] netlink: 'syz.2.6293': attribute type 1 has an invalid length. [ 594.688470][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6292'. [ 594.701478][T29087] net_ratelimit: 589 callbacks suppressed [ 594.701492][T29087] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 594.758169][T29094] bond1: entered promiscuous mode [ 594.763718][T29094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.857273][T29094] bond1: (slave bridge2): making interface the new active one [ 594.870447][T29100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6295'. [ 594.871655][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6296'. [ 594.894455][T29094] bridge2: entered promiscuous mode [ 594.911034][T29094] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 595.079517][T29108] block nbd4: server does not support multiple connections per device. [ 595.118279][T29108] block nbd4: shutting down sockets [ 595.455352][T29141] syzkaller0: entered promiscuous mode [ 595.466710][T29141] syzkaller0: entered allmulticast mode [ 595.556876][T29147] IPVS: length: 239 != 24 [ 595.562495][T29147] __nla_validate_parse: 1 callbacks suppressed [ 595.562511][T29147] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6307'. [ 595.698181][T29153] smc: net device team0 applied user defined pnetid SYZ2 [ 595.835239][ T5839] Bluetooth: hci3: command tx timeout [ 595.953018][T29174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6312'. [ 595.969648][T29174] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6312'. [ 596.008900][T29179] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.070534][T29181] Bluetooth: MGMT ver 1.23 [ 596.077252][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 60 seconds [ 596.094182][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 60 seconds [ 596.106538][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 60 seconds [ 596.118812][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 60 seconds [ 596.181214][ T6658] veth1_to_team: left promiscuous mode [ 596.215665][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.235325][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.256890][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.264861][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.286298][T29191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6316'. [ 596.300195][ T6658] veth1_macvtap: left promiscuous mode [ 596.306293][ T6658] veth0_macvtap: left promiscuous mode [ 596.318674][ T6658] veth1_vlan: left promiscuous mode [ 596.324124][ T6658] veth0_vlan: left promiscuous mode [ 596.347926][T29194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6317'. [ 596.676151][ T6658] team0 (unregistering): Port device team_slave_1 removed [ 596.689989][ T6658] team0 (unregistering): Port device team_slave_0 removed [ 596.804735][T29198] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.999817][T29212] syzkaller0: entered promiscuous mode [ 597.016761][T29212] syzkaller0: entered allmulticast mode [ 597.038624][T28970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 597.060512][T28970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 597.150630][T28970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 597.171134][T28970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.391756][ T6658] IPVS: stop unused estimator thread 0... [ 597.498533][T29242] netlink: 'syz.4.6324': attribute type 1 has an invalid length. [ 597.759932][T29261] ip6t_srh: unknown srh match flags 5F28 [ 597.843557][T28970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.880414][T28970] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.908968][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.916170][ T6658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.924021][ T5839] Bluetooth: hci3: command tx timeout [ 597.938471][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.945659][ T6658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.979367][T29233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6324'. [ 597.992357][T29233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6324'. [ 598.181245][T29275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6332'. [ 598.314715][T28970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.403977][T28970] veth0_vlan: entered promiscuous mode [ 598.407154][T29286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6335'. [ 598.441811][T28970] veth1_vlan: entered promiscuous mode [ 598.448588][T29285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6335'. [ 598.524860][T28970] veth0_macvtap: entered promiscuous mode [ 598.545147][T28970] veth1_macvtap: entered promiscuous mode [ 598.594361][T28970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.612716][T28970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.653847][ T9471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.695211][ T9471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.704056][ T9471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.746212][ T9471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.970830][ T6689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.995862][ T6689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.031060][T29320] netlink: 'syz.3.6346': attribute type 21 has an invalid length. [ 599.083368][ T6689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.113905][ T6689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.144015][ T30] audit: type=1107 audit(1774691130.682:11): pid=29326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='֓jW_O؊*;1;嫪-hcn4aI0H::"x 6nxyr^qB`&)hx' [ 599.246891][T29329] netlink: 'syz.0.6349': attribute type 1 has an invalid length. [ 599.255219][T29330] netlink: 'syz.0.6349': attribute type 1 has an invalid length. [ 599.481239][T29341] syzkaller1: entered promiscuous mode [ 599.486911][T29341] syzkaller1: entered allmulticast mode [ 599.500960][T29346] gretap0: entered promiscuous mode [ 599.730665][T29357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 599.853188][T21506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.866667][T21506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.874553][T21506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.884035][T21506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.892650][T21506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.060966][T29364] lo speed is unknown, defaulting to 1000 [ 600.258383][T29388] : entered promiscuous mode [ 600.461307][T29405] netlink: 'syz.4.6367': attribute type 29 has an invalid length. [ 600.568752][T29411] __nla_validate_parse: 15 callbacks suppressed [ 600.568770][T29411] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6369'. [ 600.632008][T29417] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6372'. [ 600.730174][T29364] chnl_net:caif_netlink_parms(): no params data found [ 600.880722][T29427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6376'. [ 601.415970][ T1108] bond5 (unregistering): (slave gretap1): Releasing active interface [ 601.567070][ T1108] dvmrp0 (unregistering): left allmulticast mode [ 601.616431][ T1108] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 601.626072][ T1108] bridge0 (unregistering): left allmulticast mode [ 601.925276][T21506] Bluetooth: hci4: command tx timeout [ 602.152424][ T1108] bond0 (unregistering): Released all slaves [ 602.163548][ T1108] bond1 (unregistering): Released all slaves [ 602.178090][ T1108] bond2 (unregistering): Released all slaves [ 602.192412][ T1108] bond3 (unregistering): Released all slaves [ 602.213702][ T1108] bond4 (unregistering): Released all slaves [ 602.226639][ T1108] bond5 (unregistering): Released all slaves [ 602.239514][ T1108] bond6 (unregistering): Released all slaves [ 602.252115][ T1108] bond7 (unregistering): Released all slaves [ 602.275355][ T1108] bond8 (unregistering): Released all slaves [ 602.345870][T29364] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.353116][T29364] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.367744][T29364] bridge_slave_0: entered allmulticast mode [ 602.376779][T29364] bridge_slave_0: entered promiscuous mode [ 602.389714][T29364] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.397285][T29364] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.405678][T29364] bridge_slave_1: entered allmulticast mode [ 602.413432][T29364] bridge_slave_1: entered promiscuous mode [ 602.433226][ T1108] tipc: Disabling bearer [ 602.443189][ T1108] tipc: Left network mode [ 602.474919][T29364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.501819][ T1108] IPVS: stopping backup sync thread 26069 ... [ 602.502831][T29364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.563263][T29364] team0: Port device team_slave_0 added [ 602.572103][T29364] team0: Port device team_slave_1 added [ 602.602427][T29364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.609990][T29364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.637235][T29364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.652509][T29364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.667591][T29364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.703734][T29364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.797900][T29364] hsr_slave_0: entered promiscuous mode [ 602.810494][T29364] hsr_slave_1: entered promiscuous mode [ 603.104180][T29480] bond1 (unregistering): Released all slaves [ 603.297382][ T1108] batman_adv: batadv0: Removing interface: dummy0 [ 603.310304][ T1108] hsr_slave_0: left promiscuous mode [ 603.316794][ T1108] 0: left promiscuous mode [ 603.705949][ T1108] IPVS: stop unused estimator thread 0... [ 603.995656][T21506] Bluetooth: hci4: command tx timeout [ 604.152691][T29439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.200319][T29364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.259371][T29364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.290812][T29364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.316201][T29491] netlink: 'syz.2.6392': attribute type 3 has an invalid length. [ 604.318973][T29364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.604718][T29364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.720791][T29364] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.746548][T29525] syzkaller0: entered promiscuous mode [ 604.752043][T29525] syzkaller0: entered allmulticast mode [ 604.766280][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.773463][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.796317][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 604.839489][T29525] bond2: option xmit_hash_policy: invalid value (64) [ 604.973014][T29525] bond2 (unregistering): Released all slaves [ 605.050120][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.057281][ T9483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.210739][T29552] SET target dimension over the limit! [ 605.301570][T29558] openvswitch: netlink: IP tunnel dst address not specified [ 605.471443][T29567] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6407'. [ 605.518590][T29567] openvswitch: netlink: Flow key attr not present in new flow. [ 605.542090][T29567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6407'. [ 605.587325][T29571] netlink: 'syz.1.6405': attribute type 64 has an invalid length. [ 605.874509][T29364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.892383][T29595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6410'. [ 606.047453][T29364] veth0_vlan: entered promiscuous mode [ 606.080508][T21506] Bluetooth: hci4: command tx timeout [ 606.117467][T29364] veth1_vlan: entered promiscuous mode [ 606.157312][T29364] veth0_macvtap: entered promiscuous mode [ 606.178289][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6414'. [ 606.180431][T29364] veth1_macvtap: entered promiscuous mode [ 606.262729][T29364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.296268][T29364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.343402][ T9470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.377341][ T9470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.406724][ T9470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.417034][ T9470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.614704][ T9470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.632921][ T9470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.692469][ T6690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.703367][ T6690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.243620][T29670] bond2: (slave ip6_vti0): Device is not bonding slave [ 607.273473][T29670] bond2: option active_slave: invalid value (ip6_vti0) [ 607.309318][T29670] bond2 (unregistering): Released all slaves [ 607.316235][T29679] x_tables: unsorted underflow at hook 3 [ 607.349517][T29679] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6431'. [ 607.633308][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6437'. [ 607.722563][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6439'. [ 607.923937][T29723] netlink: 'syz.3.6444': attribute type 10 has an invalid length. [ 607.959297][T29723] netlink: 396 bytes leftover after parsing attributes in process `syz.3.6444'. [ 608.046459][T29712] bond2: ARP target 1.0.0.0 is already present [ 608.061871][T29712] bond2: option arp_ip_target: invalid value (1) [ 608.070719][T29712] bond2 (unregistering): Released all slaves [ 608.106445][T29729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6445'. [ 608.148904][T29679] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 608.155239][T21506] Bluetooth: hci4: command tx timeout [ 608.169603][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6448'. [ 608.212550][T29723] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 608.284629][T29723] bond2: (slave lo): Enslaving as an active interface with an up link [ 608.312863][T29723] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 608.431425][T29757] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6453'. [ 608.532075][T29762] netlink: 'syz.4.6455': attribute type 2 has an invalid length. [ 608.641298][T29773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6460'. [ 609.220276][T29797] netlink: 'syz.3.6467': attribute type 7 has an invalid length. [ 609.248546][T29797] erspan0: entered promiscuous mode [ 609.258246][T29797] gretap0: entered promiscuous mode [ 609.316668][T29799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.435146][T21506] Bluetooth: hci0: command 0x0c20 tx timeout [ 609.673839][ T5197] udevd[5197]: worker [25428] /devices/virtual/block/nbd3 is taking a long time [ 610.276763][T29839] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 610.404845][T29844] netlink: 'syz.3.6483': attribute type 39 has an invalid length. [ 610.479521][T29850] vcan0: tx address claim with dlc 0 [ 610.793706][T29864] Bluetooth: MGMT ver 1.23 [ 611.038610][T29870] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 611.323870][T29891] __nla_validate_parse: 7 callbacks suppressed [ 611.323890][T29891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6498'. [ 611.476771][T29905] netlink: 'syz.0.6499': attribute type 10 has an invalid length. [ 611.502786][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6501'. [ 611.539438][T29906] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 611.564039][T29906] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 611.577231][T29906] team0: Failed to send options change via netlink (err -105) [ 611.594314][T29906] team0: Port device batadv1 added [ 611.615831][T29905] team0: Device vxcan1 is of different type [ 612.021071][T29931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6508'. [ 612.206543][T29947] lo speed is unknown, defaulting to 1000 [ 612.530318][T29958] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6516'. [ 612.587371][T29970] netlink: 'syz.0.6519': attribute type 1 has an invalid length. [ 612.608651][T29970] netlink: 'syz.0.6519': attribute type 7 has an invalid length. [ 612.645599][T29970] netlink: 'syz.0.6519': attribute type 8 has an invalid length. [ 612.654358][T29970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6519'. [ 612.699760][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6519'. [ 612.736834][T29970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6519'. [ 612.786973][T29982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.873539][T29987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6525'. [ 612.918431][T29997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6527'. [ 612.934640][T29999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 613.110223][T30014] Unknown options in mask b7f2 [ 613.311966][T30024] netlink: 'syz.1.6534': attribute type 1 has an invalid length. [ 613.321347][T30025] syzkaller1: entered promiscuous mode [ 613.327032][T30025] syzkaller1: entered allmulticast mode [ 613.484104][T30032] "syz.2.6538" (30032) uses obsolete ecb(arc4) skcipher [ 613.720470][T30046] xt_nfacct: accounting object `syz1' does not exist [ 613.795416][T30051] nbd: couldn't find a device at index 0 [ 613.900608][T30063] openvswitch: netlink: Multiple metadata blocks provided [ 614.073131][T30073] netlink: 'syz.2.6552': attribute type 21 has an invalid length. [ 614.153343][T30081] netlink: 'syz.1.6555': attribute type 10 has an invalid length. [ 614.171424][T27739] udevd[27739]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 614.200377][T30081] team0: Device vxcan1 is of different type [ 614.222504][T27739] udevd[27739]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 614.414908][T30090] netlink: 'syz.2.6558': attribute type 1 has an invalid length. [ 614.446113][T30090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.465084][T30090] bond2: (slave veth0_to_bond): making interface the new active one [ 614.474671][T30090] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 614.498940][T30090] bond2: entered promiscuous mode [ 614.509982][T30090] veth0_to_bond: entered promiscuous mode [ 614.525305][T30090] bond2: entered allmulticast mode [ 614.531071][T30090] veth0_to_bond: entered allmulticast mode [ 614.560519][T30098] geneve0: entered allmulticast mode [ 614.572201][T30090] IPVS: ip_vs_add_dest(): server weight less than zero [ 614.580458][T23373] IPVS: starting estimator thread 0... [ 614.647775][T30103] veth0: entered promiscuous mode [ 614.660176][T30100] veth0: left promiscuous mode [ 614.675053][T30099] IPVS: using max 32 ests per chain, 76800 per kthread [ 615.124776][T30137] netlink: 'syz.3.6573': attribute type 1 has an invalid length. [ 615.319134][T30152] netdevsim netdevsim0: Direct firmware load for , failed with error -2 [ 615.383597][T30152] netdevsim netdevsim0: Falling back to sysfs fallback for: , [ 615.601452][T30173] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 615.633368][T30173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 615.788398][T30184] pim6reg1: entered promiscuous mode [ 615.801383][T30184] pim6reg1: entered allmulticast mode [ 615.827261][T30187] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 615.862434][T30190] netlink: 'syz.1.6584': attribute type 58 has an invalid length. [ 615.923723][ T9483] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 615.935838][ T9483] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 615.950947][ T9483] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 615.977174][ T9483] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 616.320953][T30221] sctp: [Deprecated]: syz.2.6593 (pid 30221) Use of int in max_burst socket option. [ 616.320953][T30221] Use struct sctp_assoc_value instead [ 616.353636][T30221] __nla_validate_parse: 12 callbacks suppressed [ 616.353654][T30221] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6593'. [ 616.471810][T30228] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 616.498187][T30228] validate_nla: 3 callbacks suppressed [ 616.498203][T30228] netlink: 'syz.4.6597': attribute type 9 has an invalid length. [ 616.724074][T30236] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6601'. [ 616.744337][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 616.755484][T30242] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 616.887852][T30251] nbd: couldn't find a device at index 0 [ 616.943577][T30255] netlink: 'syz.3.6607': attribute type 1 has an invalid length. [ 616.965209][T30255] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6607'. [ 616.974173][T30255] netlink: 'syz.3.6607': attribute type 1 has an invalid length. [ 617.009267][T30255] netlink: 'syz.3.6607': attribute type 8 has an invalid length. [ 617.017288][T30261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6607'. [ 617.027229][T30255] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6607'. [ 617.043544][T30255] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6607'. [ 617.058053][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6611'. [ 617.070743][T30259] netlink: 'syz.2.6610': attribute type 21 has an invalid length. [ 617.078887][T30259] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6610'. [ 617.088032][T30259] netlink: 'syz.2.6610': attribute type 4 has an invalid length. [ 617.096253][T30259] netlink: 'syz.2.6610': attribute type 5 has an invalid length. [ 617.106092][T30259] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6610'. [ 617.140061][T30271] netlink: 'syz.2.6610': attribute type 21 has an invalid length. [ 617.263160][T30272] netlink: 'syz.3.6612': attribute type 1 has an invalid length. [ 617.321314][T30272] netlink: 'syz.3.6612': attribute type 2 has an invalid length. [ 617.573237][T30287] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.581047][T30287] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.887971][T30307] syzkaller0: entered promiscuous mode [ 617.893535][T30307] syzkaller0: entered allmulticast mode [ 618.184807][T30333] tipc: Started in network mode [ 618.194575][T30333] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 618.214744][T30333] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 618.243198][T30333] tipc: Enabled bearer , priority 10 [ 618.629667][T30364] IPVS: length: 239 != 24 [ 618.876318][T30380] bond_slave_1: entered allmulticast mode [ 619.291513][T30397] bond0: entered promiscuous mode [ 619.308939][T30397] bond_slave_0: entered promiscuous mode [ 619.314906][T30397] bond_slave_1: entered promiscuous mode [ 619.322040][T30397] bridge_slave_1: entered promiscuous mode [ 619.330548][T30397] bond0: left promiscuous mode [ 619.335330][T23373] hid-generic 0005:0458:5505.0001: item fetching failed at offset 0/1 [ 619.335937][T23373] hid-generic 0005:0458:5505.0001: probe with driver hid-generic failed with error -22 [ 619.363145][T30397] bond_slave_0: left promiscuous mode [ 619.369431][T30397] bond_slave_1: left promiscuous mode [ 619.375481][T30397] bridge_slave_1: left promiscuous mode [ 619.449996][T23373] tipc: Node number set to 1 [ 619.583649][T30416] RDS: rds_bind could not find a transport for 5d3a:71d9:5667:e006:dcdf:6395:1f21:5ce3, load rds_tcp or rds_rdma? [ 619.847069][T30440] xfrm1: entered promiscuous mode [ 619.865301][T30440] xfrm1: entered allmulticast mode [ 619.869828][T30435] can: request_module (can-proto-0) failed. [ 620.384769][T30479] netlink: 'syz.3.6680': attribute type 11 has an invalid length. [ 620.617990][T30501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.694515][T30501] netlink: zone id is out of range [ 620.700123][T30501] netlink: zone id is out of range [ 620.705699][T30501] netlink: zone id is out of range [ 620.710995][T30501] netlink: zone id is out of range [ 620.716667][T30501] netlink: zone id is out of range [ 620.722172][T30501] netlink: zone id is out of range [ 620.729674][T30501] netlink: zone id is out of range [ 620.734942][T30501] netlink: zone id is out of range [ 620.740826][T30501] netlink: zone id is out of range [ 621.144396][T30544] bridge_slave_0: left allmulticast mode [ 621.167014][T30544] bridge_slave_0: left promiscuous mode [ 621.173915][T30544] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.208705][T30544] bridge_slave_1: left allmulticast mode [ 621.214370][T30544] bridge_slave_1: left promiscuous mode [ 621.221111][T30544] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.233453][T30544] bond0: (slave bond_slave_0): Releasing backup interface [ 621.253349][T30544] bond0: (slave bond_slave_1): Releasing backup interface [ 621.278644][T30544] team0: Port device team_slave_0 removed [ 621.291477][T30544] team0: Port device team_slave_1 removed [ 621.301766][T30544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.310019][T30544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.318302][T30544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.327312][T30544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.336281][T30550] team0: Mode changed to "broadcast" [ 621.637040][T30570] syzkaller0: entered promiscuous mode [ 621.642633][T30570] syzkaller0: entered allmulticast mode [ 621.789364][T30596] __nla_validate_parse: 35 callbacks suppressed [ 621.789383][T30596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6714'. [ 621.976654][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6717'. [ 622.001955][T30613] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6718'. [ 622.021167][T30613] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6718'. [ 622.212910][T30629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6723'. [ 622.229197][T30630] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 622.276076][T30629] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6723'. [ 622.286593][T30637] xt_hashlimit: size too large, truncated to 1048576 [ 622.287798][T30630] bond2 (unregistering): Released all slaves [ 622.323401][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6723'. [ 622.325070][T30629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6723'. [ 622.354365][T30644] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6725'. [ 622.700297][T30655] 8021q: VLANs not supported on gre0 [ 622.728725][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6730'. [ 623.111108][ T6690] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.134604][ T6690] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.157079][ T6690] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.177906][T30685] syzkaller0: entered promiscuous mode [ 623.187723][T30685] syzkaller0: entered allmulticast mode [ 623.198526][ T6690] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.418271][T30710] sit0: entered promiscuous mode [ 623.453892][T30710] validate_nla: 13 callbacks suppressed [ 623.453913][T30710] netlink: 'syz.0.6747': attribute type 1 has an invalid length. [ 623.789941][T30732] pim6reg: entered allmulticast mode [ 623.836095][T30732] pim6reg: left allmulticast mode [ 624.216818][T30756] lo speed is unknown, defaulting to 1000 [ 624.223911][ T9] IPVS: starting estimator thread 0... [ 624.326958][T30766] IPVS: using max 33 ests per chain, 79200 per kthread [ 624.460621][T30777] netlink: 'syz.0.6768': attribute type 1 has an invalid length. [ 625.133817][T30794] netlink: 'syz.2.6773': attribute type 1 has an invalid length. [ 625.189336][T30794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.219705][T30809] bond3: (slave gretap1): making interface the new active one [ 625.231092][T30809] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 625.439593][T30820] bridge_slave_0: invalid flags given to default FDB implementation [ 625.543106][T30825] netlink: 'syz.2.6783': attribute type 1 has an invalid length. [ 625.546249][T30827] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 625.556427][T30825] netlink: 'syz.2.6783': attribute type 1 has an invalid length. [ 625.752982][T30841] bond2: option mode: unable to set because the bond device has slaves [ 625.909482][T30854] Cannot find set identified by id 65534 to match [ 626.000990][T30860] netlink: 'syz.2.6797': attribute type 4 has an invalid length. [ 626.118457][T30844] net_ratelimit: 50 callbacks suppressed [ 626.118479][T30844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 626.176674][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 90 seconds [ 626.187411][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 90 seconds [ 626.201414][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 90 seconds [ 626.221844][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 90 seconds [ 626.244508][T30866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.288788][T30871] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 626.297851][T30871] team0: Port device batadv1 added [ 626.422278][T30879] openvswitch: netlink: IP tunnel dst address not specified [ 626.679923][T30896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.790418][T23363] IPVS: starting estimator thread 0... [ 626.885880][T30915] IPVS: using max 30 ests per chain, 72000 per kthread [ 626.974739][T30931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.107680][T30945] batadv_slave_0: entered promiscuous mode [ 627.108074][T30941] __nla_validate_parse: 23 callbacks suppressed [ 627.108090][T30941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6819'. [ 627.171845][T30948] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 627.211564][T30948] syzkaller0: entered promiscuous mode [ 627.235125][T30948] syzkaller0: entered allmulticast mode [ 627.285721][T30949] batadv_slave_0: left promiscuous mode [ 627.306163][T30955] macsec2: entered promiscuous mode [ 627.331709][T30958] tipc: Enabling of bearer rejected, failed to enable media [ 627.853061][T30996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.889025][T31008] netlink: 'syz.3.6836': attribute type 1 has an invalid length. [ 627.898535][T31008] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6836'. [ 627.931334][T31008] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6836'. [ 627.950696][T31008] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6836'. [ 628.021776][T31022] netlink: 'syz.2.6841': attribute type 1 has an invalid length. [ 628.387093][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6848'. [ 628.404097][T31044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6848'. [ 628.421435][T31044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6848'. [ 628.501728][T31040] sit0: left promiscuous mode [ 628.704391][T31040] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 628.916645][T31065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.011837][T31074] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 629.049716][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6860'. [ 629.081107][T31076] Cannot find add_set index 65532 as target [ 629.168006][T31085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6862'. [ 629.188433][T31085] veth0_virt_wifi: entered promiscuous mode [ 629.250894][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6864'. [ 629.589418][T31114] netlink: 'syz.1.6871': attribute type 12 has an invalid length. [ 629.754092][ T9483] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 629.764008][T31117] x_tables: unsorted underflow at hook 4 [ 629.785985][ T9483] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 629.818053][ T9483] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 629.847869][ T9483] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 630.170233][T31138] netlink: 'syz.0.6877': attribute type 21 has an invalid length. [ 630.206168][T31138] netlink: 'syz.0.6877': attribute type 3 has an invalid length. [ 630.438810][ T30] audit: type=1804 audit(1774691161.982:12): pid=31165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6882" name="/newroot/81/memory.events" dev="tmpfs" ino=425 res=1 errno=0 [ 630.525157][ T30] audit: type=1800 audit(1774691162.002:13): pid=31165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6882" name="memory.events" dev="tmpfs" ino=425 res=0 errno=0 [ 630.560214][T31170] syzkaller0: entered promiscuous mode [ 630.572549][T31170] syzkaller0: entered allmulticast mode [ 630.630421][T31177] netlink: 'syz.0.6887': attribute type 3 has an invalid length. [ 630.662603][T31183] netlink: 'syz.0.6887': attribute type 3 has an invalid length. [ 630.708879][T31174] syzkaller0: entered promiscuous mode [ 630.714375][T31174] syzkaller0: entered allmulticast mode [ 630.990092][T31199] syzkaller0: entered allmulticast mode [ 631.024725][T31208] xt_HMARK: spi-set and port-set can't be combined [ 631.040076][T31203] syzkaller0: left allmulticast mode [ 631.221549][T31218] smc: removing net device team0 with user defined pnetid SYZ2 [ 631.240254][T31218] team0 (unregistering): Port device team_slave_0 removed [ 631.252504][T31218] team0 (unregistering): Port device team_slave_1 removed [ 631.366813][T31210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.820976][T31249] x_tables: duplicate underflow at hook 2 [ 631.861139][T31251] netlink: 'syz.1.6904': attribute type 21 has an invalid length. [ 631.877789][T31251] IPv6: NLM_F_CREATE should be specified when creating new route [ 631.895151][T31251] netlink: 'syz.1.6904': attribute type 1 has an invalid length. [ 632.198410][T31269] netlink: zone id is out of range [ 632.203549][T31269] netlink: zone id is out of range [ 632.219846][T31269] netlink: zone id is out of range [ 632.246268][T31269] netlink: zone id is out of range [ 632.261569][T31269] netlink: zone id is out of range [ 632.269790][T31269] netlink: zone id is out of range [ 632.278031][T31269] netlink: zone id is out of range [ 632.283309][T31269] netlink: zone id is out of range [ 632.288980][T31269] netlink: zone id is out of range [ 632.294241][T31269] netlink: zone id is out of range [ 632.654356][T31304] __nla_validate_parse: 21 callbacks suppressed [ 632.654374][T31304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6918'. [ 632.948471][T31321] bridge0: port 3(gretap0) entered blocking state [ 632.963986][T31321] bridge0: port 3(gretap0) entered disabled state [ 632.975327][T31321] gretap0: entered allmulticast mode [ 632.982511][T31321] gretap0: entered promiscuous mode [ 633.104336][T31327] netlink: 'syz.1.6924': attribute type 1 has an invalid length. [ 633.124272][T31327] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6924'. [ 633.138594][T31331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6926'. [ 633.192189][T31331] netlink: 'syz.2.6926': attribute type 1 has an invalid length. [ 633.215345][T31331] netlink: 'syz.2.6926': attribute type 2 has an invalid length. [ 633.254194][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6927'. [ 633.265954][T31338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6927'. [ 633.338809][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6927'. [ 633.689289][T31371] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 633.697067][T31371] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 633.816543][T31378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.854222][T31385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6942'. [ 633.864781][T31378] syzkaller1: entered promiscuous mode [ 633.871474][T31384] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6943'. [ 633.880908][T31378] syzkaller1: entered allmulticast mode [ 633.895361][T31384] NCSI netlink: No device for ifindex 813332851 [ 633.904118][T31378] syzkaller1: left promiscuous mode [ 633.911054][T31378] syzkaller1: left allmulticast mode [ 633.962202][T31378] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 634.006011][T31392] bond2: entered promiscuous mode [ 634.014598][T31392] bond2: entered allmulticast mode [ 634.119049][T31395] lo speed is unknown, defaulting to 1000 [ 634.329883][T31413] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 634.511206][T31437] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 634.687953][T31444] validate_nla: 5 callbacks suppressed [ 634.687986][T31444] netlink: 'syz.2.6956': attribute type 1 has an invalid length. [ 634.719493][T31444] netlink: 'syz.2.6956': attribute type 2 has an invalid length. [ 634.730150][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6958'. [ 634.746093][T31448] netlink: 'syz.4.6958': attribute type 10 has an invalid length. [ 634.750295][T31447] nbd: couldn't find device at index 0 [ 634.832461][T31450] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6959'. [ 635.061328][T31472] netlink: 'syz.3.6966': attribute type 12 has an invalid length. [ 635.464435][T31499] netlink: 'syz.0.6976': attribute type 1 has an invalid length. [ 636.302311][T31538] netlink: 'syz.2.6989': attribute type 1 has an invalid length. [ 636.938753][T31589] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 636.946508][T31589] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 637.264036][T31603] netlink: 'syz.3.7011': attribute type 5 has an invalid length. [ 637.727434][T31627] pimreg: entered allmulticast mode [ 638.001071][T31652] can: request_module (can-proto-0) failed. [ 638.069264][T31663] netlink: 'syz.4.7023': attribute type 2 has an invalid length. [ 638.086633][T31663] netlink: 'syz.4.7023': attribute type 8 has an invalid length. [ 638.094847][T31663] __nla_validate_parse: 49 callbacks suppressed [ 638.094865][T31663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7023'. [ 638.157793][T31667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7023'. [ 638.189413][T31663] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7023'. [ 638.311259][T31672] xt_cgroup: xt_cgroup: no path or classid specified [ 638.394655][T31679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7029'. [ 638.685808][T31709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7036'. [ 638.703623][T31710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7038'. [ 638.714696][T31709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7036'. [ 638.868580][T31721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7039'. [ 638.884186][T31725] syzkaller0: entered promiscuous mode [ 638.894132][T31725] syzkaller0: entered allmulticast mode [ 639.062769][T31732] syzkaller1: entered promiscuous mode [ 639.072056][T31732] syzkaller1: entered allmulticast mode [ 639.123474][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 639.134063][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 639.141373][T31741] sctp: [Deprecated]: syz.2.7048 (pid 31741) Use of int in max_burst socket option. [ 639.141373][T31741] Use struct sctp_assoc_value instead [ 639.159440][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 639.195500][T31746] net_ratelimit: 134 callbacks suppressed [ 639.195520][T31746] sock: sock_set_timeout: `syz.3.7049' (pid 31746) tries to set negative timeout [ 639.305815][T31749] Unsupported ieee802154 address type: 0 [ 639.365680][T31751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7051'. [ 639.549171][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7054'. [ 639.578411][T31739] infiniband syz2: set down [ 639.585257][T31739] infiniband syz2: added vxcan1 [ 639.636343][T31739] RDS/IB: syz2: added [ 639.642180][T31739] smc: adding ib device syz2 with port count 1 [ 639.666261][T31739] smc: ib device syz2 port 1 has no pnetid [ 639.697711][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 639.704649][ T6714] vxcan1 speed is unknown, defaulting to 1000 [ 639.716835][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 639.730385][T31770] block nbd4: Unsupported socket: should be TCP or UNIX. [ 639.761399][T31771] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 639.827715][T31771] bond4 (unregistering): Released all slaves [ 640.054928][T31779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.094378][T31779] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 640.135711][T31779] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 640.340185][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 641.038539][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 641.169188][T31858] pimreg3: entered allmulticast mode [ 641.175448][T31859] tipc: Enabling of bearer rejected, failed to enable media [ 641.398700][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 641.421588][T31863] vxcan2: entered allmulticast mode [ 641.638739][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 641.724024][T31876] vcan0 (unregistering): left allmulticast mode [ 641.830260][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 642.138454][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 642.138807][T31895] syzkaller0: entered promiscuous mode [ 642.162748][T31895] syzkaller0: entered allmulticast mode [ 642.369804][T31899] netlink: 'syz.3.7093': attribute type 2 has an invalid length. [ 642.385679][T31899] netlink: 'syz.3.7093': attribute type 1 has an invalid length. [ 642.519939][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 642.555604][T31912] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 642.573473][T31912] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 642.827215][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 643.162951][T31930] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 643.202671][T31739] vxcan1 speed is unknown, defaulting to 1000 [ 643.213439][T31930] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 643.265425][T31930] CPU: 0 UID: 0 PID: 31930 Comm: syz.4.7101 Not tainted syzkaller #0 PREEMPT(full) [ 643.265451][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.265463][T31930] Call Trace: [ 643.265471][T31930] [ 643.265480][T31930] dump_stack_lvl+0xe8/0x150 [ 643.265511][T31930] sysfs_warn_dup+0x8e/0xa0 [ 643.265538][T31930] sysfs_do_create_link_sd+0xc0/0x110 [ 643.265567][T31930] device_add_class_symlinks+0x1cf/0x240 [ 643.265596][T31930] device_add+0x475/0xb70 [ 643.265624][T31930] wiphy_register+0x1d73/0x2d50 [ 643.265669][T31930] ? __pfx_wiphy_register+0x10/0x10 [ 643.265695][T31930] ? __pfx_netdev_run_todo+0x10/0x10 [ 643.265718][T31930] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 643.265751][T31930] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 643.265780][T31930] ieee80211_register_hw+0x3562/0x4200 [ 643.265818][T31930] ? ieee80211_register_hw+0x1471/0x4200 [ 643.265853][T31930] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 643.265895][T31930] ? __hrtimer_setup+0x181/0x200 [ 643.265920][T31930] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 643.265950][T31930] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 643.266006][T31930] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 643.266028][T31930] ? kstrndup+0xbf/0x160 [ 643.266063][T31930] hwsim_new_radio_nl+0xf35/0x1bd0 [ 643.266110][T31930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.266145][T31930] ? rcu_is_watching+0x15/0xb0 [ 643.266171][T31930] ? trace_kmalloc+0x2a/0x110 [ 643.266199][T31930] ? __nla_parse+0x40/0x60 [ 643.266223][T31930] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 643.266256][T31930] genl_family_rcv_msg_doit+0x22a/0x330 [ 643.266286][T31930] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 643.266324][T31930] ? bpf_lsm_capable+0x9/0x20 [ 643.266347][T31930] ? security_capable+0x7e/0x2c0 [ 643.266386][T31930] genl_rcv_msg+0x61c/0x7a0 [ 643.266416][T31930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.266437][T31930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.266461][T31930] ? __lock_acquire+0x6b5/0x2cf0 [ 643.266497][T31930] netlink_rcv_skb+0x232/0x4b0 [ 643.266525][T31930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.266549][T31930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.266596][T31930] ? down_read+0x272/0x2e0 [ 643.266619][T31930] ? genl_rcv+0xd/0x40 [ 643.266643][T31930] genl_rcv+0x28/0x40 [ 643.266663][T31930] netlink_unicast+0x80f/0x9b0 [ 643.266698][T31930] ? __pfx_netlink_unicast+0x10/0x10 [ 643.266721][T31930] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 643.266745][T31930] ? netlink_sendmsg+0x650/0xb40 [ 643.266761][T31930] ? skb_put+0x11b/0x210 [ 643.266787][T31930] netlink_sendmsg+0x813/0xb40 [ 643.266815][T31930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.266838][T31930] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.266867][T31930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.266892][T31930] ____sys_sendmsg+0x972/0x9f0 [ 643.266925][T31930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.266958][T31930] ? import_iovec+0x73/0xa0 [ 643.266982][T31930] ___sys_sendmsg+0x2a5/0x360 [ 643.267011][T31930] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.267073][T31930] ? __fget_files+0x2a/0x420 [ 643.267099][T31930] ? __fget_files+0x3a0/0x420 [ 643.267138][T31930] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.267163][T31930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.267184][T31930] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 643.267220][T31930] ? rcu_is_watching+0x15/0xb0 [ 643.267259][T31930] do_syscall_64+0x14d/0xf80 [ 643.267279][T31930] ? trace_irq_disable+0x3b/0x150 [ 643.267296][T31930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.267315][T31930] ? clear_bhb_loop+0x40/0x90 [ 643.267339][T31930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.267363][T31930] RIP: 0033:0x7fd7c3d9c799 [ 643.267382][T31930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.267398][T31930] RSP: 002b:00007fd7c1fcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.267419][T31930] RAX: ffffffffffffffda RBX: 00007fd7c4016090 RCX: 00007fd7c3d9c799 [ 643.267433][T31930] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 643.267444][T31930] RBP: 00007fd7c3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 643.267457][T31930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.267468][T31930] R13: 00007fd7c4016128 R14: 00007fd7c4016090 R15: 00007ffcf590ebb8 [ 643.267501][T31930] [ 643.708118][T31938] netlink: 'syz.3.7103': attribute type 58 has an invalid length. [ 643.716137][T31938] __nla_validate_parse: 8 callbacks suppressed [ 643.716155][T31938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7103'. [ 643.769189][T31930] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 643.782268][T31930] CPU: 1 UID: 0 PID: 31930 Comm: syz.4.7101 Not tainted syzkaller #0 PREEMPT(full) [ 643.782291][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.782302][T31930] Call Trace: [ 643.782310][T31930] [ 643.782319][T31930] dump_stack_lvl+0xe8/0x150 [ 643.782350][T31930] sysfs_warn_dup+0x8e/0xa0 [ 643.782381][T31930] sysfs_do_create_link_sd+0xc0/0x110 [ 643.782410][T31930] device_add_class_symlinks+0x1cf/0x240 [ 643.782437][T31930] device_add+0x475/0xb70 [ 643.782463][T31930] wiphy_register+0x1d73/0x2d50 [ 643.782509][T31930] ? __pfx_wiphy_register+0x10/0x10 [ 643.782536][T31930] ? __pfx_netdev_run_todo+0x10/0x10 [ 643.782560][T31930] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 643.782593][T31930] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 643.782621][T31930] ieee80211_register_hw+0x3562/0x4200 [ 643.782660][T31930] ? ieee80211_register_hw+0x1471/0x4200 [ 643.782695][T31930] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 643.782736][T31930] ? __hrtimer_setup+0x181/0x200 [ 643.782761][T31930] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 643.782791][T31930] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 643.782846][T31930] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 643.782868][T31930] ? kstrndup+0xbf/0x160 [ 643.782900][T31930] hwsim_new_radio_nl+0xf35/0x1bd0 [ 643.782962][T31930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.782997][T31930] ? rcu_is_watching+0x15/0xb0 [ 643.783024][T31930] ? trace_kmalloc+0x2a/0x110 [ 643.783051][T31930] ? __nla_parse+0x40/0x60 [ 643.783075][T31930] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 643.783115][T31930] genl_family_rcv_msg_doit+0x22a/0x330 [ 643.783150][T31930] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 643.783187][T31930] ? bpf_lsm_capable+0x9/0x20 [ 643.783211][T31930] ? security_capable+0x7e/0x2c0 [ 643.783248][T31930] genl_rcv_msg+0x61c/0x7a0 [ 643.783278][T31930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.783299][T31930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.783323][T31930] ? __lock_acquire+0x6b5/0x2cf0 [ 643.783358][T31930] netlink_rcv_skb+0x232/0x4b0 [ 643.783388][T31930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.783412][T31930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.783458][T31930] ? down_read+0x272/0x2e0 [ 643.783480][T31930] ? genl_rcv+0xd/0x40 [ 643.783503][T31930] genl_rcv+0x28/0x40 [ 643.783523][T31930] netlink_unicast+0x80f/0x9b0 [ 643.783558][T31930] ? __pfx_netlink_unicast+0x10/0x10 [ 643.783581][T31930] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 643.783605][T31930] ? netlink_sendmsg+0x650/0xb40 [ 643.783621][T31930] ? skb_put+0x11b/0x210 [ 643.783646][T31930] netlink_sendmsg+0x813/0xb40 [ 643.783674][T31930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.783697][T31930] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.783726][T31930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.783750][T31930] ____sys_sendmsg+0x972/0x9f0 [ 643.783784][T31930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.783816][T31930] ? import_iovec+0x73/0xa0 [ 643.783841][T31930] ___sys_sendmsg+0x2a5/0x360 [ 643.783870][T31930] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.783932][T31930] ? __fget_files+0x2a/0x420 [ 643.783957][T31930] ? __fget_files+0x3a0/0x420 [ 643.783994][T31930] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.784018][T31930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.784038][T31930] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 643.784072][T31930] ? rcu_is_watching+0x15/0xb0 [ 643.784117][T31930] do_syscall_64+0x14d/0xf80 [ 643.784138][T31930] ? trace_irq_disable+0x3b/0x150 [ 643.784154][T31930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.784173][T31930] ? clear_bhb_loop+0x40/0x90 [ 643.784196][T31930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.784214][T31930] RIP: 0033:0x7fd7c3d9c799 [ 643.784232][T31930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.784247][T31930] RSP: 002b:00007fd7c1fcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.784268][T31930] RAX: ffffffffffffffda RBX: 00007fd7c4016090 RCX: 00007fd7c3d9c799 [ 643.784281][T31930] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 643.784293][T31930] RBP: 00007fd7c3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 643.784305][T31930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.784316][T31930] R13: 00007fd7c4016128 R14: 00007fd7c4016090 R15: 00007ffcf590ebb8 [ 643.784349][T31930] [ 644.225982][T31865] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 644.358431][T31945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7105'. [ 644.439322][T31940] netlink: 'syz.0.7104': attribute type 9 has an invalid length. [ 644.447561][T31940] netlink: 'syz.0.7104': attribute type 11 has an invalid length. [ 644.455974][T31940] netlink: 'syz.0.7104': attribute type 12 has an invalid length. [ 644.467448][T31940] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7104'. [ 644.496428][T31940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7104'. [ 644.556500][T31955] netlink: 'syz.4.7110': attribute type 4 has an invalid length. [ 644.614168][T31965] atomic_op ffff888067fc3998 conn xmit_atomic 0000000000000000 [ 644.635974][T31962] syzkaller0: left promiscuous mode [ 644.665098][T31962] syzkaller0: left allmulticast mode [ 644.731443][T31973] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7115'. [ 644.847773][T31981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 644.959470][T31984] lo speed is unknown, defaulting to 1000 [ 644.969001][T31984] vxcan1 speed is unknown, defaulting to 1000 [ 645.129247][T31997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7121'. [ 645.281789][T32002] syzkaller0: entered promiscuous mode [ 645.289648][T32002] syzkaller0: entered allmulticast mode [ 645.372852][T32011] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7128'. [ 645.952414][T32049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7137'. [ 646.112815][T32058] netlink: 'syz.1.7139': attribute type 1 has an invalid length. [ 646.121184][T32058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7139'. [ 646.163042][T32060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.220418][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7141'. [ 646.344722][T32071] syzkaller1: entered promiscuous mode [ 646.350755][T32071] syzkaller1: entered allmulticast mode [ 646.410388][T32075] erspan0: entered promiscuous mode [ 646.924227][T32113] netlink: 'syz.4.7158': attribute type 83 has an invalid length. [ 646.982959][T32113] netlink: 'syz.4.7158': attribute type 83 has an invalid length. [ 647.057754][T32126] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 647.091076][T32126] bond3 (unregistering): Released all slaves [ 656.236335][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 120 seconds [ 656.247297][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 120 seconds [ 656.258527][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 120 seconds [ 656.269889][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 120 seconds [ 668.866382][T32159] __nla_validate_parse: 7 callbacks suppressed [ 668.866402][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7172'. [ 668.888124][T32159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7172'. [ 668.905295][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7171'. [ 669.021544][T32162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'. [ 669.050345][T32162] validate_nla: 1 callbacks suppressed [ 669.050362][T32162] netlink: 'syz.0.7171': attribute type 13 has an invalid length. [ 669.066397][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7171'. [ 669.126677][ T1108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.145682][T32162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'. [ 669.154848][ T1108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.175918][T32162] netlink: 'syz.0.7171': attribute type 13 has an invalid length. [ 669.205106][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7171'. [ 669.214530][ T1108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.230036][ T1108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.338540][T32190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7182'. [ 669.753816][T32211] netlink: 'syz.0.7189': attribute type 17 has an invalid length. [ 669.765040][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7189'. [ 669.773985][T32211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7189'. [ 670.088057][T32236] netlink: zone id is out of range [ 670.093208][T32236] netlink: del zone limit has 4 unknown bytes [ 670.171698][T32241] tipc: MTU too low for tipc bearer [ 670.234694][T32247] xt_policy: too many policy elements [ 670.582138][T32282] netlink: 'syz.4.7208': attribute type 2 has an invalid length. [ 670.694881][T32290] openvswitch: netlink: IP tunnel dst address not specified [ 670.810487][T32297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.828507][T32299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 670.984120][T32309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.801340][T32383] netlink: 'syz.3.7244': attribute type 1 has an invalid length. [ 671.816691][T32383] netlink: 'syz.3.7244': attribute type 3 has an invalid length. [ 671.834506][T32383] NCSI netlink: No device for ifindex 813332851 [ 671.870101][T32389] ipt_rpfilter: unknown options [ 671.880380][T32389] netlink: 'syz.0.7246': attribute type 13 has an invalid length. [ 671.890415][T32389] gretap0: refused to change device tx_queue_len [ 671.897973][T32389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 672.080162][T32402] IPv6: Can't replace route, no match found [ 672.204682][T32414] IPVS: length: 140 != 8 [ 672.278502][T32419] xt_TCPMSS: Only works on TCP SYN packets [ 672.808973][T32445] sctp: [Deprecated]: syz.2.7260 (pid 32445) Use of int in maxseg socket option. [ 672.808973][T32445] Use struct sctp_assoc_value instead [ 672.928211][T32460] x_tables: unsorted underflow at hook 2 [ 673.027453][T32472] netlink: 'syz.1.7269': attribute type 83 has an invalid length. [ 673.029399][T32473] netlink: 'syz.4.7270': attribute type 10 has an invalid length. [ 673.207447][T32491] netlink: 'syz.4.7273': attribute type 1 has an invalid length. [ 673.328750][T32491] bond3: entered promiscuous mode [ 673.334234][T32491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 673.398372][T32503] bond3: (slave bridge6): making interface the new active one [ 673.423853][T32503] bridge6: entered promiscuous mode [ 673.434736][T32503] bridge6: left promiscuous mode [ 673.668348][T32521] veth1_macvtap: left promiscuous mode [ 673.677560][T32521] macsec0: entered promiscuous mode [ 673.682862][T32521] macsec0: entered allmulticast mode [ 673.725679][T32521] veth1_macvtap: entered promiscuous mode [ 673.731446][T32521] veth1_macvtap: entered allmulticast mode [ 673.748829][T32521] macsec0: left promiscuous mode [ 673.758402][T32521] macsec0: left allmulticast mode [ 673.768036][T32521] veth1_macvtap: left allmulticast mode [ 674.088986][T32547] validate_nla: 1 callbacks suppressed [ 674.089005][T32547] netlink: 'syz.3.7285': attribute type 3 has an invalid length. [ 674.128320][T32547] netlink: 'syz.3.7285': attribute type 3 has an invalid length. [ 674.443386][T32556] __nla_validate_parse: 13 callbacks suppressed [ 674.443407][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7286'. [ 674.688818][T32570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7290'. [ 674.713919][T32570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7290'. [ 674.749670][T32570] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7290'. [ 674.759357][T32570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7290'. [ 674.787840][T32576] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7292'. [ 674.823489][T32580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7293'. [ 674.865286][T32580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7293'. [ 675.126006][T32598] netlink: 'syz.3.7298': attribute type 4 has an invalid length. [ 675.195919][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 675.244334][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7296'. [ 675.409320][T32623] netlink: 'syz.3.7300': attribute type 10 has an invalid length. [ 675.581465][T32632] syzkaller0: entered promiscuous mode [ 675.587888][T32632] syzkaller0: entered allmulticast mode [ 675.610125][T32632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7303'. [ 675.782064][T32645] netlink: 'syz.1.7304': attribute type 2 has an invalid length. [ 675.792389][T32645] netlink: 'syz.1.7304': attribute type 2 has an invalid length. [ 675.914283][ T6689] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.942730][ T6689] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.962959][ T6689] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.982601][ T6689] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.163442][T32655] bond1: option resend_igmp: invalid value (32767) [ 676.171422][T32655] bond1: option resend_igmp: allowed values 0 - 255 [ 676.214531][T32655] bond1 (unregistering): Released all slaves [ 676.222206][T32674] IPv6: NLM_F_CREATE should be specified when creating new route [ 676.659735][T32700] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 676.867730][T32715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.556112][T32757] bridge_slave_0 (unregistering): left allmulticast mode [ 677.575493][T32757] bridge_slave_0 (unregistering): left promiscuous mode [ 677.586881][T32757] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.609321][T32765] netlink: 'syz.2.7340': attribute type 1 has an invalid length. [ 677.634647][T32765] netlink: 'syz.2.7340': attribute type 2 has an invalid length. [ 677.671211][T32765] veth0_to_hsr: entered promiscuous mode [ 677.678835][T32765] veth0_to_hsr: left promiscuous mode [ 677.850745][T32761] lo speed is unknown, defaulting to 1000 [ 677.879742][T32761] vxcan1 speed is unknown, defaulting to 1000 [ 677.894064][ T313] netlink: 'syz.2.7345': attribute type 2 has an invalid length. [ 678.150539][ T334] netlink: 'syz.0.7352': attribute type 1 has an invalid length. [ 678.198892][ T328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.443534][ T416] validate_nla: 1 callbacks suppressed [ 679.443554][ T416] netlink: 'syz.3.7380': attribute type 21 has an invalid length. [ 679.584468][ T427] __nla_validate_parse: 18 callbacks suppressed [ 679.584488][ T427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7382'. [ 679.661770][ T433] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7385'. [ 679.758973][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7386'. [ 679.924899][ T449] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 679.944190][ T449] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7390'. [ 679.978240][ T454] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7391'. [ 679.987628][ T454] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7391'. [ 680.010358][ T453] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7391'. [ 680.038618][ T453] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7391'. [ 680.086269][ T457] IPv6: sit1: Disabled Multicast RS [ 680.155874][ T464] netlink: 'syz.1.7395': attribute type 32 has an invalid length. [ 680.322997][ T479] netlink: 'syz.1.7396': attribute type 10 has an invalid length. [ 680.341688][ T479] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 680.353543][ T479] batman_adv: batadv0: Adding interface: netdevsim0 [ 680.381327][ T479] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 680.431291][ T479] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 680.670319][ T504] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003 [ 680.678682][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7405'. [ 680.807318][ T518] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7410'. [ 680.873766][ T515] ipvlan0: entered allmulticast mode [ 680.879696][ T515] batadv_slave_1: entered allmulticast mode [ 681.169047][ T552] netlink: 'syz.3.7418': attribute type 64 has an invalid length. [ 681.279476][ T555] syzkaller1: entered promiscuous mode [ 681.290358][ T561] netlink: 'syz.4.7420': attribute type 5 has an invalid length. [ 681.297340][ T555] syzkaller1: entered allmulticast mode [ 681.379574][ T563] delete_channel: no stack [ 681.477144][ T561] netlink: 'syz.4.7420': attribute type 30 has an invalid length. [ 681.555080][ T574] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 681.583198][ T572] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 681.602998][ T572] bond7 (unregistering): Released all slaves [ 681.838186][ T600] netlink: 'syz.4.7433': attribute type 8 has an invalid length. [ 681.888640][ T600] bond0: entered promiscuous mode [ 681.912982][ T604] siw: device registration error -23 [ 681.922588][ T600] bond0: left promiscuous mode [ 682.187265][ T625] netlink: 'syz.0.7443': attribute type 1 has an invalid length. [ 682.317943][ T633] bond2: (slave veth0_to_bond): Releasing active interface [ 682.354030][ T633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 682.533340][ T655] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20002 [ 682.977832][ T675] syzkaller1: entered promiscuous mode [ 682.983340][ T675] syzkaller1: entered allmulticast mode [ 683.001583][ T675] dvmrp0: entered allmulticast mode [ 683.485934][ T705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 683.604827][ T712] netlink: 'syz.0.7465': attribute type 21 has an invalid length. [ 683.728748][ T723] netlink: 'syz.1.7470': attribute type 1 has an invalid length. [ 683.768805][ T723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.784440][ T723] vlan2: entered promiscuous mode [ 683.790383][ T723] bond1: entered promiscuous mode [ 683.796423][ T723] vlan2: entered allmulticast mode [ 683.801679][ T723] bond1: entered allmulticast mode [ 683.838240][ T723] bond1: (slave bridge4): making interface the new active one [ 683.846047][ T723] bridge4: entered promiscuous mode [ 683.851601][ T723] bridge4: entered allmulticast mode [ 683.858180][ T723] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 684.232656][ T755] lo speed is unknown, defaulting to 1000 [ 684.247465][ T755] vxcan1 speed is unknown, defaulting to 1000 [ 684.444730][ T768] syzkaller0: entered promiscuous mode [ 684.450420][ T768] syzkaller0: entered allmulticast mode [ 684.736684][ T781] __nla_validate_parse: 108 callbacks suppressed [ 684.736705][ T781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7488'. [ 684.840888][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7490'. [ 684.850286][ T787] openvswitch: netlink: Flow actions attr not present in new flow. [ 684.953064][ T795] netlink: 'syz.2.7493': attribute type 11 has an invalid length. [ 684.962025][ T795] validate_nla: 3 callbacks suppressed [ 684.962041][ T795] netlink: 'syz.2.7493': attribute type 4 has an invalid length. [ 684.975680][ T795] netlink: 'syz.2.7493': attribute type 5 has an invalid length. [ 684.983433][ T795] netlink: 'syz.2.7493': attribute type 6 has an invalid length. [ 684.995070][ T795] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.7493'. [ 685.009004][ T798] syzkaller0: entered promiscuous mode [ 685.014617][ T798] syzkaller0: entered allmulticast mode [ 685.346786][ T816] netlink: 'syz.0.7499': attribute type 1 has an invalid length. [ 685.482433][ T816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.681957][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.752840][ T846] netlink: zone id is out of range [ 685.768554][ T846] netlink: zone id is out of range [ 685.780602][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7505'. [ 685.791280][ T846] netlink: zone id is out of range [ 685.799950][ T846] netlink: zone id is out of range [ 685.806769][ T846] netlink: zone id is out of range [ 685.812128][ T846] netlink: zone id is out of range [ 686.119571][ T872] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.127323][ T872] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.304132][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7516'. [ 686.335242][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 150 seconds [ 686.343784][ T883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7516'. [ 686.347368][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 150 seconds [ 686.367218][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 150 seconds [ 686.371944][ T886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7517'. [ 686.378714][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 150 seconds [ 686.425142][ T883] geneve2: entered promiscuous mode [ 686.430398][ T883] geneve2: entered allmulticast mode [ 686.528926][ T897] netlink: 'syz.3.7519': attribute type 3 has an invalid length. [ 686.534170][ T890] pimreg: entered allmulticast mode [ 686.887354][ T922] delete_channel: no stack [ 686.904036][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7523'. [ 687.131632][ T940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7526'. [ 687.757767][ T5839] Bluetooth: hci0: command 0x0c20 tx timeout [ 688.541640][ T952] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7529'. [ 688.763907][ T965] netlink: 'syz.3.7534': attribute type 11 has an invalid length. [ 689.029541][ T993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 689.230896][ T1012] netlink: 'syz.2.7546': attribute type 1 has an invalid length. [ 689.264644][ T1011] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 689.278052][ T1011] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 689.298959][ T1011] team0: Failed to send options change via netlink (err -105) [ 689.327270][ T1011] team0: Port device batadv1 added [ 689.778297][ T1057] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 690.525492][ T1120] __nla_validate_parse: 6 callbacks suppressed [ 690.525519][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7576'. [ 690.936547][ T1159] team_slave_0: entered allmulticast mode [ 690.954220][ T1159] team_slave_0: entered promiscuous mode [ 691.215577][ T1172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7588'. [ 691.226355][ T1172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7588'. [ 691.312531][ T1174] lo speed is unknown, defaulting to 1000 [ 691.321243][ T1174] vxcan1 speed is unknown, defaulting to 1000 [ 693.751307][ T1154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.947636][ T1194] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7594'. [ 693.978203][ T1194] net_ratelimit: 188 callbacks suppressed [ 693.978223][ T1194] openvswitch: netlink: Flow key attr not present in new flow. [ 694.192657][ T1203] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7597'. [ 694.334461][ T1217] pim6reg: entered allmulticast mode [ 694.348193][ T1217] pim6reg: left allmulticast mode [ 694.570232][ T1234] syzkaller0: entered promiscuous mode [ 694.579403][ T1234] syzkaller0: entered allmulticast mode [ 694.585960][ T1237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7608'. [ 694.650675][ T1246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7608'. [ 694.669786][ T1246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7608'. [ 695.050853][ T1275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7620'. [ 695.127788][ T1275] bond5: entered promiscuous mode [ 695.133232][ T1275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.339930][ T1299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7625'. [ 695.357241][ T1299] openvswitch: netlink: Flow key attr not present in new flow. [ 695.404682][ T1282] bond_slave_1: left allmulticast mode [ 695.425208][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.440949][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.515639][ T1282] vlan2: left promiscuous mode [ 695.520541][ T1282] bond1: left promiscuous mode [ 695.525703][ T1282] bridge4: left promiscuous mode [ 695.530919][ T1282] vlan2: left allmulticast mode [ 695.536911][ T1282] bond1: left allmulticast mode [ 695.541854][ T1282] bridge4: left allmulticast mode [ 695.567314][ T1108] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.585390][ T1108] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.596596][ T1108] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.607568][ T1108] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.640340][ T1302] syzkaller0: left allmulticast mode [ 695.647380][ T1108] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.678437][ T1108] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.694206][ T1108] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.705346][ T1108] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.764904][ T1312] netlink: 'syz.1.7628': attribute type 11 has an invalid length. [ 695.900799][ T1332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7633'. [ 696.003889][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.010265][ T1338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7635'. [ 696.082995][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.090702][ T1342] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7636'. [ 696.107169][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7635'. [ 696.122800][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7635'. [ 696.160851][ T1351] sctp: [Deprecated]: syz.4.7638 (pid 1351) Use of int in max_burst socket option deprecated. [ 696.160851][ T1351] Use struct sctp_assoc_value instead [ 696.208321][ T1354] netlink: 'syz.2.7635': attribute type 1 has an invalid length. [ 696.245401][T27958] Bluetooth: hci0: command 0x0c20 tx timeout [ 696.246147][T21506] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 696.266272][ T1342] syzkaller0: entered promiscuous mode [ 696.271929][ T1342] syzkaller0: entered allmulticast mode [ 696.319549][ T1338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7635'. [ 696.350895][ T1359] bond5: (slave veth5): Enslaving as an active interface with a down link [ 696.366568][ T1363] gretap2: entered promiscuous mode [ 696.387154][ T1363] batman_adv: batadv0: Adding interface: gretap2 [ 696.393596][ T1363] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 696.414360][ T1363] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 696.428452][ T1338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 696.495213][ T1357] syzkaller1: entered promiscuous mode [ 696.500710][ T1357] syzkaller1: entered allmulticast mode [ 696.588857][ T1373] x_tables: duplicate underflow at hook 1 [ 696.923751][ T1398] netlink: 344 bytes leftover after parsing attributes in process `syz.3.7649'. [ 696.938182][ T1401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7650'. [ 696.943686][ T1398] netlink: 'syz.3.7649': attribute type 1 has an invalid length. [ 696.956203][ T1401] netlink: 'syz.4.7650': attribute type 10 has an invalid length. [ 697.035476][ T1404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7651'. [ 698.000790][T21506] Bluetooth: hci5: command 0x0406 tx timeout [ 698.395834][ T1398] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 698.397172][ T1401] veth0_macvtap: left promiscuous mode [ 698.456036][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7652'. [ 698.493993][ T1418] netlink: 'syz.4.7653': attribute type 29 has an invalid length. [ 698.503504][ T1418] netlink: 'syz.4.7653': attribute type 29 has an invalid length. [ 698.513992][ T1418] netlink: 'syz.4.7653': attribute type 32 has an invalid length. [ 698.627221][ T1422] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 698.679334][ T1434] netlink: 'syz.1.7656': attribute type 1 has an invalid length. [ 698.783362][ T1442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.803104][ T1446] x_tables: duplicate underflow at hook 2 [ 698.810406][ T1434] bond3: entered promiscuous mode [ 698.817156][ T1434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 698.925490][ T1453] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 699.018122][ T1455] Bluetooth: MGMT ver 1.23 [ 699.278560][ T1465] nbd: socks must be embedded in a SOCK_ITEM attr [ 699.645921][ T6689] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.799735][ T6689] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.811233][ T6689] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.920707][ T6689] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.103405][ T1526] veth0_macvtap: entered promiscuous mode [ 700.119488][ T1526] macvtap1: entered allmulticast mode [ 700.157333][ T1526] veth0_macvtap: entered allmulticast mode [ 700.176486][ T1530] veth0_vlan: Caught tx_queue_len zero misconfig [ 700.913387][ T1585] syzkaller0: entered allmulticast mode [ 701.071702][ T1601] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 701.080366][ T1600] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 701.178990][ T1611] __nla_validate_parse: 14 callbacks suppressed [ 701.179008][ T1611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7704'. [ 701.530659][ T6752] IPVS: starting estimator thread 0... [ 701.566054][ T1646] netlink: 'syz.1.7714': attribute type 1 has an invalid length. [ 701.584056][ T1655] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7717'. [ 701.636405][ T1650] IPVS: using max 28 ests per chain, 67200 per kthread [ 701.737809][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7720'. [ 701.768339][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7721'. [ 701.787472][ T1661] syzkaller0: entered promiscuous mode [ 701.792975][ T1661] syzkaller0: entered allmulticast mode [ 701.814381][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7720'. [ 702.283350][ T1698] openvswitch: netlink: IP tunnel dst address not specified [ 702.316554][ T1702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.335361][ T1702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.348369][ T1702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.385925][ T1702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.419533][ T1709] netlink: 'syz.0.7733': attribute type 4 has an invalid length. [ 702.439551][ T1709] netlink: 'syz.0.7733': attribute type 3 has an invalid length. [ 702.448505][ T1713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7734'. [ 702.455366][ T1709] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7733'. [ 702.458499][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7734'. [ 702.479108][ T1716] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 702.548536][ T1717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7733'. [ 702.584796][ T1725] gre0: entered promiscuous mode [ 702.590029][ T1725] gre0: entered allmulticast mode [ 702.604223][ T1725] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7737'. [ 702.824513][ T1744] netlink: 'syz.4.7742': attribute type 16 has an invalid length. [ 703.076727][ T1746] gretap0: left allmulticast mode [ 703.082538][ T1746] gretap0: left promiscuous mode [ 703.089012][ T1746] bridge0: port 3(gretap0) entered disabled state [ 703.100478][ T1746] bridge_slave_1: left allmulticast mode [ 703.107212][ T1746] bridge_slave_1: left promiscuous mode [ 703.113126][ T1746] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.198647][ T1754] gretap1: entered promiscuous mode [ 703.203953][ T1754] gretap1: entered allmulticast mode [ 703.256849][ T1759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.851567][ T1790] syzkaller0: entered promiscuous mode [ 703.857276][ T1790] syzkaller0: entered allmulticast mode [ 704.136282][ T1808] SET target dimension over the limit! [ 704.425974][ T1823] netlink: 'syz.3.7761': attribute type 11 has an invalid length. [ 704.434271][ T1823] netlink: 'syz.3.7761': attribute type 4 has an invalid length. [ 704.449649][ T1823] netlink: 'syz.3.7761': attribute type 5 has an invalid length. [ 704.466266][ T1823] netlink: 'syz.3.7761': attribute type 6 has an invalid length. [ 705.502957][ T1836] xt_ecn: cannot match TCP bits for non-tcp packets [ 706.468522][ T1865] xt_socket: unknown flags 0x50 [ 706.509080][ T1873] ip6tnl0: Caught tx_queue_len zero misconfig [ 706.629710][ T1882] lo: Caught tx_queue_len zero misconfig [ 706.645973][ T1879] netlink: 'syz.4.7773': attribute type 1 has an invalid length. [ 706.719515][ T1879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 706.764790][ T1888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 706.774128][ T1888] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 706.787101][ T1888] bond5: (slave vcan1): Error -95 calling set_mac_address [ 706.813566][ T1897] __nla_validate_parse: 15 callbacks suppressed [ 706.813585][ T1897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7773'. [ 706.858229][ T1879] bond5: (slave gretap2): making interface the new active one [ 706.885924][ T1879] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 706.907777][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7777'. [ 706.995760][ T1908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7777'. [ 707.039208][ T1908] mac80211_hwsim hwsim84 wlan1: entered promiscuous mode [ 707.078986][ T1908] mac80211_hwsim hwsim84 wlan1: entered allmulticast mode [ 707.606607][ T1946] nbd4: detected capacity change from 0 to 127 [ 707.663069][ T5839] block nbd4: Receive control failed (result -104) [ 707.692280][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7792'. [ 707.804543][ T1969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7793'. [ 707.836212][ T1970] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7795'. [ 707.934371][ T1976] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7797'. [ 707.954309][ T1975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7797'. [ 708.019139][ T1975] vlan3: entered allmulticast mode [ 708.035770][ T1975] gretap0: entered allmulticast mode [ 708.096182][ T1987] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7800'. [ 708.106335][ T1979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7798'. [ 708.236437][ T5839] Bluetooth: hci1: command 0x040f tx timeout [ 708.607176][ T2016] xt_hashlimit: size too large, truncated to 1048576 [ 708.678997][ T2021] openvswitch: netlink: Flow actions attr not present in new flow. [ 709.105886][ T2050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.345957][ T2065] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 709.522586][ T2074] tipc: Started in network mode [ 709.535595][ T2074] tipc: Node identity b6886db4da47, cluster identity 4711 [ 709.546291][ T2075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.555621][ T2074] tipc: Enabled bearer , priority 11 [ 710.398858][ T2150] netlink: 'syz.4.7847': attribute type 1 has an invalid length. [ 710.441664][ T2150] 8021q: adding VLAN 0 to HW filter on device bond6 [ 710.572165][ T2162] xt_TCPMSS: Only works on TCP SYN packets [ 710.578320][ T29] tipc: Node number set to 1825533364 [ 710.746557][ T2164] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 710.780665][ T2164] bond7: (slave lo): Enslaving as an active interface with an up link [ 710.807177][ T2164] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 710.888333][ T2169] lo speed is unknown, defaulting to 1000 [ 710.911505][ T2169] vxcan1 speed is unknown, defaulting to 1000 [ 711.072423][ T2184] bond8: entered promiscuous mode [ 711.096031][ T2184] bond8: entered allmulticast mode [ 711.101760][ T2184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 711.118083][ T2189] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 711.126098][ T2189] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 711.443819][ T2203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.635825][ T2213] IPv6: NLM_F_CREATE should be specified when creating new route [ 711.779071][ T2221] netlink: 'syz.2.7868': attribute type 1 has an invalid length. [ 712.196623][ T2240] pim6reg: entered allmulticast mode [ 712.202153][ T2245] pim6reg: left allmulticast mode [ 712.223039][ T2245] geneve0: left allmulticast mode [ 712.570836][ T2275] bond6 (unregistering): Released all slaves [ 712.931654][ T2311] __nla_validate_parse: 15 callbacks suppressed [ 712.931673][ T2311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7889'. [ 713.063583][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7893'. [ 713.214091][ T2325] ip6gre1: entered allmulticast mode [ 713.281378][ T2330] gre0: entered promiscuous mode [ 713.308804][ T2330] gre0: entered allmulticast mode [ 713.330001][ T2339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7898'. [ 713.334856][ T2330] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7897'. [ 713.358395][T27958] Bluetooth: hci3: command 0x0406 tx timeout [ 713.375800][ T2330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.393423][ T2330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.421824][ T2330] batman_adv: batadv0: Removing interface: gretap2 [ 713.424298][ T2339] nbd: socks must be embedded in a SOCK_ITEM attr [ 713.468898][ T2341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7898'. [ 713.484092][ T2350] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 713.494174][ T2341] nbd: socks must be embedded in a SOCK_ITEM attr [ 713.512216][T27759] block nbd64: NBD_DISCONNECT [ 713.580525][ T2354] netlink: 'syz.4.7903': attribute type 2 has an invalid length. [ 713.589108][ T2354] netlink: 'syz.4.7903': attribute type 11 has an invalid length. [ 713.599827][ T2354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7903'. [ 713.633502][ T2356] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 713.823155][T27759] udevd[27759]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 713.860950][ T2373] tipc: Enabling of bearer rejected, failed to enable media [ 713.887286][ T2374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7908'. [ 713.907544][ T2371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7909'. [ 713.917595][ T2371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7909'. [ 713.919844][ T2374] bridge4: entered promiscuous mode [ 713.936862][ T2374] bridge4: entered allmulticast mode [ 713.992042][ T2379] bond0: entered promiscuous mode [ 714.012801][ T2381] netlink: 'syz.1.7912': attribute type 2 has an invalid length. [ 714.018782][ T2379] bond0: entered allmulticast mode [ 714.040370][ T2379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.053994][ T2386] netlink: 'syz.3.7913': attribute type 11 has an invalid length. [ 714.073097][ T2381] syzkaller0: entered promiscuous mode [ 714.075434][ T2387] netlink: 'syz.3.7913': attribute type 11 has an invalid length. [ 714.079185][ T2381] syzkaller0: entered allmulticast mode [ 714.166511][ T2390] nbd: couldn't find a device at index 0 [ 714.381263][ T2408] gre2: entered promiscuous mode [ 714.394563][ T2408] gre2: entered allmulticast mode [ 714.712656][ T2427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7923'. [ 714.995307][ T2443] netlink: 'syz.1.7929': attribute type 1 has an invalid length. [ 715.003647][ T2443] netlink: 'syz.1.7929': attribute type 1 has an invalid length. [ 715.151094][ T2458] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 715.289033][ T2469] netlink: 'syz.2.7936': attribute type 1 has an invalid length. [ 715.335653][ T2470] netlink: 'syz.0.7935': attribute type 1 has an invalid length. [ 715.385235][ T2470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.948610][ T2484] nbd: must specify an index to disconnect [ 716.397041][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 180 seconds [ 716.409682][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 180 seconds [ 716.422161][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 180 seconds [ 716.433617][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 180 seconds [ 716.444612][ T2527] hsr_slave_0: left promiscuous mode [ 716.451640][ T2527] hsr_slave_1: left promiscuous mode [ 716.491353][ T2535] veth1_to_batadv: mtu less than device minimum [ 716.699718][ T2539] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 716.731061][ T2539] bond7 (unregistering): Released all slaves [ 717.104739][ T2572] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 717.119176][ T2581] sctp: [Deprecated]: syz.0.7964 (pid 2581) Use of int in max_burst socket option deprecated. [ 717.119176][ T2581] Use struct sctp_assoc_value instead [ 717.138939][ T2572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 717.192188][ T2572] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 717.266579][ T2572] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 717.274531][ T2572] netlink: 'syz.4.7963': attribute type 2 has an invalid length. [ 718.023555][ T5197] udevd[5197]: worker [25428] /devices/virtual/block/nbd3 timeout; kill it [ 718.036566][ T5197] udevd[5197]: seq 28850 '/devices/virtual/block/nbd3' killed [ 718.502281][ T2656] syzkaller0: entered promiscuous mode [ 718.526313][ T2656] syzkaller0: entered allmulticast mode [ 718.752282][ T2683] __nla_validate_parse: 25 callbacks suppressed [ 718.752301][ T2683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7987'. [ 718.778645][ T2680] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 718.798716][ T2680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 719.050963][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7992'. [ 719.066001][ T2713] tipc: Started in network mode [ 719.070893][ T2713] tipc: Node identity 6e2a24337627, cluster identity 4711 [ 719.080822][ T2713] tipc: Enabled bearer , priority 0 [ 719.114247][ T2709] tipc: Disabling bearer [ 719.145452][ T2714] syzkaller0: entered promiscuous mode [ 719.152026][ T2714] syzkaller0: entered allmulticast mode [ 719.169499][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7994'. [ 719.361958][ T2746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7999'. [ 719.405894][ T2756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7999'. [ 719.456862][ T2746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7999'. [ 719.637064][ T2772] netlink: 'syz.2.8004': attribute type 12 has an invalid length. [ 719.670164][ T2772] netlink: 'syz.2.8004': attribute type 29 has an invalid length. [ 719.684262][ T2776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8005'. [ 719.695665][ T2772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8004'. [ 719.707681][ T2772] netlink: 'syz.2.8004': attribute type 2 has an invalid length. [ 719.725139][ T2772] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8004'. [ 719.746595][ T2778] netlink: 'syz.0.8007': attribute type 10 has an invalid length. [ 719.786414][ T2778] mac80211_hwsim hwsim84 wlan1: left promiscuous mode [ 719.808529][ T2778] mac80211_hwsim hwsim84 wlan1: left allmulticast mode [ 719.905925][ T6690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.921966][ T6690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.058723][ T2795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.095062][ T2795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.203918][ T2795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.245888][ T2795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.377654][ T2824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8018'. [ 720.408408][ T2795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.419734][ T2795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.466609][ T2824] IPVS: Error connecting to the multicast addr [ 720.488294][ T2836] IPVS: Error connecting to the multicast addr [ 720.530738][ T2795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.570826][ T2795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.650938][ T2846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.791469][ T6678] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.808429][ T6678] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.860169][ T9470] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.868630][ T9470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.883967][ T6678] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.893408][ T6678] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.907765][ T9470] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.916503][ T9470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.476537][ T2406] block nbd3: Possible stuck request ffff888026e58000: control (read@0,1024B). Runtime 210 seconds [ 746.487355][ T2406] block nbd3: Possible stuck request ffff888026e58200: control (read@1024,1024B). Runtime 210 seconds [ 746.498501][ T2406] block nbd3: Possible stuck request ffff888026e58400: control (read@2048,1024B). Runtime 210 seconds [ 746.509671][ T2406] block nbd3: Possible stuck request ffff888026e58600: control (read@3072,1024B). Runtime 210 seconds [ 746.713522][ T2871] __nla_validate_parse: 2 callbacks suppressed [ 746.713543][ T2871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8024'. [ 746.732410][ T2871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8024'. [ 746.742171][ T2882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'. [ 746.768062][ T2871] syzkaller0: left promiscuous mode [ 746.868492][ T2887] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8029'. [ 746.879432][ T2887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8029'. [ 746.890284][ T2887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8029'. [ 746.920435][ T2888] netlink: 'syz.0.8030': attribute type 10 has an invalid length. [ 746.932361][ T2894] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8029'. [ 746.986236][ T2894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8029'. [ 747.065873][ T2888] veth0_vlan: left promiscuous mode [ 747.095223][ T2894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8029'. [ 747.109191][ T2888] veth0_vlan: entered promiscuous mode [ 747.122356][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.153373][ T2888] team0: Device veth0_vlan failed to register rx_handler [ 747.363374][ T2930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 747.623599][ T2950] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 747.766040][ T2960] netlink: 'syz.3.8041': attribute type 1 has an invalid length. [ 747.806907][ T2965] netlink: 'syz.2.8044': attribute type 1 has an invalid length. [ 747.942955][ T2975] mac80211_hwsim hwsim84 syzkaller0: entered promiscuous mode [ 747.960873][ T2975] mac80211_hwsim hwsim84 syzkaller0: entered allmulticast mode [ 747.980168][ T2978] netlink: 'syz.3.8048': attribute type 21 has an invalid length. [ 747.999766][ T2970] syzkaller1: entered promiscuous mode [ 748.008085][ T2970] syzkaller1: entered allmulticast mode [ 748.018521][ T2981] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002 [ 748.137843][ T2987] SET target dimension over the limit! [ 748.143658][ T2978] tipc: Enabled bearer , priority 0 [ 748.223152][ T2990] netlink: 'syz.2.8050': attribute type 1 has an invalid length. [ 748.336800][ T2984] syzkaller0: entered promiscuous mode [ 748.360430][ T2984] syzkaller0: entered allmulticast mode [ 748.383098][ T2984] tipc: Resetting bearer [ 748.572716][ T6658] tipc: Resetting bearer [ 748.590833][ T2977] tipc: Resetting bearer [ 750.004186][ T2977] tipc: Disabling bearer [ 750.025222][ T3011] syzkaller0: entered promiscuous mode [ 750.046668][ T3011] syzkaller0: entered allmulticast mode [ 750.169424][ T3032] netlink: 'syz.0.8063': attribute type 1 has an invalid length. [ 750.212858][ T3032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.436190][ T3047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.523697][ T3047] lo speed is unknown, defaulting to 1000 [ 750.535794][ T3047] vxcan1 speed is unknown, defaulting to 1000 [ 751.277549][ T3078] bond8 (unregistering): Released all slaves [ 751.544480][ T3107] netlink: 'syz.2.8082': attribute type 11 has an invalid length. [ 751.664489][ T3116] netlink: 'syz.3.8086': attribute type 1 has an invalid length. [ 751.760590][ T3124] bond0: option all_slaves_active: invalid value (46) [ 751.840024][ T3124] macsec1: entered promiscuous mode [ 751.944619][ T3133] x_tables: duplicate underflow at hook 1 [ 752.013191][ T3136] __nla_validate_parse: 12 callbacks suppressed [ 752.013212][ T3136] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8090'. [ 752.065285][ T3136] openvswitch: netlink: Flow key attr not present in new flow. [ 752.188746][ T3153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8097'. [ 752.199056][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8097'. [ 752.224136][ T3153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8097'. [ 752.383137][ T3165] netlink: 'syz.3.8099': attribute type 23 has an invalid length. [ 752.442839][ T3169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.827989][ T3200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8111'. [ 753.199926][ T3228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8118'. [ 753.501123][ T3252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8124'. [ 753.682994][ T3261] netlink: 'syz.2.8128': attribute type 1 has an invalid length. [ 753.716884][ T3261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8128'. [ 753.736139][ T3261] netlink: 'syz.2.8128': attribute type 1 has an invalid length. [ 753.838798][ T3214] delete_channel: no stack [ 753.943147][ T3278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.032715][ T3286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.218404][ T3296] netlink: 'syz.2.8139': attribute type 1 has an invalid length. [ 754.275260][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8142'. [ 754.330097][ T3300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8141'. [ 754.534183][ T3327] xt_hashlimit: size too large, truncated to 1048576 [ 754.607002][ T3332] netlink: 'syz.2.8151': attribute type 5 has an invalid length. [ 754.809899][ T6658] nci: nci_ntf_packet: unknown ntf opcode 0x328 [ 754.861075][ T3341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.873039][ T3356] siw: device registration error -23 [ 754.890245][ T3356] siw: device registration error -23 [ 755.292165][ T3385] netlink: 'syz.3.8170': attribute type 24 has an invalid length. [ 755.325968][ T3386] openvswitch: netlink: Unknown nsh attribute 0 [ 755.420994][ T3393] veth0: entered promiscuous mode [ 755.442120][ T3393] netlink: 'syz.1.8171': attribute type 1 has an invalid length. [ 755.590902][ T3392] veth0: left promiscuous mode [ 755.863462][ T3446] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 755.871677][ T3446] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 755.895974][ T3446] sock: sock_set_timeout: `syz.4.8184' (pid 3446) tries to set negative timeout [ 756.052957][ T3464] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 756.100558][ T3470] bond3: left promiscuous mode [ 756.112707][ T3470] ip6gre1: left allmulticast mode [ 756.151996][ T3470] gre2: left promiscuous mode [ 756.184607][ T3470] gre2: left allmulticast mode [ 756.287870][ T3473] netlink: 'syz.3.8191': attribute type 4 has an invalid length. [ 756.303313][ T3480] team0: Caught tx_queue_len zero misconfig [ 756.628239][ T3514] netlink: 'syz.3.8201': attribute type 1 has an invalid length. [ 756.645704][ T3505] netlink: 'syz.1.8197': attribute type 11 has an invalid length. [ 756.890372][ T3527] sctp: [Deprecated]: syz.2.8206 (pid 3527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.890372][ T3527] Use struct sctp_sack_info instead [ 756.930285][ T3519] geneve3: entered promiscuous mode [ 756.947555][ T2913] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 38633 - 0 [ 756.965189][ T2913] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 38633 - 0 [ 757.027819][ T2913] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 38633 - 0 [ 757.045184][ T2913] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 38633 - 0 [ 757.248349][ T3537] __nla_validate_parse: 111 callbacks suppressed [ 757.248369][ T3537] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8208'. [ 757.297747][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8210'. [ 757.401492][ T3547] pim6reg: entered allmulticast mode [ 757.427927][ T3547] pim6reg: left allmulticast mode [ 757.493365][ T3555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8215'. [ 757.516599][ T3555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8215'. [ 757.572281][ T3561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8216'. [ 757.605659][ T3562] validate_nla: 3 callbacks suppressed [ 757.605679][ T3562] netlink: 'syz.2.8217': attribute type 15 has an invalid length. [ 757.644476][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8217'. [ 757.858871][ T3585] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 757.908231][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8225'. [ 757.910169][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8226'. [ 757.987970][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.988826][ T3589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.002181][ T3589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.014861][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.083182][ T3597] syzkaller1: entered promiscuous mode [ 758.089289][ T3589] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8225'. [ 758.104837][ T3597] syzkaller1: entered allmulticast mode [ 758.125341][ T3589] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8225'. [ 758.335373][ T3612] IPVS: set_ctl: invalid protocol: 56602 172.20.20.51:20004 [ 759.132121][ T3681] netlink: 'syz.0.8251': attribute type 1 has an invalid length. [ 759.141889][ T3681] netlink: 'syz.0.8251': attribute type 1 has an invalid length. [ 759.282312][ T3696] netlink: 'syz.0.8257': attribute type 11 has an invalid length. [ 759.300957][ T3696] netlink: 'syz.0.8257': attribute type 11 has an invalid length. [ 760.671075][ T3798] netlink: 'syz.4.8286': attribute type 16 has an invalid length. [ 760.690931][ T3798] netlink: 'syz.4.8286': attribute type 17 has an invalid length. [ 760.743820][ T3803] netlink: 'syz.0.8289': attribute type 1 has an invalid length. [ 760.759683][ T3798] gre0: left promiscuous mode [ 760.764818][ T3798] gre0: left allmulticast mode [ 760.772449][ T3798] erspan0: left promiscuous mode [ 760.777809][ T3798] erspan0: left allmulticast mode [ 760.857004][ T3798] bond0: left promiscuous mode [ 760.882274][ T3798] bond0: left allmulticast mode [ 760.894775][ T3798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.919758][ T3821] netlink: 'syz.1.8291': attribute type 12 has an invalid length. [ 760.960095][ T3821] bond5: option primary_reselect: invalid value (255) [ 760.969119][ T3821] bond5 (unregistering): Released all slaves [ 760.996326][ T3806] tipc: Started in network mode [ 761.001473][ T3806] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 761.013349][ T3806] tipc: Enabled bearer , priority 10 [ 761.213933][ T3837] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 761.221714][ T3837] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 761.616472][ T3860] mac80211_hwsim hwsim84 syzkaller0: left promiscuous mode [ 761.743859][ T3868] siw: device registration error -23 [ 761.876235][ T3874] netlink: 'syz.3.8301': attribute type 3 has an invalid length. [ 762.222353][ T9] tipc: Node number set to 4269801492 [ 762.426216][ C1] ------------[ cut here ]------------ [ 762.432028][ C1] sk->sk_forward_alloc [ 762.432057][ C1] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x62d/0x740, CPU#1: ksoftirqd/1/23 [ 762.446204][ C1] Modules linked in: [ 762.450389][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 762.459678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.469769][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 762.475628][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 40 c5 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 32 c5 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 24 c5 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 762.495275][ C1] RSP: 0000:ffffc900001d7ae8 EFLAGS: 00010246 [ 762.501360][ C1] RAX: ffffffff8a25e94c RBX: dffffc0000000000 RCX: ffff88801dac0000 [ 762.509391][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 762.517412][ C1] RBP: 0000000000000090 R08: ffff8880537d35a7 R09: 1ffff1100a6fa6b4 [ 762.525430][ C1] R10: dffffc0000000000 R11: ffffed100a6fa6b5 R12: ffff8880537d3300 [ 762.533416][ C1] R13: dffffc0000000000 R14: ffff8880537d358c R15: ffffffff8fcac5c0 [ 762.541427][ C1] FS: 0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 762.550387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.557021][ C1] CR2: 00005555716ff9e8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 762.565018][ C1] Call Trace: [ 762.568306][ C1] [ 762.571249][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 762.576786][ C1] __sk_destruct+0x85/0x880 [ 762.581304][ C1] ? rcu_core+0x751/0x1070 [ 762.585770][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 762.590892][ C1] rcu_core+0x7cd/0x1070 [ 762.595206][ C1] ? __pfx_rcu_core+0x10/0x10 [ 762.599914][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.605023][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.610072][ C1] handle_softirqs+0x22a/0x870 [ 762.614861][ C1] ? schedule+0x90/0x360 [ 762.619162][ C1] ? run_ksoftirqd+0x36/0x60 [ 762.623788][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.628868][ C1] run_ksoftirqd+0x36/0x60 [ 762.633309][ C1] smpboot_thread_fn+0x541/0xa50 [ 762.638308][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.643363][ C1] kthread+0x388/0x470 [ 762.647457][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 762.652906][ C1] ? __pfx_kthread+0x10/0x10 [ 762.657532][ C1] ret_from_fork+0x51e/0xb90 [ 762.662146][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 762.667330][ C1] ? __switch_to+0xc7d/0x1450 [ 762.672026][ C1] ? __pfx_kthread+0x10/0x10 [ 762.676670][ C1] ret_from_fork_asm+0x1a/0x30 [ 762.681489][ C1] [ 762.684527][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 762.691813][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 762.701011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.711056][ C1] Call Trace: [ 762.714332][ C1] [ 762.717291][ C1] vpanic+0x56c/0xa60 [ 762.721287][ C1] ? __pfx__printk+0x10/0x10 [ 762.725869][ C1] ? __pfx_vpanic+0x10/0x10 [ 762.730381][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 762.735662][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 762.740864][ C1] panic+0xc5/0xd0 [ 762.744580][ C1] ? __pfx_panic+0x10/0x10 [ 762.748996][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 762.753933][ C1] __warn+0x315/0x4f0 [ 762.757906][ C1] ? inet_sock_destruct+0x62d/0x740 [ 762.763111][ C1] ? inet_sock_destruct+0x62d/0x740 [ 762.768298][ C1] __report_bug+0x29a/0x540 [ 762.772788][ C1] ? kasan_save_track+0x3e/0x80 [ 762.777627][ C1] ? kasan_save_free_info+0x46/0x50 [ 762.782819][ C1] ? __kasan_slab_free+0x5c/0x80 [ 762.787749][ C1] ? inet_sock_destruct+0x62d/0x740 [ 762.792937][ C1] ? __pfx___report_bug+0x10/0x10 [ 762.797963][ C1] ? inet_sock_destruct+0x62d/0x740 [ 762.803150][ C1] report_bug+0x16a/0x220 [ 762.807489][ C1] ? inet_sock_destruct+0x62d/0x740 [ 762.812674][ C1] ? inet_sock_destruct+0x62f/0x740 [ 762.817861][ C1] handle_bug+0x9c/0x200 [ 762.822097][ C1] exc_invalid_op+0x1a/0x50 [ 762.826589][ C1] asm_exc_invalid_op+0x1a/0x20 [ 762.831431][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 762.837229][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 40 c5 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 32 c5 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 24 c5 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 762.856819][ C1] RSP: 0000:ffffc900001d7ae8 EFLAGS: 00010246 [ 762.862878][ C1] RAX: ffffffff8a25e94c RBX: dffffc0000000000 RCX: ffff88801dac0000 [ 762.870834][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 762.878797][ C1] RBP: 0000000000000090 R08: ffff8880537d35a7 R09: 1ffff1100a6fa6b4 [ 762.886755][ C1] R10: dffffc0000000000 R11: ffffed100a6fa6b5 R12: ffff8880537d3300 [ 762.894712][ C1] R13: dffffc0000000000 R14: ffff8880537d358c R15: ffffffff8fcac5c0 [ 762.902673][ C1] ? inet_sock_destruct+0x62c/0x740 [ 762.907872][ C1] ? inet_sock_destruct+0x62c/0x740 [ 762.913060][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 762.918513][ C1] __sk_destruct+0x85/0x880 [ 762.923006][ C1] ? rcu_core+0x751/0x1070 [ 762.927414][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 762.932522][ C1] rcu_core+0x7cd/0x1070 [ 762.936771][ C1] ? __pfx_rcu_core+0x10/0x10 [ 762.941464][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.946488][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.951507][ C1] handle_softirqs+0x22a/0x870 [ 762.956263][ C1] ? schedule+0x90/0x360 [ 762.960493][ C1] ? run_ksoftirqd+0x36/0x60 [ 762.965080][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.970097][ C1] run_ksoftirqd+0x36/0x60 [ 762.974514][ C1] smpboot_thread_fn+0x541/0xa50 [ 762.979446][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 762.984487][ C1] kthread+0x388/0x470 [ 762.988550][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 762.994000][ C1] ? __pfx_kthread+0x10/0x10 [ 762.998577][ C1] ret_from_fork+0x51e/0xb90 [ 763.003165][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 763.008263][ C1] ? __switch_to+0xc7d/0x1450 [ 763.012931][ C1] ? __pfx_kthread+0x10/0x10 [ 763.017508][ C1] ret_from_fork_asm+0x1a/0x30 [ 763.022281][ C1] [ 763.025652][ C1] Kernel Offset: disabled [ 763.029958][ C1] Rebooting in 86400 seconds..