last executing test programs: 2m45.6640156s ago: executing program 3 (id=790): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@tipc, &(0x7f0000000100)=0x80) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa0}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa0}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@generic="d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693121216e05c62f"]}, 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) 2m45.460365219s ago: executing program 3 (id=794): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r1, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r1, 0x5}, 0x10) (async) 2m45.1688538s ago: executing program 3 (id=796): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b685820fae9d6dcd3292ea54c7beef915d564c90c200e2ba1812a1fea84854", 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x8040) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m45.094610014s ago: executing program 3 (id=797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001d00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbbaed275b000008000300", @ANYRES32=r7, @ANYBLOB="1c002f80"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4050884) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002dbd7000fedbdf251500000008000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08002a00010008002c001589100008000300"/28, @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40880) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m44.947804632s ago: executing program 3 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x52}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba0000000000000000000000007c579023c9ee4ae5fb4838b7afedf32b45d22f8e60aea8e4d85674548c572e3d3fff1e65a046c4db24c95f465fabfaa45803500618403c35064ed9f4f23f78dda99ae135c4f793979256aa6e0dff96587ac6c427ca6529adbf6036a9936077f3a3044a8eae1f481881e9b72121573c4677f6defe2e4462dd798db72acc469856897eda40", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) 2m44.591511567s ago: executing program 3 (id=807): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) 2m44.275408417s ago: executing program 32 (id=807): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) 10.023256951s ago: executing program 0 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b020000000000200012800b00010067656e657665000010000280060005004e1f000004000600"], 0x40}}, 0x0) 9.731855885s ago: executing program 0 (id=3007): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x44844) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128000000100697069700000000000000280000011004e230000daff0300ac1e010124fe0a00", @ANYRES32=r2, @ANYBLOB="802e371b383681bce17631206e41513f1e189dff0b4b0e2135b2ceaa196cdcd561be823b007d42"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x718, 0x7800, 0xfffffff2, 0x3, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x68, 0x0, 0xe, 0x2f, 0x0, @local, @multicast1, {[@generic={0x94, 0xa, "4fcdb69ce526c86a"}, @rr={0x7, 0x13, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1b, 0xb6, [@rand_addr=0x64010102, @multicast1, @local, @rand_addr=0x64010101, @multicast1, @loopback]}]}}}}}) connect$packet(r1, &(0x7f0000000280)={0x11, 0x8, r3, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 9.580473526s ago: executing program 0 (id=3009): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084484) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000200)={@broadcast, 0x0, 0x0, 0x60, 0x0, [{@private}, {@local}, {@broadcast}, {@initdev}, {@local}, {}]}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) r10 = socket(0x11, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x8008055) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3001000013002f0a2bbd7000fddbcf2507006800", @ANYRES32=r1, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 9.243375751s ago: executing program 0 (id=3014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 9.059978818s ago: executing program 0 (id=3017): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}}, 0x0) 8.466342995s ago: executing program 0 (id=3020): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r3}) ppoll(&(0x7f0000000300)=[{r1, 0x8102}], 0x1, 0x0, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r4, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r3}) (async) ppoll(&(0x7f0000000300)=[{r1, 0x8102}], 0x1, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg$unix(r4, 0x0, 0x2041) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) (async) 1.947579739s ago: executing program 2 (id=3070): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r10, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) 1.812077719s ago: executing program 5 (id=3072): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}}, 0x20}}, 0x0) 1.606409673s ago: executing program 2 (id=3074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000081495c0bf85a4592743b666f17315aeb4fb8f9f2b94a92adb7e6b8b3bab55c91fd473961843b816fe3e23f1d8a9cf38d7c5eb1a9218a40d39bf1e0bd7f766c3af73ab999d47517314f32029ed1478267ed143e127d197c63955ca5f9cbb0948ee4bb981ff81e7f13bc70efb2ba7b91338e8fec9eeed4c73620974d22b79ad3b6251d865738c66e83a167a098af9857023573b5109073b863ae341f3db23c0dc886b8d69ee8cb2d1a3ee311fe0737c85986d65c9d6247a1d018c0338b2b53a9c541ab7a137b461fd48cfe02e979577f597f1a670a2964315d42b7ad21f88b821b0e324e", @ANYRES16=r5, @ANYBLOB="010000000000000000000d000000060008000000000006000a0000000000050018000000000005001700000000000500070000000000"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x40810) unshare(0x22020600) r6 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080029bd7000fddbdf252100000009001f0070687933000000000500200000000000050020000000000009001f007068793000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x40000000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x58, &(0x7f0000000480)}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r9, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x7c, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}]}, 0x7c}}, 0x40) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x0, 0x0, 0xffde, 0x0, 0x0, 0x6510046}) unshare(0x40010500) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bff229bd7000fedbdf252500000006000600030000000a0001007770616e3100000005002b00000082110000"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 1.593210589s ago: executing program 1 (id=3075): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 1.478485126s ago: executing program 1 (id=3077): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r1, &(0x7f00000000c0), 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110b0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1.323640606s ago: executing program 1 (id=3079): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008003}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1.25711121s ago: executing program 2 (id=3081): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c000000"], 0x0, 0x5}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000640)=ANY=[@ANYBLOB="fffdffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000110000ac1414aaac1414aa0703dd000dee0dd9de36ed4bcc488323440c00030000000000000000890f0000004000ffffffffffffffff444c0001ac1e0001000000007f000001000000000000000000000000ac1414aa000000007f000001000000000000000000000000ac1e000100000000ffffffff00000000ffffffff00000000441400"/202], 0x0) 1.199847765s ago: executing program 1 (id=3082): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff2a7eaa10e0aaffffffdc30ffff001c00000000fb02907800000000e0000300000065431ec77ac40a382c563410611d07541b5a7f92650f89261db1219886dc3a67f9c5e83ff91d37500257d81b07db419f0e4d5cdd9fe58990e01dddc68cad4517b297ed253b5d89662b7410736e6f8fdd6b7440240492710ef29b0686bafd2de8217a89e949ce07d9e4135ab89b593dc0a35b67e8a108005dcbbccf7c84fd5cd778b595f60dba93b460f3"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.155691126s ago: executing program 1 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@generic={0x0, 0x4, 'Z\x00'}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@private}, {@broadcast}]}]}}}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0xfffffffffffffffe, 0x4) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0xfffffffffffffffe, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) (async) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x300, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfffc}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x200408c8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce) (async) write$tun(r3, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a28000000000a0101000000005e1aff96a44e3a6080a44c275584376861f12ad502000000096d4235ccfaa1de6eaf1e584800010073797a300000000008000240000000032c000000483f18e40000e6ff0000000002000000090001"], 0x7c}}, 0x8c0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000380)='-#', 0x2}], 0x1) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa000000000002008864"], 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa000000000002008864"], 0x0) 1.114654197s ago: executing program 2 (id=3085): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x7, 0x6, 0x62, @private2, @private2, 0x10, 0x7800, 0x800, 0x4}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x85, 0x3, "b29203f50a0bf7751e605fb95079cec915d20c077e442eb599e90d3056d04305b0b5c1aa99bcf36279de3a54d8dd1e72c0f814e341659428abf526e5c2541ed72c3e69a8322a261a8a20e7d8ab9a3128513e19c2fed84ba2b8f34591acadb480dbc3a24efc57fdb9d082e83470364da4dfdfdfc2e477e41d5df51845d7b5e7b042"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 957.571248ms ago: executing program 4 (id=3086): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/186, 0xba) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="09160000", @ANYRES16=r3, @ANYBLOB="000128bd7000fbdbdf251f000000050092000c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x2004c801, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xff, 0x4e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x10048000) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) 934.952274ms ago: executing program 2 (id=3087): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@newchain={0x23d4, 0x64, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xc}, {0xfff2, 0x79f2017971607ec9}, {0x4, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x23a4, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16779}, @TCA_FLOW_MASK={0x8, 0x6, 0x4d49}, @TCA_FLOW_ACT={0x2388, 0x9, 0x0, 0x1, [@m_simple={0x14c, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0x8, 0x3, '$*]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x5, 0xffffffffffffffff, 0x3ff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x9, 0x0, 0x1, 0x6}}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0xce, 0x6, "06ee079b33b4aca8128ae3fb93cf2fac880d9303c0282353dd0a744ad245841e6dedaeda0d3faf88c5684c33fd5038235b4cc4ba1240bd9297bbcf39a17450da2a509ee367980c8f386adc35317314b5a55718b7ebf718e93933c5c34a35c90d5b473aed0e0bd18df7d399fbf7fde11b5fcf62ab1b49e8023d1044039c0c3504b1537a5b2670285eae74cb19bb90d91d21185526a5f8089b1d8ad902bcd0d605f5f694af8fb600f4fb46e22b2a37b14a23ac11129ab7a1e0bedf43b0c33457d19cb6c38ba669bc8c2d8e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x128, 0x6, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9c, 0xd7b, 0x0, 0x6, 0x4}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x67, 0x20, 0x0, 0x4}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0xffffffffffffffff, 0x101, 0x5}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x57e, 0xffffffffffffffff, 0x200, 0x8}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6f9, 0x8, 0x5, 0x6, 0x6}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x8, 0xa05, 0x8}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x4, 0x5, 0x7, 0x9}, 0x35}}]}, {0x37, 0x6, "4a8ede841df060362bda76830cd789ead3a62ac24854465cab489ec056403c16e56cc530a9b45778f815f79c029e2a37a4a0d2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x204, 0x20, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xc, 0x5, 0x3, 0xfffffbff}, @local, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe9a, 0x81, 0x7, 0x4, 0x8000}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x41, 0xa810, 0x17, 0x1, 0x8}, @remote, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x5, 0x5, 0xffffff7f}, @local, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x61d9, 0x9, 0x7, 0x8, 0x7}, @multicast1, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xe60, 0x8, 0x81, 0x4}, @remote, @multicast1, 0xffffff00, 0x1}}]}, {0xe9, 0x6, "6099b62dc325ef3026d7ffe0aee84e1663e35589bf5f901163012b5b2e4821dd0d5be34224edbd05a36f7e072d2117e505b75f1d263b049c4a07312c8b6c46c3b7d0466748c47548a15018021901a20ef835b468f9e0964ec436c1ae8960b11b7125e2d2b8720849a31574c708bd070ff19da6b055e9b94d918c3ad72d64457274a20c5b323789a75de6a77a1a3f3b6cdb42ab7848e63d084783b2b7eee8d04237e63ec19dd90f7813bdaebef25c459f1f9d257e9a7625a7551193b552552b5e99d004067168f459e868d58629968833e94f051e05757b1b4b5ff2fb0be2642a5ee5a4af03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x1f0c, 0x19, 0x0, 0x0, {{0xa}, {0x1e00, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x15c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x80, 0xe, 0x7, 0x80, 0x1}, 0x2, 0x3}, [{0x6, 0xfffffbff, 0x400, 0x2, 0x5, 0x401}, {0x2, 0x8, 0x994, 0x10001, 0x5, 0x2}, {0x9, 0x5f, 0x3, 0xf, 0x5, 0x1c36c0}, {0x99a, 0x200, 0x7, 0xd, 0x7fff, 0xffffffff}, {0xfeb, 0x2, 0x7, 0x43c24ccf, 0xc, 0x1}, {0x1, 0x5, 0x1, 0x7, 0x400, 0x80}, {0x2, 0x3, 0xf16f, 0x6b, 0x9, 0x6}, {0x0, 0x2e, 0x1, 0x1, 0x486e, 0x3}, {0x9600, 0x3, 0x9, 0x7, 0x5, 0x80000000}, {0x80, 0x7ff, 0x6, 0x9, 0x1975}, {0x3f, 0x7, 0x10001, 0x5, 0x100, 0xa04c}, {0xfffffff7, 0x9, 0xb0, 0xff, 0x5, 0xc21}, {0x7, 0x400, 0x69e7, 0x3, 0x4, 0x8}, {0xfffffff9, 0x4, 0x1d, 0x15, 0xf21, 0x4}, {0x10000, 0x76e, 0x8, 0x3, 0x1, 0x40}, {0xd8, 0xe372, 0xbea, 0x3, 0xb6e, 0x3ff}, {0x9, 0x2, 0x80, 0x4aa}, {0x3, 0x86, 0x8, 0x8, 0x8000000, 0x4}, {0x400, 0x3, 0x0, 0x2, 0x1, 0x6}, {0x0, 0x101, 0xfffffff9, 0x8000, 0x4, 0x9}, {0x6, 0x40, 0xb, 0xb, 0x80, 0xfffffff9}, {0xfffffff8, 0x4c2e239d, 0xcb, 0xd508, 0xa0000000, 0x80000000}, {0xffffff4f, 0xcd, 0x3ff, 0xc46, 0x6d, 0xc}, {0x3, 0x100, 0x8001, 0xfffffe01, 0x80, 0x6}, {0x9, 0x8, 0x5473, 0x4, 0x9, 0x1}, {0x8, 0xfffffffe, 0x9, 0x9, 0x0, 0x9}, {0x58c, 0x9, 0x7, 0x0, 0x71, 0x3}, {0x6, 0x7, 0x7d65, 0x401, 0xc7a2, 0x7fffffff}, {0x1, 0x8, 0x10001, 0x35d, 0x401, 0xfffffff9}, {0x4, 0x0, 0x6, 0x5, 0x8, 0x2}, {0x5, 0xfffffff8, 0xe, 0x9, 0x7, 0x80000000}, {0x2, 0x1, 0x10000, 0x623f, 0x7, 0x9}, {0x4, 0xffffffff, 0x1, 0x0, 0x80000001, 0x3}, {0x4, 0x5, 0xffff, 0xc, 0x5, 0x1}, {0x3, 0x9bf, 0xff, 0x0, 0x8000, 0x10}, {0x5, 0x400, 0x2, 0x34, 0x5, 0x6}, {0x8, 0x4, 0x3, 0x1, 0x6d62, 0x2ed55438}, {0x7, 0x5, 0xffff8001, 0x8000, 0x2d, 0x7}, {0x2, 0x7fff, 0x2, 0x0, 0x2, 0xfffff6a4}, {0xa, 0x7, 0x3, 0xfff, 0x4, 0x9}, {0x7, 0x8000, 0x2, 0x5, 0x1a2, 0x9}, {0x39800000, 0x400, 0x4, 0x2, 0x9, 0x4}, {0x101, 0x2, 0x8, 0x8d22, 0x4, 0x8}, {0x0, 0x9, 0x4, 0x1, 0x4, 0x9}, {0x9, 0x9, 0x6, 0x5, 0x862, 0x9}, {0x0, 0x0, 0x5, 0x90000000, 0x1, 0x5f6b06d3}, {0x800, 0x2, 0x50df90ef, 0xb, 0x2, 0xffffffff}, {0x9, 0x4, 0xc, 0x9eb8, 0x1, 0x7}, {0x101, 0x7, 0x2, 0x2, 0x7fffffff, 0x9}, {0x8001, 0xbed1, 0x6, 0x9, 0x2, 0x4}, {0x80, 0xb, 0x1000, 0x4, 0x40, 0x5}, {0xffffffff, 0x80000000, 0x2, 0x4, 0x8000, 0x2}, {0x2, 0x2, 0x1c000000, 0x1, 0x8001, 0xffff}, {0x7, 0x10001, 0x2, 0x1, 0x1, 0xd7b}, {0x2, 0xffff, 0x8, 0x10001, 0xf, 0x4}, {0xffffffff, 0x2, 0x9, 0x7, 0x101, 0x8}, {0xfd, 0x7f, 0x5, 0x5, 0xb75, 0x7}, {0x7, 0x4, 0xba3, 0x90, 0x0, 0x10000}, {0x65942120, 0xd3a, 0xa, 0x3, 0xfffffff8, 0x1}, {0x10001, 0x9, 0x6, 0x9, 0x6, 0x2}, {0x4e, 0x5, 0x7fffffff, 0x9, 0x1, 0x8}, {0xb563, 0xe, 0x0, 0x4, 0x3, 0x6}, {0x1, 0x9, 0xfffffffb, 0x9, 0x7fffffff, 0x6}, {0x8, 0xffffffff, 0x9, 0x10000, 0x2, 0x8}, {0xf, 0x81, 0x59494cb8, 0x9, 0x5, 0x5268}, {0xfff, 0x81, 0x0, 0x5, 0x1b4c, 0x5}, {0x1, 0x4d4, 0x477, 0x100, 0x80, 0x680}, {0xfff, 0x10000, 0x7f56, 0x75e9, 0x7, 0x4}, {0x5, 0x81, 0x40, 0x9, 0x8}, {0xae54, 0x0, 0x7, 0x2, 0x3ff, 0x7}, {0x8, 0x8, 0xffffffff, 0x5, 0x4, 0xfd4d}, {0xaff, 0xd16, 0x4, 0x4, 0x5b8, 0x45a}, {0xad89, 0x8, 0x7, 0x3, 0x2, 0x75}, {0x9, 0xffffffff, 0x10001, 0x8, 0x101, 0x6}, {0x9, 0x6, 0xf, 0x8, 0x9, 0x8}, {0x1000, 0xfffffff9, 0x4, 0x2, 0x2, 0x5}, {0x6, 0xfffffffe, 0x4, 0xc108, 0x0, 0x3}, {0x80, 0x2, 0x3, 0x7, 0x9, 0x809f}, {0x9, 0xfffff001, 0x4, 0x3, 0x0, 0xd}, {0x5a5d, 0x9, 0x2, 0x315, 0x6, 0x3}, {0x8, 0x5, 0xffffffff, 0x7, 0x100}, {0x8, 0x75e9af37, 0x4, 0xfffffffb, 0x5, 0x9}, {0x0, 0x3, 0x11c, 0x5, 0x6, 0x74000000}, {0x6, 0x2, 0x1, 0x3b0b, 0xa99, 0x7}, {0x5, 0x8, 0xe5f1, 0x407, 0x3, 0x1000}, {0x3, 0x2, 0xfffff001, 0x3, 0xffff, 0x7}, {0x1000, 0x4, 0x7fffffff, 0x2, 0x2, 0x10000}, {0x4e49, 0x5, 0x9506, 0x687, 0x8, 0xffffffbb}, {0x144, 0xf, 0x18, 0x200, 0x7f, 0x8001}, {0x5, 0x9365, 0x1, 0x3, 0x5, 0x200}, {0x2, 0xd05a, 0xb2ad, 0x54f, 0x97b, 0x7ff}, {0x6, 0x4, 0x983, 0x7, 0x2, 0x1}, {0x79, 0x0, 0x9, 0xf8a3, 0xfffffff9, 0x9}, {0x7, 0x8, 0x8, 0x5, 0xfffffff9, 0x5}, {0x87, 0x80, 0x7, 0x2, 0x8, 0x5}, {0x6, 0x80000001, 0x7, 0x3, 0x800, 0x10001}, {0x5, 0x63, 0x7fffffff, 0x4, 0x5, 0xfffffff9}, {0x7c4, 0x10001, 0x5, 0xfffffe00, 0x2, 0x3ff}, {0x7, 0x4, 0x0, 0x80, 0x5, 0xf632}, {0xa4, 0x0, 0x8, 0x4, 0x3, 0x2}, {0x81, 0x0, 0x10001, 0x6, 0xe6, 0x8}, {0xa, 0x9, 0x3, 0x2, 0x1, 0x7}, {0x618f, 0xfffffffc, 0x1, 0x4, 0x2, 0x2}, {0x380000, 0x3ff, 0x8001, 0x5, 0x2, 0x7}, {0x8, 0x7fffffff, 0xfff, 0x5, 0x4, 0x4}, {0x800, 0x0, 0x1, 0x70, 0x18000, 0xca}, {0x401, 0x4, 0x7, 0x40, 0x279b, 0xa}, {0x6, 0x2, 0x7, 0x7, 0x40}, {0x32, 0x0, 0xfffffffc, 0xb54a, 0x75, 0x7ff}, {0x2, 0xa, 0x1, 0x126b, 0x400, 0x1}, {0x80000000, 0x6, 0x5, 0x0, 0x7fffffff, 0x4}, {0x2, 0xffff, 0xff, 0x1, 0x8, 0x2}, {0x1e5, 0x9, 0x5, 0x200, 0x1, 0x7f}, {0xb2f, 0x2, 0x2, 0x14e, 0x3, 0xc}, {0xffff, 0x6, 0x5d08, 0x1, 0x400, 0x37a9}, {0x2, 0xf42, 0x6, 0x8, 0x6, 0xe7f}, {0x5, 0x8, 0x1, 0x7, 0x9, 0x7}, {0x1, 0x9, 0xfff, 0x80, 0x0, 0x8000}, {0x2, 0xafc, 0xb0, 0x54, 0x2, 0x5}, {0x0, 0x7fffffff, 0x7, 0xfffffffa, 0x0, 0x8}, {0x4, 0xffffffff, 0xfffffffe, 0x7ff, 0x3, 0x8}, {0x2, 0x4, 0x1, 0xfff, 0x5, 0x5}, {0xfffffffd, 0x10, 0xf, 0xc, 0x1, 0x10}, {0x8, 0x800, 0x8, 0x2, 0x1}, {0x9, 0x1000, 0x3, 0x5, 0xffff, 0x9}, {0x2, 0x3, 0x1, 0x5, 0x5}, {0x8, 0xb9, 0xe802, 0x10, 0xb3, 0x7}, {0x3, 0xfffeffff, 0xa8d, 0x4, 0x0, 0xa9}], [{0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x6f238c7965216a1a}, {0x4}, {}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x38be09859712c37}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0xd9ae385ceb3ad7ec}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x0, 0x33dde7c6a4e2c178}, {0x2}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x3}, {0x2, 0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x5, 0xfffffffffffffff9, 0x8, 0x3}, 0x2d, 0xd5, [{0x25, 0x4, 0x10000, 0x8, 0xfff, 0x81}, {0xc, 0x8, 0x0, 0xc439, 0x7, 0x5}, {0x6, 0x3, 0x40, 0xdbed, 0x6, 0x4}, {0x5, 0x5, 0xdc0, 0x401, 0x5, 0x13}]}, [{0x10000, 0x34d, 0x2, 0xa0000000, 0x0, 0x4}, {0x5, 0x3fff800, 0xffffff18, 0x68, 0x81, 0xe19}, {0x200, 0xff, 0x9, 0x2, 0xfffffff9, 0x1fbc}, {0x8, 0x6, 0x2, 0x5, 0x2, 0x6}, {0x3, 0x4, 0x9, 0x81, 0x3bd, 0x2}, {0x9, 0x7fffffff, 0x4, 0x1000, 0x2, 0x5}, {0x9, 0x9609, 0x6, 0x5, 0x6, 0x3}, {0x0, 0xff, 0x8, 0x6, 0xd, 0x8}, {0x4, 0xffff, 0x3, 0xa, 0xffffff58, 0x5}, {0xfffffffa, 0xbb, 0x10000, 0x2, 0x3, 0xffffffff}, {0x5, 0xfff, 0x0, 0x5, 0x4, 0x10000}, {0x4, 0x7, 0xf8, 0x4, 0xfffffff9}, {0x5, 0x4cc, 0x8, 0x4, 0x0, 0x3}, {0x9, 0xfffffff8, 0x7f, 0xfffffffb, 0x10000, 0x4}, {0x0, 0x7, 0x1000, 0x8, 0x5, 0x4}, {0x8, 0x1, 0xaf, 0x0, 0x4, 0xffff8000}, {0xfffff800, 0x1, 0x5, 0x1, 0x6, 0x4}, {0x6, 0x7, 0x5b4b, 0x5054, 0x10, 0x9}, {0x4, 0xffffffff, 0x34, 0x0, 0x0, 0x5}, {0xe8, 0xad, 0x1ff, 0xcc, 0x3000, 0x8}, {0xc, 0x9, 0x6, 0x8, 0x8, 0x3}, {0x8, 0x400, 0xf3d, 0xfcdd, 0x1, 0xffffff01}, {0x7ff, 0x50b, 0xb, 0xa, 0x9, 0x4}, {0x7, 0x3, 0x788, 0xf, 0xef6a, 0x7f}, {0x2, 0x1, 0x6, 0x9, 0x7, 0xf}, {0x40, 0x5, 0x2, 0x8, 0x10001, 0x7}, {0x9, 0x9, 0x0, 0x2ca, 0x5, 0x9}, {0x9c5, 0xa5b, 0xdb, 0x1, 0x13f0, 0x3}, {0x1, 0x96, 0x0, 0x8, 0x6, 0x606a}, {0x3, 0x8, 0xf, 0xffffffff, 0x2b, 0x3}, {0xf0, 0x1, 0x6728dcec, 0x80000000, 0x80000000, 0xfffffffb}, {0xff, 0x8, 0x3, 0x9, 0x6, 0xffffffff}, {0x40, 0x7, 0x401, 0x0, 0x434, 0x8}, {0x62bb, 0x7ff, 0x9, 0x6, 0x6e}, {0x1, 0x80000001, 0xfffffff8, 0xff, 0xfffff001, 0x9}, {0x8, 0x80, 0x46, 0x4, 0x1, 0x81}, {0xfffff2c6, 0x3148, 0x8, 0x5, 0x8, 0x9}, {0x400, 0x0, 0x3, 0x3, 0x6, 0xfffffe01}, {0xe7, 0x80000001, 0x7, 0xfb, 0x778, 0x98a7}, {0x10, 0x9, 0x2, 0x40, 0x100, 0x7f}, {0x73, 0x7fff, 0x6, 0x7, 0x5, 0x9}, {0x5, 0xa77, 0x5, 0xfffff472, 0xa, 0x2}, {0x9b8, 0xfffffff8, 0xfffffffa, 0x10000, 0x0, 0x1000}, {0x44860b3f, 0x4847, 0x8000, 0xbe01, 0x8, 0x7}, {0x3, 0x80000001, 0xa8, 0x716e, 0x5, 0x7}, {0x1, 0x8, 0x3, 0xff, 0x9eeb52f, 0x6512}, {0x9, 0x7, 0xfff, 0x8, 0x62f8250b, 0x41}, {0x81, 0x9, 0x81, 0x21, 0x3, 0x5}, {0x1, 0xa, 0x1, 0x70, 0x9, 0x7}, {0xfffffffe, 0x401, 0x80000000, 0x4, 0x3}, {0x24000, 0x9, 0x5ce1, 0x3, 0x3, 0x4}, {0x5, 0xb, 0x7f, 0x7ff, 0xfffffffa, 0x3}, {0x4, 0x3, 0x1, 0x0, 0xa7d}, {0x6, 0x8, 0x7, 0x0, 0x1, 0xffffffff}, {0x2, 0x4, 0x3, 0xf0, 0x9, 0x5}, {0x6, 0x0, 0x0, 0x8, 0xffff, 0x9}, {0x7ff, 0x8, 0x4, 0x2, 0x2, 0x5}, {0x0, 0x2, 0x7, 0x6, 0x10001}, {0x5, 0x4, 0x8571, 0x80000000, 0xf, 0x69e}, {0x7, 0x1, 0x7, 0x64e, 0xc, 0xedb0}, {0x4, 0x10000, 0x758, 0x2, 0x4, 0x5}, {0x7f, 0x2, 0x60, 0x1000, 0xc6, 0xd}, {0x80000001, 0x4, 0x0, 0x2, 0xfff, 0xfffffffe}, {0x55, 0x3, 0x401, 0x3, 0x2e70, 0x4}, {0x4, 0x9, 0x8, 0x6, 0x7}, {0x6b52, 0x6, 0x0, 0x800, 0x1, 0x6}, {0xff, 0x4, 0x7fff, 0x8, 0x4, 0xa2d}, {0x7, 0x1, 0x2, 0x9, 0x2, 0x7}, {0x8, 0x93, 0xffff, 0x6, 0xae7, 0x7}, {0x2, 0x648, 0x7, 0x8, 0x6, 0x8001}, {0x3, 0x9, 0x200, 0xd, 0xb98c}, {0xff, 0x599b, 0x7fff, 0x6, 0xcbf4, 0x8}, {0x7, 0x3, 0x101, 0xfff, 0x0, 0x9}, {0x67b3, 0x0, 0x100, 0xd, 0x8, 0x8}, {0x5, 0x6, 0x10, 0x3, 0x2, 0x9}, {0xa, 0x2, 0x3c46, 0xa, 0x9, 0x6}, {0x3, 0x7, 0xe, 0x9, 0x3, 0x6}, {0xd, 0x800, 0x6, 0x4, 0xa89, 0x4}, {0x7, 0x0, 0x11f3, 0x5, 0x2, 0x2}, {0x100, 0xffffffff, 0xf, 0x3, 0x67, 0xfffffffb}, {0x1, 0x4, 0x8, 0x7, 0x8}, {0x1, 0x8, 0x5, 0x5, 0xfffffff8}, {0x9, 0xf225, 0x3}, {0x0, 0xfffffe01, 0x8, 0x401, 0x1, 0x3}, {0xe, 0x7, 0x1060000, 0xfff, 0xabd, 0x4}, {0x900000, 0x6, 0xf, 0x8, 0x4, 0x1}, {0x0, 0x3, 0x0, 0x7ff, 0x3ff, 0x3}, {0xc57, 0xd, 0x9, 0x9, 0x8, 0x2}, {0x215, 0x7ff, 0x5, 0x9, 0xed, 0x800}, {0x0, 0x7ff, 0x1, 0xbf, 0x2, 0x7}, {0x0, 0xfffffff9, 0x8, 0x2, 0xffffff80, 0x6}, {0xfffff800, 0x1, 0x0, 0x1, 0x61530c8b, 0x401}, {0xefd8, 0x2, 0x3, 0x80000001, 0x81, 0x401}, {0x7, 0x3, 0x5, 0x9, 0x6, 0x9}, {0x4, 0xe, 0x3, 0x1, 0x0, 0x7}, {0x2, 0x7, 0x40, 0x81, 0x5, 0x2}, {0xe, 0x81, 0x4, 0x2, 0xffffffff, 0x1ff}, {0x4, 0x7, 0x20, 0x1, 0x9000, 0x8d}, {0x2, 0xa, 0x6, 0x6, 0x7f, 0x8000}, {0xcdcd, 0x5, 0xfffffff8, 0x1, 0x3, 0x4}, {0x6, 0x3, 0x8000, 0x7fff, 0xcb, 0x8}, {0x4, 0x2, 0x1, 0x8, 0x1, 0x2}, {0x7, 0x62f3, 0x7ce, 0xce, 0x9, 0x6}, {0x3, 0x6, 0xe2, 0x0, 0x81, 0x1}, {0x457, 0x0, 0x3, 0x5, 0x1, 0xb}, {0x5, 0x28, 0x80000000, 0x4, 0x5, 0x3}, {0x6, 0x6cf, 0x3, 0x9, 0x50f, 0x2}, {0x0, 0xffffffff, 0x5, 0x1, 0x1, 0x76}, {0x3ff, 0x200, 0x6a, 0x5, 0x1, 0x4}, {0x9, 0xffff875c, 0xffff, 0x2, 0x5, 0x10001}, {0xffffffff, 0x1000, 0xffff4bb9, 0x0, 0x6, 0x2}, {0x2, 0x101, 0x8, 0xd68, 0x1ff, 0x5}, {0x10000, 0x541, 0x0, 0x0, 0x2, 0xe}, {0x1, 0x3, 0x7, 0x0, 0x2, 0x4}, {0x5, 0x30, 0x81, 0x0, 0x2, 0x1}, {0x400, 0xc, 0x1, 0xfffffff8, 0xffffffff}, {0x8, 0x3, 0x7fffffff, 0x2, 0x1, 0x80000000}, {0x3, 0x0, 0x401, 0x8, 0x6, 0x3}, {0x7, 0x80, 0x9, 0x7, 0xfb87, 0x4}, {0xcf42, 0x7d, 0x8faa, 0xb, 0x7, 0xcd3}, {0x10001, 0xfff, 0xffffffff, 0x2, 0x7fff, 0xf}, {0x1, 0x40, 0x7ff, 0x5, 0x8, 0x17e2}, {0x3, 0x81, 0xffffffff, 0x7fff, 0xc0000000, 0xa5f}, {0x800, 0x0, 0x80000001, 0x200, 0x2, 0x1}, {0x4, 0x7, 0x1, 0x4, 0x7fffffff, 0xffff7fff}, {0x6, 0x7fff, 0x1ff, 0x2, 0x6bc, 0x6}, {0x9, 0x3, 0xffffffff, 0xffffffff, 0xfffffffe, 0x9}, {0x2, 0x4, 0x3ff, 0x2, 0x0, 0x5}], [{0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x34f85fc8771eb511}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x5}, {0x2}, {0x2}, {0x2}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x6}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x4}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}]}, {0xe2, 0x6, "2d5197332e0c9bcfc819afba49fb6527a2478e83b6bf10201eb6970bdad1fb817ecdb9b4d31a4e7373cefab4c7399e2d953c2adf01939880435ebe67e38c6d7bd0e6def4348b98c144de225d6ed228a2ee75884baf81eea054eecd863bce44bbf128beade169a82c25d4743413545b41afbd4f867982fce50d480fdaaed1d19021fb9ce7d97d59fa7716b3b24904ad06013aaadfd68e04e56de3591c40546aada203095f75f6502a5ed347abd6df465692b3aa389232085dce85a85a507302acc90995148e87b3ec8daa12b0776227c3faf7adb4c2a22270c408a9aa37cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x23d4}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000027c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff31}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x40840}, 0x4004004) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002800), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000002840)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'cpuset'}, {0x2b, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'net'}]}, 0x26) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) 844.940418ms ago: executing program 5 (id=3088): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000fedbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c0099004b0e00006200000008000c00640000000a00180003030303030300000400cc0014002380060012000700000006000d000700000028a65316b292de57e6450cd723b440db7111fcdbf54527b30b067f7fdc82afecd6cb9139427943100ac7e98667384eaeb460d19835bfa100756d52d73760aff5c66027e9055c9b07a2"], 0x54}, 0x1, 0x0, 0x0, 0x24004094}, 0x18000) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)={0x1c, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 735.939816ms ago: executing program 4 (id=3089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3500c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xfffffffffffffdaf, 0x1, @dev}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x20, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d43, 0x20000000ec071, 0xffffffffffffffff, 0x0) 719.577786ms ago: executing program 1 (id=3090): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 696.470493ms ago: executing program 5 (id=3091): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000002380), 0x12) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000000406010800000000000000000a00080a090002007321f8408bbe1e88906504797a300000000005000100070000000900020073797a31000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x142, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000000100000000000000000000000000000c00078008000000000500010006003006000005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400000000000000"], 0x58}}, 0x24000044) r2 = socket(0x18, 0x3, 0xfffffffa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xac, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004217009e00660000931190780a0101016401010144148823ac14141400000008ac1414bb000000044418134000000006000001000000035a0000000800000fff0707afac1414aa004e224e220056907862ff0001000000006c962e4a9a4e7e092250cdcd2e86f664d0024b8ca4ac1395f470d77e08efbf05fc90314ab14f040000007256e41d97177addb02de1cc86c1e3df8cb624ed32d1db1b78a54e7d"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'macvlan1\x00', {0xffffffff}, 0x4}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'macvlan1\x00', {0xffffffff}, 0x4}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x14, r5, 0x80000001}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x38) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="4b9ff805b05130afa9576fa075c46c91ea3c6cb6e8f395e6e92c3d4fba76ff7e4fe0067dedecb4727206f6244e5e10c058962b5efd77036c98d30cfced21da263eb8784883266e2effbf79772df1bc55fcb45e10163de1a1cc2db1e3c4e6cfbe781d", @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x27000810}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="4b9ff805b05130afa9576fa075c46c91ea3c6cb6e8f395e6e92c3d4fba76ff7e4fe0067dedecb4727206f6244e5e10c058962b5efd77036c98d30cfced21da263eb8784883266e2effbf79772df1bc55fcb45e10163de1a1cc2db1e3c4e6cfbe781d", @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x27000810}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000200)=0x7f) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2427030068e60e8bc98d1194bcd5fec14b8448c8e40506a7309c3da535fbda3784a5aa406e21830b8cb5400000000000000006a330a505", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf254a0000000e00a80066697273746e616d65000000"], 0x24}, 0x1, 0x0, 0x0, 0x22000092}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2427030068e60e8bc98d1194bcd5fec14b8448c8e40506a7309c3da535fbda3784a5aa406e21830b8cb5400000000000000006a330a505", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf254a0000000e00a80066697273746e616d65000000"], 0x24}, 0x1, 0x0, 0x0, 0x22000092}, 0x0) getsockopt$MRT6(r2, 0x29, 0xcf, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r10) (async) syz_genetlink_get_family_id$fou(0x0, r10) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 487.066044ms ago: executing program 4 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x3, &(0x7f0000000240)="6fe15024152abcbe11284e75b1c5e9663e94397843489fe12403bae4eeaef74d6debbf0bf48bed7830961214c8afcd986aa04ec90a2af711c9e8c473869654dfb49bc72c79f6d732eb1429cecc4b3ab42c0b327e82a7615b68ebdc28ed63e92ead217b8f1a16ae95a09aa13d7c66733dcd76810ad5d8b2b3") sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe2, 0x3, "77c4acd20604cca28d1462e89a6e7c960ad0d08d94ecf4e3c364a2be26e4385bc3786eca50a5fb410f27cdd4f82a81a523fca5f15d60b23d1ba9da5df920b8cda4cdc09e59c3bf7ed93bb674f6deda822eef19b9de5cca510b49044a5247a17a3f82ad4d4b830a54b294bd79fef6c64df58a8274cf5f4f7e3b0ebbef46d8d0f58990e7e3e5dcf2a98b695a021bd3ffac9702b8d646f27f20bc12b8d8866c859755c659366d9f85a05e67fb9c72b4d0cd20c342441ca44c3431cb2ad8e412d5ce935d8151da20f02cea24e29c783d07e0c7f8b5b9a8be1adc7e8251b58c0d"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 481.511326ms ago: executing program 2 (id=3093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x3}, 0xa) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 439.441316ms ago: executing program 5 (id=3094): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x28) 407.432071ms ago: executing program 4 (id=3095): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) unshare(0x4020e00) r5 = socket$rds(0x15, 0x5, 0x0) unshare(0x41000180) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r4, r2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000040)={0x3, @bcast, 0xee00}) syz_emit_ethernet(0xd1, &(0x7f00000002c0)={@local, @empty, @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x93, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x30, 0x0, [], "cd02a1b89af75a9c93091d894a388242dc77be9f36955dc475f4bf089fe4d00221e0e2853a22c7bbc4817a8dc3945d2f"}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "025a51321cec3ef40716fdc1fce767436d766282b4b75b098393d37b72dba0"}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 249.231097ms ago: executing program 5 (id=3096): syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', 0x80000001}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x64}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={@local, 0x3, r3}) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, 0x1402, 0x2fc, 0x70bd23, 0x25dbdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) getsockopt$inet6_int(r4, 0x29, 0x34, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 246.320319ms ago: executing program 4 (id=3097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a7}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='xprtrdma_decode_seg\x00', r0, 0x0, 0x401}, 0x18) r2 = socket(0x2a, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x80) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x58}, 0x1, 0x0, 0x0, 0xc008055}, 0x90) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c001}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x120, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x84, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}}, 0x2) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x3, 0x1, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x4000000) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100fed394095af0e11800000000000000500000005000000006000000090000000000001103b96a8a35000000090000000000000a04000000030000130000001202000000000000000200000d00000000060000000300000008000000010000000400000000000008000000"], &(0x7f0000000340)=""/113, 0x6e, 0x71, 0x1, 0x3598}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', r9, r10, 0x1, 0x2, 0x3}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000000000000000000000000000000005c68a5a38001fc60fe4fce3c69b76fee8c6939579c2beb4b6352109ceac37bea"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 127.692044ms ago: executing program 5 (id=3098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000c40)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'veth0_to_hsr\x00', @random='\x00\b\x00'}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, @ethernet={0x306}, @ethernet={0x6, @random="96deea81f1e1"}, @l2tp={0x2, 0x0, @broadcast, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x69df, 0x0, 0x4, 0x9, 0x4}) 0s ago: executing program 4 (id=3099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "c3965ba22b9021b0", "80c5fa1ac5d2cfc545b543b59e7eb73344a2ec910af9b48df5c09cca3a9aad9d", "5eb8e2b5", "a97229e2b69d6f5d"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 5 has an invalid length. [ 161.720438][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.742254][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.750950][ T8831] bridge_slave_0: entered allmulticast mode [ 161.761526][ T8831] bridge_slave_0: entered promiscuous mode [ 161.879523][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.891350][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.900561][ T8831] bridge_slave_1: entered allmulticast mode [ 161.913713][ T8831] bridge_slave_1: entered promiscuous mode [ 161.977330][ T8962] netlink: 104 bytes leftover after parsing attributes in process `syz.2.849'. [ 162.037121][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.048390][ T59] IPVS: stop unused estimator thread 0... [ 162.067778][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.186262][ T8831] team0: Port device team_slave_0 added [ 162.208688][ T8831] team0: Port device team_slave_1 added [ 162.333735][ T5877] Bluetooth: hci3: command tx timeout [ 162.435610][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.442576][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.488312][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.528865][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.552756][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.604691][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.710752][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 162.742939][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 162.823026][ T8831] hsr_slave_0: entered promiscuous mode [ 162.839176][ T8831] hsr_slave_1: entered promiscuous mode [ 162.884356][ T8831] debugfs: 'hsr0' already exists in 'hsr' [ 162.889063][ T9000] netlink: 'syz.1.859': attribute type 83 has an invalid length. [ 162.890104][ T8831] Cannot create hsr debugfs directory [ 163.027561][ T9010] netlink: 'syz.4.861': attribute type 2 has an invalid length. [ 163.135902][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 163.398827][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 163.422305][ T9024] netlink: 'syz.2.865': attribute type 64 has an invalid length. [ 163.441479][ T9027] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 163.448768][ T9024] netlink: 5 bytes leftover after parsing attributes in process `syz.2.865'. [ 163.491497][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 163.691571][ T8831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.719065][ T8831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.742484][ T8831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.759727][ T8831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.833928][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.869'. [ 164.181247][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.269168][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.314370][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.321549][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.373697][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.380877][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.412049][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.877'. [ 164.414927][ T5877] Bluetooth: hci3: command tx timeout [ 164.477476][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 164.615823][ T8831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.727469][ T9086] veth1_to_bond: entered allmulticast mode [ 164.747476][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.144638][ T9104] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.155841][ T9085] veth1_to_bond: left allmulticast mode [ 165.345666][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.930560][ T9135] netlink: 'syz.1.890': attribute type 27 has an invalid length. [ 165.963171][ T9136] delete_channel: no stack [ 165.976952][ T9135] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 166.029157][ T9134] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 166.220098][ T9147] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 166.291824][ T9158] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 166.316341][ T8831] veth0_vlan: entered promiscuous mode [ 166.359861][ T8831] veth1_vlan: entered promiscuous mode [ 166.481623][ T8831] veth0_macvtap: entered promiscuous mode [ 166.492887][ T5877] Bluetooth: hci3: command tx timeout [ 166.554258][ T8831] veth1_macvtap: entered promiscuous mode [ 166.607185][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.645610][ T9176] tipc: Enabled bearer , priority 0 [ 166.670535][ T9176] syzkaller0: entered promiscuous mode [ 166.686033][ T9176] syzkaller0: entered allmulticast mode [ 166.717856][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.882150][ T9166] tipc: Resetting bearer [ 166.902691][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.958094][ T9165] tipc: Resetting bearer [ 167.003901][ T9165] tipc: Disabling bearer [ 167.019273][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.046008][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.082075][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.171067][ T9200] __nla_validate_parse: 5 callbacks suppressed [ 167.171086][ T9200] netlink: 164 bytes leftover after parsing attributes in process `syz.0.906'. [ 167.302993][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.310841][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.359020][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.378143][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.440400][ T9213] netlink: 1 bytes leftover after parsing attributes in process `syz.1.913'. [ 167.458259][ T9213] xt_policy: neither incoming nor outgoing policy selected [ 167.858181][ T9237] sctp: [Deprecated]: syz.4.921 (pid 9237) Use of int in max_burst socket option. [ 167.858181][ T9237] Use struct sctp_assoc_value instead [ 168.116014][ T9257] syzkaller1: entered promiscuous mode [ 168.130423][ T9257] syzkaller1: entered allmulticast mode [ 168.142423][ T9256] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:21 [ 168.212157][ T9261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.286982][ T9263] ip6gre1: entered allmulticast mode [ 168.465331][ T9279] netlink: 2 bytes leftover after parsing attributes in process `syz.1.933'. [ 168.512895][ T9280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.900625][ T9304] syzkaller1: entered promiscuous mode [ 168.911660][ T9304] syzkaller1: entered allmulticast mode [ 168.919512][ T9311] netlink: 'syz.2.938': attribute type 24 has an invalid length. [ 168.923643][ T9310] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 168.935402][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 169.806264][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 170.507421][ T9381] macvtap1: entered allmulticast mode [ 170.532789][ T9381] veth0_macvtap: entered allmulticast mode [ 170.643177][ T9395] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 170.711608][ T9395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.763102][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 170.779491][ T9406] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.967'. [ 170.867996][ T9409] netlink: 'syz.5.966': attribute type 1 has an invalid length. [ 170.897612][ T9409] netlink: 244 bytes leftover after parsing attributes in process `syz.5.966'. [ 170.965499][ T9413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.969'. [ 171.005378][ T9413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.969'. [ 171.016954][ T9415] netlink: 'syz.0.971': attribute type 24 has an invalid length. [ 171.028064][ T9413] unsupported nlmsg_type 40 [ 171.522684][ T9444] tipc: Started in network mode [ 171.532682][ T9444] tipc: Node identity 080211000001, cluster identity 4711 [ 171.550436][ T9444] tipc: Enabled bearer , priority 0 [ 171.574338][ T9445] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 171.925477][ T9481] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 172.053482][ T9488] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 172.087903][ T9488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.113312][ T9488] bond1: (slave geneve2): making interface the new active one [ 172.123389][ T9488] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 172.141625][ T3481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.173708][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.194020][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.246457][ T9488] netlink: 56 bytes leftover after parsing attributes in process `syz.0.993'. [ 172.287956][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'. [ 172.340836][ T9492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.406756][ T9498] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 172.418214][ T9494] IPVS: stopping backup sync thread 9498 ... [ 172.544063][ T5980] tipc: Node number set to 134418688 [ 173.041932][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1000'. [ 173.372152][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 173.521089][ T9558] netlink: 'syz.5.1008': attribute type 9 has an invalid length. [ 173.529563][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 173.584833][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 173.593334][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 173.602655][ T9557] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1009'. [ 173.612342][ T9557] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1009'. [ 173.966304][ T9575] tap0: tun_chr_ioctl cmd 1074025672 [ 173.971639][ T9575] tap0: ignored: set checksum disabled [ 174.239092][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 174.284950][ T9597] tipc: Enabled bearer , priority 0 [ 174.324343][ T9589] syzkaller0: entered promiscuous mode [ 174.341977][ T9589] syzkaller0: entered allmulticast mode [ 174.388485][ T9589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.451597][ T9589] tipc: Resetting bearer [ 174.509463][ T9588] tipc: Resetting bearer [ 174.578127][ T9588] tipc: Disabling bearer [ 174.609215][ T9614] team0: Device vti0 is of different type [ 174.927133][ T9638] netlink: 'syz.2.1034': attribute type 21 has an invalid length. [ 174.970287][ T9638] netlink: 'syz.2.1034': attribute type 22 has an invalid length. [ 174.997162][ T9638] netlink: 'syz.2.1034': attribute type 23 has an invalid length. [ 175.007442][ T9638] netlink: 'syz.2.1034': attribute type 25 has an invalid length. [ 175.015788][ T9638] netlink: 'syz.2.1034': attribute type 26 has an invalid length. [ 175.085995][ T9641] tipc: Enabled bearer , priority 0 [ 175.097159][ T9641] syzkaller0: entered promiscuous mode [ 175.102665][ T9641] syzkaller0: entered allmulticast mode [ 175.175646][ T9641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.235721][ T9659] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20004 [ 175.315020][ T9664] tipc: Resetting bearer [ 175.356563][ T9666] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 175.371121][ T9663] team_slave_0: entered promiscuous mode [ 175.376967][ T9663] team_slave_1: entered promiscuous mode [ 175.530887][ T9669] bond5: (slave gretap1): making interface the new active one [ 175.545159][ T9669] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 175.557017][ T9671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.558817][ T9652] netlink: 'syz.4.1038': attribute type 13 has an invalid length. [ 175.572318][ T9652] netlink: 'syz.4.1038': attribute type 17 has an invalid length. [ 175.629063][ T9677] netlink: 'syz.5.1047': attribute type 10 has an invalid length. [ 175.642196][ T9677] batadv0: entered promiscuous mode [ 175.659005][ T9677] batadv0: entered allmulticast mode [ 175.671763][ T9677] bridge0: port 3(batadv0) entered blocking state [ 175.686699][ T9677] bridge0: port 3(batadv0) entered disabled state [ 175.725399][ T9677] bridge0: port 3(batadv0) entered blocking state [ 175.731971][ T9677] bridge0: port 3(batadv0) entered forwarding state [ 175.834394][ T9652] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.843212][ T1109] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 175.852633][ T1109] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 175.862188][ T9652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.885055][ T9683] vlan2: entered allmulticast mode [ 175.905359][ T9640] tipc: Resetting bearer [ 175.917854][ T9640] tipc: Disabling bearer [ 176.572114][ T9704] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 176.703782][ T9716] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.091806][ T9745] syzkaller0: entered allmulticast mode [ 177.482026][ T9767] __nla_validate_parse: 14 callbacks suppressed [ 177.482044][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1075'. [ 177.701918][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 177.702553][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 177.730178][ T9780] tipc: Started in network mode [ 177.735313][ T9780] tipc: Node identity 7a99f88776e2, cluster identity 4711 [ 177.742566][ T9780] tipc: Enabled bearer , priority 0 [ 177.750371][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 177.775779][ T9780] syzkaller0: entered promiscuous mode [ 177.781290][ T9780] syzkaller0: entered allmulticast mode [ 177.807325][ T9780] openvswitch: netlink: Missing key (keys=40, expected=100) [ 177.833913][ T9780] tipc: Enabling of bearer rejected, already enabled [ 177.888961][ T9780] tipc: Resetting bearer [ 177.911305][ T9779] tipc: Resetting bearer [ 177.947525][ T9779] tipc: Disabling bearer [ 178.112181][ T9808] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1085'. [ 178.128892][ T9808] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 178.142114][ T9808] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 178.512227][ T9830] openvswitch: netlink: Key type 29 is not supported [ 178.539859][ T9832] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96 [ 178.685204][ T9846] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1094'. [ 178.695771][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 178.705647][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 178.735063][ T9843] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1095'. [ 178.829345][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 178.894962][ T9861] openvswitch: netlink: IPv4 tun info is not correct [ 179.822242][ T9887] tipc: Enabled bearer , priority 0 [ 179.832971][ T9886] tipc: Enabling of bearer rejected, already enabled [ 179.916546][ T9887] syzkaller0: entered promiscuous mode [ 179.926690][ T9887] syzkaller0: entered allmulticast mode [ 179.934773][ T9887] tipc: Resetting bearer [ 179.960523][ T9885] tipc: Resetting bearer [ 180.627505][ T9906] sctp: [Deprecated]: syz.2.1112 (pid 9906) Use of int in max_burst socket option. [ 180.627505][ T9906] Use struct sctp_assoc_value instead [ 180.818343][ T92] tipc: Node number set to 265043874 [ 181.271246][ T9885] tipc: Disabling bearer [ 182.144944][ T9946] validate_nla: 3 callbacks suppressed [ 182.144963][ T9946] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 182.193892][ T9946] team0: Port device dummy0 added [ 182.401643][ T9957] netlink: 'syz.5.1131': attribute type 1 has an invalid length. [ 182.463613][ T9957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.505533][ T9957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.512800][ T9957] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.526382][ T9957] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 182.746531][ T9969] netlink: 'syz.5.1133': attribute type 1 has an invalid length. [ 182.755691][ T9971] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 182.765751][ T9969] __nla_validate_parse: 6 callbacks suppressed [ 182.765764][ T9969] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1133'. [ 182.851031][ T9979] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 183.014736][ T9981] bond3: (slave bridge3): making interface the new active one [ 183.046539][ T9981] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 183.623745][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 183.638521][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 183.653087][T10029] netlink: 'syz.4.1148': attribute type 6 has an invalid length. [ 184.378785][T10069] netlink: 'syz.5.1159': attribute type 10 has an invalid length. [ 184.514052][T10069] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.721239][T10087] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1165'. [ 184.739306][T10087] 8021q: VLANs not supported on gre0 [ 184.956570][T10105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1166'. [ 185.156192][T10113] netlink: 'syz.5.1171': attribute type 3 has an invalid length. [ 185.253240][T10113] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1171'. [ 185.497885][T10128] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1176'. [ 185.529123][T10131] netlink: 'syz.0.1177': attribute type 3 has an invalid length. [ 185.566282][T10131] tipc: Enabling of bearer rejected, failed to enable media [ 185.594288][T10131] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 185.609538][T10131] team0: Port device dummy0 added [ 186.110805][T10153] syzkaller0: entered promiscuous mode [ 186.152868][T10153] syzkaller0: entered allmulticast mode [ 186.277475][T10175] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1187'. [ 186.290351][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 186.509250][T10184] IPVS: persistence engine module ip_vs_pe_ not found [ 186.610595][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'. [ 187.151057][ T3588] wlan1: Creating new IBSS network, BSSID 46:f1:72:9e:b4:b8 [ 187.816814][T10204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.823519][T10204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.899619][T10213] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 188.076098][T10221] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 188.196761][T10232] netlink: 'syz.1.1202': attribute type 12 has an invalid length. [ 188.241040][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 188.355048][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 188.713954][T10251] syzkaller0: entered allmulticast mode [ 188.881719][T10259] netlink: 'syz.4.1211': attribute type 33 has an invalid length. [ 189.051094][T10265] netlink: 'syz.0.1215': attribute type 11 has an invalid length. [ 189.083284][T10265] netlink: 'syz.0.1215': attribute type 4 has an invalid length. [ 189.101241][T10265] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1215'. [ 189.101597][T10274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1217'. [ 189.151759][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 189.162755][T10277] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.181159][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1214'. [ 189.247274][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 189.404361][T10297] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1222'. [ 189.623579][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'. [ 189.634315][T10311] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 189.735268][T10311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.833689][T10327] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.933641][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 190.426005][T10346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.682078][ T92] hid-generic 0005:16C0:5501.0001: unknown main item tag 0x0 [ 190.720931][T10371] vlan2: entered allmulticast mode [ 190.723611][ T92] hid-generic 0005:16C0:5501.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 190.737527][T10371] gretap0: entered allmulticast mode [ 191.100242][T10391] tipc: New replicast peer: 255.255.255.255 [ 191.111432][T10391] tipc: Enabled bearer , priority 10 [ 191.820144][T10425] syzkaller0: tun_chr_ioctl cmd 1074025688 [ 192.060040][T10436] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 192.222840][ T92] tipc: Node number set to 209451143 [ 192.835726][T10475] syzkaller1: entered promiscuous mode [ 192.841225][T10475] syzkaller1: entered allmulticast mode [ 193.141346][T10484] bond3: entered promiscuous mode [ 193.146566][T10484] bond3: entered allmulticast mode [ 193.152090][T10484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.253939][ T30] audit: type=1107 audit(1757842365.148:3): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='v m=?0ȠԌ(J,[L]gPR.y[DH}fo#0urQsKL@ ͐q"1, priority 0 [ 195.412221][T10615] syzkaller0: entered promiscuous mode [ 195.422610][T10615] syzkaller0: entered allmulticast mode [ 195.502136][T10615] tipc: Resetting bearer [ 195.519915][T10614] tipc: Resetting bearer [ 195.560431][T10614] tipc: Disabling bearer [ 196.530148][ T59] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 196.539437][ T59] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 196.551231][ T59] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 196.605382][ T59] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 197.520656][T10721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.828430][T10736] sctp: [Deprecated]: syz.5.1356 (pid 10736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.828430][T10736] Use struct sctp_sack_info instead [ 197.974969][T10739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.997800][T10739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.011788][T10739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 198.208113][T10739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.230723][T10739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.269654][T10739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 198.570725][T10739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.604180][T10739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.648556][T10739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 198.853454][T10778] __nla_validate_parse: 20 callbacks suppressed [ 198.853472][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1365'. [ 199.474596][T10790] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1369'. [ 199.490109][T10790] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 199.536214][T10739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.551502][T10739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.575168][T10739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 199.704605][T10778] team_slave_0: entered promiscuous mode [ 199.710345][T10778] team_slave_1: entered promiscuous mode [ 199.716136][T10778] dummy0: entered promiscuous mode [ 199.732324][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 199.823517][T10798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1371'. [ 199.876751][T10802] delete_channel: no stack [ 199.916441][T10807] validate_nla: 2 callbacks suppressed [ 199.916457][T10807] netlink: 'syz.5.1372': attribute type 1 has an invalid length. [ 200.051367][T10800] bridge0: port 3(batadv0) entered disabled state [ 200.058164][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.065872][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.084229][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.096982][T10800] team_slave_0: left promiscuous mode [ 200.102593][T10800] team_slave_1: left promiscuous mode [ 200.111969][T10800] dummy0: left promiscuous mode [ 200.179580][T10800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.194625][T10800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.291708][ T1109] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.306681][ T1109] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.315514][ T1109] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.367174][T10812] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 200.460441][ T1109] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.472152][ T1109] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.554175][ T1109] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.563224][ T1109] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.572097][ T1109] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.594408][ T1109] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.610839][ T1109] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.630914][ T1109] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.658560][ T1109] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.677059][ T1109] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.698329][ T1109] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.743070][ T3520] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.770630][ T3520] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.800543][ T3520] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.853545][T10837] netlink: 'syz.1.1382': attribute type 21 has an invalid length. [ 200.861591][ T3520] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.881906][T10837] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.891632][ T3520] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.922434][ T3520] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.100121][T10851] netlink: 'syz.0.1386': attribute type 4 has an invalid length. [ 201.144807][T10851] IPv6: sit1: Disabled Multicast RS [ 201.169275][T10851] sit1: entered allmulticast mode [ 201.257897][T10863] netlink: 'syz.1.1389': attribute type 12 has an invalid length. [ 201.373009][ T5188] Bluetooth: hci1: command 0x0406 tx timeout [ 201.379174][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 201.590477][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 201.927815][T10902] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1401'. [ 202.171329][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1403'. [ 202.309153][T10918] netlink: 192156 bytes leftover after parsing attributes in process `syz.5.1405'. [ 202.440992][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 202.460958][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1407'. [ 202.506497][T10928] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 202.510638][T10928] block (null): Could not allocate knbd recv work queue. [ 202.547696][T10928] nbd: failed to add new device [ 202.570088][T10934] tipc: Enabling of bearer rejected, failed to enable media [ 203.088116][T10962] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 203.103246][T10962] openvswitch: netlink: Duplicate key (type 0). [ 203.387237][T10974] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 204.059136][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.066606][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.109419][T11013] __nla_validate_parse: 4 callbacks suppressed [ 204.109432][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 204.237193][T11023] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 204.407352][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.439573][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.912664][T10980] tipc: Resetting bearer [ 205.103462][T10999] tipc: Enabling of bearer rejected, failed to enable media [ 205.171964][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.201235][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 205.223471][ T36] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.244043][T11041] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 205.251781][T11041] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1434'. [ 205.267061][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.276299][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 205.300630][ T36] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.309891][T11041] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 205.321065][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.337439][T11041] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1434'. [ 205.347898][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 205.373465][ T36] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.443272][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.471926][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 205.495340][ T36] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.519415][T11056] : renamed from vlan0 [ 205.615413][ T5877] Bluetooth: hci3: command 0x0405 tx timeout [ 206.122154][T11099] lo: entered allmulticast mode [ 206.137743][T11097] lo: left allmulticast mode [ 206.140970][T11100] netlink: 'syz.5.1445': attribute type 1 has an invalid length. [ 206.152412][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1445'. [ 206.177490][T11100] ip6tnl3: entered promiscuous mode [ 206.183296][T11100] ip6tnl3: entered allmulticast mode [ 206.315538][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 206.502327][T11128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.693473][T11131] bridge_slave_0: left allmulticast mode [ 206.710646][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.746751][T11131] bridge_slave_1: left allmulticast mode [ 206.753343][T11131] bridge_slave_1: left promiscuous mode [ 206.759206][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.786495][T11131] team_slave_0: left promiscuous mode [ 206.795920][T11131] team0: Port device team_slave_0 removed [ 206.806165][T11131] team_slave_1: left promiscuous mode [ 206.819990][T11131] team0: Port device team_slave_1 removed [ 206.828743][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.838591][T11131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.851625][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.859506][T11131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.880326][T11131] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 207.098336][T11164] tipc: Enabled bearer , priority 0 [ 207.113803][T11164] syzkaller0: entered promiscuous mode [ 207.119292][T11164] syzkaller0: entered allmulticast mode [ 207.162431][T11164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.277924][T11174] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1464'. [ 207.321697][T11161] tipc: Resetting bearer [ 207.406778][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 207.421858][T11161] tipc: Disabling bearer [ 207.618389][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 207.627892][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 207.674579][T11201] netlink: 'syz.4.1475': attribute type 1 has an invalid length. [ 207.700704][T11201] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 207.808340][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 208.440019][T11237] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 208.615322][T11246] tipc: Enabled bearer , priority 0 [ 208.636645][T11246] syzkaller0: entered promiscuous mode [ 208.642136][T11246] syzkaller0: entered allmulticast mode [ 208.688809][T11246] syzkaller0: mtu less than device minimum [ 208.725346][T11244] tipc: Resetting bearer [ 208.759371][T11254] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 208.771050][T11244] tipc: Disabling bearer [ 208.877308][T11254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.147077][T11273] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1491'. [ 209.227627][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1493'. [ 209.382840][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 209.401562][T11288] netlink: 'syz.1.1496': attribute type 3 has an invalid length. [ 209.456046][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 209.858677][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.910881][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1507'. [ 209.978436][T11330] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 209.991092][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 210.003982][T11330] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 210.029268][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 210.114426][T11340] tipc: Enabling of bearer rejected, failed to enable media [ 210.500217][T11363] netlink: 'syz.5.1517': attribute type 2 has an invalid length. [ 210.508695][T11363] netlink: 'syz.5.1517': attribute type 8 has an invalid length. [ 210.541278][T11363] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1517'. [ 210.594727][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1518'. [ 210.652299][T11367] tipc: Enabled bearer , priority 0 [ 210.676837][T11367] syzkaller0: entered promiscuous mode [ 210.692569][T11367] syzkaller0: entered allmulticast mode [ 210.730927][T11377] netlink: 117 bytes leftover after parsing attributes in process `syz.2.1521'. [ 210.745255][T11367] tipc: Resetting bearer [ 210.751139][T11378] netlink: 117 bytes leftover after parsing attributes in process `syz.2.1521'. [ 210.782226][T11365] tipc: Resetting bearer [ 210.810590][T11365] tipc: Disabling bearer [ 211.106942][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1527'. [ 211.335099][T11415] netlink: 'syz.5.1529': attribute type 33 has an invalid length. [ 211.457487][T11424] erspan0: entered promiscuous mode [ 211.472118][T11424] macvtap1: entered promiscuous mode [ 211.487857][T11424] macvtap1: entered allmulticast mode [ 211.498428][T11424] erspan0: entered allmulticast mode [ 211.536507][T11426] erspan0: left allmulticast mode [ 211.546703][T11426] erspan0: left promiscuous mode [ 211.905754][T11448] netlink: 'syz.1.1539': attribute type 18 has an invalid length. [ 211.949645][T11448] netlink: 'syz.1.1539': attribute type 18 has an invalid length. [ 211.960220][T11450] netlink: 'syz.0.1538': attribute type 5 has an invalid length. [ 212.060057][T11455] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 212.453619][ T51] Bluetooth: hci4: link tx timeout [ 212.458800][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 212.867309][T11510] ip6gre1: entered allmulticast mode [ 212.927604][T11520] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 212.950544][T11520] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 213.045539][T11514] tipc: Enabled bearer , priority 24 [ 213.139148][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.160844][T11529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.191236][T11529] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.211226][T11529] gretap1: entered promiscuous mode [ 213.229170][T11529] gretap1: entered allmulticast mode [ 213.276903][T11540] netlink: 'syz.2.1565': attribute type 11 has an invalid length. [ 213.364470][T11544] syzkaller1: entered promiscuous mode [ 213.377052][T11544] syzkaller1: entered allmulticast mode [ 213.877998][T11578] veth3: entered allmulticast mode [ 214.009901][T11589] netem: change failed [ 214.041415][T11586] team0: Device ip6gre1 is of different type [ 214.211319][T11611] tipc: Enabling of bearer rejected, failed to enable media [ 214.392570][T11623] __nla_validate_parse: 13 callbacks suppressed [ 214.392588][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 214.433410][T11628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1587'. [ 214.493180][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 214.629625][T11637] 8021q: VLANs not supported on wg1 [ 214.985244][T11659] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 214.992658][T11659] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 215.015778][T11659] tipc: Resetting bearer [ 215.158954][T11665] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 215.194977][T11666] gretap1: entered promiscuous mode [ 215.259747][T11668] macvlan2: entered promiscuous mode [ 215.265784][T11668] macvlan2: entered allmulticast mode [ 215.272075][T11668] bond6: entered promiscuous mode [ 215.280653][T11668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.291274][T11668] bond6: left promiscuous mode [ 215.816462][T11687] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 215.852498][T11687] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 215.864618][T11687] gretap2: entered promiscuous mode [ 215.871679][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1599'. [ 215.884778][T11687] gretap2: entered allmulticast mode [ 216.000365][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1601'. [ 216.023676][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1601'. [ 216.027521][T11699] netdevsim netdevsim5 : renamed from netdevsim0 [ 216.142966][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'. [ 216.242305][T11714] netlink: 'syz.1.1605': attribute type 4 has an invalid length. [ 216.293267][T11708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.409924][T11724] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1606'. [ 216.573089][T11735] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.1609'. [ 216.894200][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 217.290733][T11765] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1616'. [ 217.316696][T11777] netlink: 'syz.0.1618': attribute type 11 has an invalid length. [ 217.363018][T11777] netlink: 'syz.0.1618': attribute type 11 has an invalid length. [ 217.638017][T11797] netlink: 'syz.5.1623': attribute type 1 has an invalid length. [ 217.732475][ T36] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 217.763075][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.826173][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.862804][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.883510][T11808] netlink: 'syz.4.1625': attribute type 7 has an invalid length. [ 218.756865][T11859] syzkaller0: entered promiscuous mode [ 218.783074][T11859] syzkaller0: entered allmulticast mode [ 219.094756][T11876] netlink: 'syz.4.1643': attribute type 8 has an invalid length. [ 219.373579][T11889] nbd0: detected capacity change from 0 to 127 [ 219.389713][T11886] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.392512][ T51] block nbd0: Receive control failed (result -32) [ 219.432430][T11897] __nla_validate_parse: 6 callbacks suppressed [ 219.432447][T11897] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1649'. [ 219.471279][T11886] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.672599][T11907] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 219.741718][T11913] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 220.137214][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 220.177326][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1658'. [ 220.211753][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 220.240085][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 220.270124][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 220.288267][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1659'. [ 220.719229][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 220.748079][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 220.767315][T11962] netlink: 'syz.4.1665': attribute type 14 has an invalid length. [ 220.793499][T11962] netlink: 'syz.4.1665': attribute type 13 has an invalid length. [ 220.911876][T11978] netlink: 'syz.2.1668': attribute type 10 has an invalid length. [ 220.931832][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.948092][T11978] bridge_slave_1: left allmulticast mode [ 220.954726][T11978] bridge_slave_1: left promiscuous mode [ 220.960518][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.411623][T11954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.432246][T11966] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 221.446901][T11966] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1663'. [ 221.618494][T11990] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.628498][T11991] gretap0: entered promiscuous mode [ 221.653118][T11991] gretap0: left promiscuous mode [ 221.884468][T12005] tipc: Enabled bearer , priority 0 [ 221.893542][T12005] syzkaller0: entered promiscuous mode [ 221.899120][T12005] syzkaller0: entered allmulticast mode [ 221.971855][T12005] tipc: Resetting bearer [ 221.987671][T12004] tipc: Resetting bearer [ 222.017324][T12004] tipc: Disabling bearer [ 222.065532][T12021] netlink: 'syz.2.1681': attribute type 13 has an invalid length. [ 222.084906][T12021] netlink: 'syz.2.1681': attribute type 58 has an invalid length. [ 222.299347][T12029] openvswitch: netlink: EtherType 0 is less than min 600 [ 222.914175][T12070] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 223.385706][T12096] tipc: Enabled bearer , priority 0 [ 223.610920][T12111] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 224.042224][T12144] netlink: 'syz.2.1722': attribute type 2 has an invalid length. [ 224.073796][T12145] netlink: 'syz.2.1722': attribute type 2 has an invalid length. [ 224.201016][T12155] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.229099][T12150] team0: Device gtp0 is of different type [ 224.491636][T12164] bond4: entered promiscuous mode [ 224.497799][T12164] bond4: entered allmulticast mode [ 224.504532][T12164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.604973][T12182] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 224.685379][T12187] __nla_validate_parse: 12 callbacks suppressed [ 224.685398][T12187] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1735'. [ 224.917494][T12198] 8021q: VLANs not supported on sit0 [ 225.041226][T12207] tc_dump_action: action bad kind [ 225.071135][T12208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1742'. [ 225.353171][T12234] pim6reg: entered allmulticast mode [ 225.360039][T12234] pim6reg: left allmulticast mode [ 225.402149][T12236] tipc: Enabled bearer , priority 0 [ 225.447780][T12236] syzkaller0: mtu less than device minimum [ 225.482418][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 225.507366][T12243] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1752'. [ 225.712005][T12261] xt_limit: Overflow, try lower: 604147548/4200216962 [ 225.775460][T12258] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 225.794671][T12265] team0: Device vti0 is of different type [ 225.851443][T12269] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1758'. [ 226.001163][T12218] tipc: Disabling bearer [ 226.054495][T12284] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 226.062379][T12284] netlink: 'syz.0.1763': attribute type 2 has an invalid length. [ 226.093448][T12284] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 226.123981][T12284] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1763'. [ 226.368157][T12308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 226.429856][T12313] bridge0: port 1(syz_tun) entered blocking state [ 226.473230][T12313] bridge0: port 1(syz_tun) entered disabled state [ 226.480173][T12313] syz_tun: entered allmulticast mode [ 226.491182][T12313] syz_tun: entered promiscuous mode [ 226.555267][T12313] bridge0: port 1(syz_tun) entered blocking state [ 226.562059][T12313] bridge0: port 1(syz_tun) entered forwarding state [ 226.739911][T12334] tipc: Enabled bearer , priority 13 [ 226.935286][T12342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1778'. [ 226.979044][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1778'. [ 226.986186][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 227.122097][T12356] !: renamed from dummy0 [ 227.889721][T12402] lo speed is unknown, defaulting to 1000 [ 227.896534][T12402] lo speed is unknown, defaulting to 1000 [ 227.913025][T12402] lo speed is unknown, defaulting to 1000 [ 227.968326][T12402] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 228.014603][T12402] lo speed is unknown, defaulting to 1000 [ 228.022654][T12402] lo speed is unknown, defaulting to 1000 [ 228.030779][T12402] lo speed is unknown, defaulting to 1000 [ 228.039998][T12402] lo speed is unknown, defaulting to 1000 [ 228.058731][T12402] lo speed is unknown, defaulting to 1000 [ 228.290369][T12428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.165387][T12497] netlink: 'syz.4.1810': attribute type 8 has an invalid length. [ 229.376852][T12503] netlink: 'syz.1.1817': attribute type 21 has an invalid length. [ 229.964664][T12520] __nla_validate_parse: 12 callbacks suppressed [ 229.964682][T12520] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1823'. [ 230.558650][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1828'. [ 230.607050][T12541] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1828'. [ 230.891364][T12548] C: renamed from team_slave_0 [ 230.932364][T12548] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 230.970375][T12548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 231.048903][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 231.096588][T12557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.111361][T12557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.167722][T12569] syzkaller0: entered promiscuous mode [ 231.175724][T12569] syzkaller0: entered allmulticast mode [ 231.197576][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1837'. [ 231.212273][T12565] tipc: Enabled bearer , priority 0 [ 231.235831][T12575] netlink: 'syz.1.1838': attribute type 1 has an invalid length. [ 231.247422][T12575] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1838'. [ 231.264695][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 231.323975][T12569] tipc: Resetting bearer [ 231.352394][T12562] tipc: Resetting bearer [ 231.381509][T12562] tipc: Disabling bearer [ 231.408879][T12584] netlink: 'syz.2.1839': attribute type 5 has an invalid length. [ 231.517267][T12594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1843'. [ 231.658056][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 231.744347][T12612] bridge0: port 2(syz_tun) entered blocking state [ 231.751110][T12612] bridge0: port 2(syz_tun) entered disabled state [ 231.758965][T12612] syz_tun: entered allmulticast mode [ 231.776063][T12612] syz_tun: entered promiscuous mode [ 231.783740][T12612] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 231.798569][T12612] bridge0: port 2(syz_tun) entered blocking state [ 231.805183][T12612] bridge0: port 2(syz_tun) entered forwarding state [ 231.821210][T12612] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.030580][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1854'. [ 232.175463][T12636] sctp: [Deprecated]: syz.5.1858 (pid 12636) Use of int in max_burst socket option. [ 232.175463][T12636] Use struct sctp_assoc_value instead [ 232.394537][T12648] netlink: 'syz.5.1862': attribute type 2 has an invalid length. [ 232.595982][T12650] netlink: 'syz.1.1863': attribute type 11 has an invalid length. [ 232.608139][T12650] batadv_slave_0: entered promiscuous mode [ 232.642456][T12653] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 232.655052][T12653] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.663205][T12653] gretap3: entered promiscuous mode [ 232.668422][T12653] gretap3: entered allmulticast mode [ 232.807669][T12662] xfrm1: entered promiscuous mode [ 232.817157][T12662] xfrm1: entered allmulticast mode [ 232.859346][T12664] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 232.869544][T12669] xfrm1: entered allmulticast mode [ 232.877485][T12664] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.041559][T12671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.055034][T12682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.080124][T12687] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.258483][T12702] vlan2: entered promiscuous mode [ 233.263997][T12702] gretap0: entered promiscuous mode [ 233.375621][T12709] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 233.455635][T12713] netlink: 'syz.0.1881': attribute type 11 has an invalid length. [ 233.644084][T12719] nbd: must specify at least one socket [ 233.727406][T12724] syzkaller0: create flow: hash 2003758925 index 1 [ 233.901130][T12723] syzkaller0: delete flow: hash 2003758925 index 1 [ 234.201852][T12739] netlink: 'syz.1.1886': attribute type 33 has an invalid length. [ 235.015822][ T1109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.687641][T12769] __nla_validate_parse: 18 callbacks suppressed [ 235.687659][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1896'. [ 236.303785][T12793] syzkaller1: entered promiscuous mode [ 236.309289][T12793] syzkaller1: entered allmulticast mode [ 236.317455][T12793] veth0: entered promiscuous mode [ 236.486173][T12792] veth0: left promiscuous mode [ 236.527822][T12800] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 236.560351][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 236.613206][T12804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.661814][T12804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.706980][T12806] sctp: [Deprecated]: syz.5.1907 (pid 12806) Use of int in max_burst socket option deprecated. [ 236.706980][T12806] Use struct sctp_assoc_value instead [ 237.049278][T12819] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1910'. [ 237.073883][T12819] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1910'. [ 237.093307][T12819] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1910'. [ 237.146925][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 237.291563][T12831] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 237.640712][T12853] netlink: 'syz.5.1921': attribute type 11 has an invalid length. [ 237.659071][T12853] netlink: 'syz.5.1921': attribute type 11 has an invalid length. [ 237.672224][T12853] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1921'. [ 237.687109][T12854] netlink: 'syz.5.1921': attribute type 11 has an invalid length. [ 237.696081][T12854] netlink: 'syz.5.1921': attribute type 11 has an invalid length. [ 237.714407][T12854] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1921'. [ 237.743881][T12860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.765732][T12858] tipc: Enabling of bearer rejected, already enabled [ 237.778688][T12858] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 237.795751][T12863] openvswitch: netlink: Missing valid actions attribute. [ 237.804845][T12858] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 237.813024][T12863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.076488][T12878] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1930'. [ 238.097600][T12880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1931'. [ 238.111916][T12880] netlink: 'syz.2.1931': attribute type 7 has an invalid length. [ 238.148853][T12880] netlink: 'syz.2.1931': attribute type 8 has an invalid length. [ 238.168317][T12880] gretap0: entered promiscuous mode [ 238.203087][T12880] batadv_slave_1: entered promiscuous mode [ 238.217240][T12880] batadv_slave_1: left promiscuous mode [ 238.224040][T12880] gretap0: left promiscuous mode [ 238.382140][T12897] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !d4QN寿$ULvDUDw [ 238.526028][T12900] IPVS: persistence engine module ip_vs_pe_ not found [ 238.575013][T12900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.639172][T12917] erspan0: entered promiscuous mode [ 238.649673][T12917] erspan0: entered allmulticast mode [ 238.826159][T12922] gretap0: MTU too low for tipc bearer [ 238.843751][T12922] tipc: Disabling bearer [ 239.908368][T12962] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20000 [ 239.970932][T12968] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.247912][T12978] team0: Port device dummy0 removed [ 240.313313][T12985] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 240.421860][T12994] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 240.440841][T12994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.529197][T13001] : entered promiscuous mode [ 241.218737][T13003] bridge0: port 1(syz_tun) entered disabled state [ 241.557534][T13003] tipc: Resetting bearer [ 241.639190][T11029] lo speed is unknown, defaulting to 1000 [ 241.651544][T11029] syz2: Port: 1 Link DOWN [ 241.674698][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.727832][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.813113][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.845920][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.958671][T13049] __nla_validate_parse: 9 callbacks suppressed [ 241.958690][T13049] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1976'. [ 242.010360][T13049] xt_policy: neither incoming nor outgoing policy selected [ 242.191744][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1981'. [ 242.356103][T13083] netlink: 'syz.0.1984': attribute type 29 has an invalid length. [ 242.396920][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 242.581809][T13098] netlink: 'syz.1.1991': attribute type 4 has an invalid length. [ 242.642531][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 242.746776][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 242.816342][T13113] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 243.237946][T13143] netlink: 'syz.1.2000': attribute type 3 has an invalid length. [ 243.271362][T13143] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2000'. [ 243.297613][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 243.445785][T13149] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2003'. [ 243.635966][T13167] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 243.665799][T13169] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 243.962095][T13190] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.989720][T13195] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2016'. [ 244.125267][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 244.197929][T13206] netem: invalid attributes len -24 [ 244.205204][T13206] netem: change failed [ 244.326622][T13218] netlink: 'syz.5.2023': attribute type 1 has an invalid length. [ 244.629175][T13237] tipc: Enabled bearer , priority 0 [ 244.637593][T13237] syzkaller0: entered promiscuous mode [ 244.643474][T13237] syzkaller0: entered allmulticast mode [ 244.684617][T13235] tipc: Resetting bearer [ 244.747322][T13235] tipc: Disabling bearer [ 245.070329][T13263] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 245.191787][T13273] dvmrp0: entered allmulticast mode [ 245.404574][T13287] tipc: Enabling of bearer rejected, already enabled [ 245.794839][T13305] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 245.955035][T13305] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 246.764011][T13329] lo speed is unknown, defaulting to 1000 [ 246.841633][T13353] team0: Device gtp0 is of different type [ 246.931728][T13364] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 247.067519][T13361] syzkaller1: entered promiscuous mode [ 247.073742][T13361] syzkaller1: entered allmulticast mode [ 247.458176][T13382] __nla_validate_parse: 10 callbacks suppressed [ 247.458195][T13382] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2070'. [ 247.605082][T13392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.609356][T13394] netlink: 'syz.4.2075': attribute type 8 has an invalid length. [ 247.821990][T13403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.089256][T13420] netlink: 'syz.4.2086': attribute type 83 has an invalid length. [ 248.101829][T13426] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 248.110737][T13426] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 248.262367][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2091'. [ 248.276563][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 248.398764][T13446] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2095'. [ 248.479138][T13455] 8021q: VLANs not supported on lo [ 248.799331][T13464] openvswitch: netlink: IP tunnel dst address not specified [ 248.880413][T13450] lo speed is unknown, defaulting to 1000 [ 249.026812][T13480] netlink: 'syz.0.2101': attribute type 2 has an invalid length. [ 249.252158][T13489] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2105'. [ 249.861921][T13517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.882215][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2115'. [ 249.962492][T13517] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.981625][T13517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.137215][T13539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 250.163552][T13541] netlink: 'syz.5.2122': attribute type 10 has an invalid length. [ 250.197341][T13541] veth1_macvtap: left promiscuous mode [ 250.198128][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 250.216981][T13541] team0: Device veth1_macvtap failed to register rx_handler [ 250.250517][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 250.267329][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'. [ 250.380776][T13555] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2124'. [ 250.426630][T13559] netlink: 'syz.2.2125': attribute type 5 has an invalid length. [ 250.851254][T13590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.768487][T13660] netlink: 'syz.1.2155': attribute type 13 has an invalid length. [ 251.777449][T13660] netlink: 'syz.1.2155': attribute type 13 has an invalid length. [ 251.883142][T13665] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 251.901951][T13667] team0: No ports can be present during mode change [ 252.855591][T13712] netlink: 'syz.0.2172': attribute type 39 has an invalid length. [ 252.906812][T13714] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 252.919459][T11029] IPVS: starting estimator thread 0... [ 252.970613][T13717] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 252.990703][T13717] __nla_validate_parse: 15 callbacks suppressed [ 252.990719][T13717] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2174'. [ 253.032796][T13716] IPVS: using max 28 ests per chain, 67200 per kthread [ 253.040374][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 253.360245][T13733] team0: Device gtp1 is of different type [ 253.738331][T13752] sit1: entered promiscuous mode [ 253.747681][T13752] sit1: entered allmulticast mode [ 254.031389][T13765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 254.149140][T13742] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.454278][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 254.457698][T13798] batadv_slave_0: entered promiscuous mode [ 254.489574][T13795] geneve3: entered promiscuous mode [ 254.623626][T13796] batadv_slave_0: left promiscuous mode [ 254.707382][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.757228][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.774792][ T30] audit: type=1107 audit(1757842426.668:4): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 254.779063][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.876766][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.924532][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.965773][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.997811][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.028646][T13826] siw: device registration error -23 [ 255.177637][T13847] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2212'. [ 255.257294][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 255.390688][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 255.416106][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 255.459957][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2220'. [ 255.527607][T13868] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 255.539239][T13868] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 255.566742][T13872] sctp: [Deprecated]: syz.1.2224 (pid 13872) Use of int in maxseg socket option. [ 255.566742][T13872] Use struct sctp_assoc_value instead [ 255.622522][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640195][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.057360][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2233'. [ 256.238952][T13918] netlink: 'syz.4.2237': attribute type 4 has an invalid length. [ 256.401935][T13929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.517236][T13937] nbd: must specify a size in bytes for the device [ 256.613694][T13946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2246'. [ 256.838593][T13946] netlink: 'syz.1.2246': attribute type 33 has an invalid length. [ 256.844146][T13966] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.915093][T13946] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 257.201930][T13988] netlink: 'syz.1.2257': attribute type 30 has an invalid length. [ 257.239978][T13994] xfrm2: entered promiscuous mode [ 257.265095][T13994] xfrm2: entered allmulticast mode [ 258.140391][T14056] sctp: [Deprecated]: syz.5.2269 (pid 14056) Use of int in max_burst socket option. [ 258.140391][T14056] Use struct sctp_assoc_value instead [ 258.212740][T14058] sctp: [Deprecated]: syz.5.2269 (pid 14058) Use of int in max_burst socket option. [ 258.212740][T14058] Use struct sctp_assoc_value instead [ 258.536436][T14077] __nla_validate_parse: 4 callbacks suppressed [ 258.536454][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2273'. [ 258.557021][T14077] 8021q: VLANs not supported on vcan0 [ 258.792338][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 258.818831][T14083] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2275'. [ 258.828799][T14083] netlink: zone id is out of range [ 258.834048][T14083] netlink: zone id is out of range [ 258.839158][T14083] netlink: zone id is out of range [ 258.844348][T14083] netlink: get zone limit has 8 unknown bytes [ 259.052054][T14092] netlink: 'syz.2.2277': attribute type 2 has an invalid length. [ 259.085062][T14094] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 259.170190][T14097] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.183833][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2281'. [ 259.193250][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2281'. [ 259.333177][T14110] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 259.353896][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 259.458444][T14125] netlink: 'syz.5.2289': attribute type 10 has an invalid length. [ 259.471238][T14125] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 259.472364][T14123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.480475][T14047] netdevsim netdevsim5 : set [1, 0] type 2 family 0 port 6081 - 0 [ 259.518394][T14047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.567909][T14047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.587878][T14047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.597402][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 259.644757][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2292'. [ 259.668528][T14134] netlink: 'syz.5.2292': attribute type 27 has an invalid length. [ 259.694929][T14138] nbd: must specify a size in bytes for the device [ 259.705988][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 259.717478][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2290'. [ 259.750455][T14140] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 259.759401][T14140] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 259.956158][T14025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.968642][T14025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.104174][T14164] netlink: 'syz.5.2302': attribute type 11 has an invalid length. [ 260.119590][T14164] IPVS: set_ctl: invalid protocol: 58 172.30.0.6:20004 [ 260.618444][T14205] tipc: New replicast peer: 172.20.20.49 [ 260.800606][T14215] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 261.126411][T14242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.615677][T14254] lo speed is unknown, defaulting to 1000 [ 262.082547][T14291] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 262.249825][T14255] lo speed is unknown, defaulting to 1000 [ 262.758367][T14322] syzkaller0: entered promiscuous mode [ 262.769063][T14322] syzkaller0: entered allmulticast mode [ 263.296869][T14327] sctp: [Deprecated]: syz.2.2348 (pid 14327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.296869][T14327] Use struct sctp_sack_info instead [ 264.285527][T14337] tipc: Enabling of bearer rejected, failed to enable media [ 264.300069][T14289] lo speed is unknown, defaulting to 1000 [ 264.419837][T14342] __nla_validate_parse: 22 callbacks suppressed [ 264.419854][T14342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2352'. [ 264.425164][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2353'. [ 264.559459][T14345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.571202][T14348] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 264.741081][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2356'. [ 264.744660][T14362] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2359'. [ 264.761864][T14362] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2359'. [ 264.766412][T14358] netlink: 'syz.2.2358': attribute type 29 has an invalid length. [ 264.787120][T14363] netlink: 'syz.2.2358': attribute type 29 has an invalid length. [ 264.838043][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2356'. [ 265.076349][T14372] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2362'. [ 265.143897][T14372] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 265.227590][T14372] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 265.370001][T14383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2365'. [ 265.716828][T14396] "syz.5.2369" (14396) uses obsolete ecb(arc4) skcipher [ 265.821503][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2372'. [ 266.115954][T14037] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 266.506912][T14437] dvmrp0: entered allmulticast mode [ 266.762281][T14459] tipc: Enabling of bearer rejected, already enabled [ 266.767838][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 266.817541][T14459] tipc: Resetting bearer [ 267.217316][T14488] nbd: couldn't find a device at index -373156329 [ 267.314033][T14488] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 267.389714][T14488] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.491586][T14025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.662340][T14512] tipc: Enabling of bearer rejected, already enabled [ 267.951203][T14520] wg1: entered allmulticast mode [ 267.991367][T14528] netlink: 'syz.0.2410': attribute type 12 has an invalid length. [ 268.139352][T14533] bridge_slave_0: left allmulticast mode [ 268.145423][T14533] bridge_slave_0: left promiscuous mode [ 268.151200][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.181874][T14533] bridge_slave_1: left allmulticast mode [ 268.209083][T14533] bridge_slave_1: left promiscuous mode [ 268.224314][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.231832][T14540] netlink: 'syz.5.2415': attribute type 5 has an invalid length. [ 268.247858][T14533] bond0: (slave bond_slave_0): Releasing backup interface [ 268.258187][T14533] bond0: (slave bond_slave_1): Releasing backup interface [ 268.274058][T14533] team0: Port device team_slave_0 removed [ 268.283703][T14533] team0: Port device team_slave_1 removed [ 268.297227][T14533] bond2: (slave wireguard0): Releasing backup interface [ 268.312938][T14533] wireguard0: left promiscuous mode [ 268.330382][T14533] bond3: (slave bridge3): Releasing active interface [ 268.768686][T14563] netlink: 'syz.2.2422': attribute type 4 has an invalid length. [ 269.129854][T14037] tipc: Subscription rejected, illegal request [ 269.632470][T14622] __nla_validate_parse: 8 callbacks suppressed [ 269.632490][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'. [ 269.659141][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 269.683503][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 270.088354][T14631] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.749888][T14652] C: renamed from team_slave_0 [ 270.756119][T14653] netlink: 'syz.1.2453': attribute type 2 has an invalid length. [ 270.768757][T14652] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 270.813160][T14652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.169951][T14673] veth1_to_team: mtu less than device minimum [ 271.223664][T14675] sctp: [Deprecated]: syz.5.2460 (pid 14675) Use of int in maxseg socket option. [ 271.223664][T14675] Use struct sctp_assoc_value instead [ 271.366945][T14682] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:12 [ 271.676982][T14698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.696261][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2466'. [ 271.797886][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 272.090523][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2469'. [ 272.096275][T14668] lo speed is unknown, defaulting to 1000 [ 272.571195][T14733] team0: Device vti0 is of different type [ 272.854826][T14743] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 272.870277][T14743] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 272.926592][T14743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.011136][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2485'. [ 273.110274][T14758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2484'. [ 273.170213][T14758] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2484'. [ 273.216883][T14758] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 273.624353][T14796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2496'. [ 273.796957][T14799] syzkaller1: entered promiscuous mode [ 273.802478][T14799] syzkaller1: entered allmulticast mode [ 274.151057][T14827] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 274.301950][T14838] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 274.353957][T14838] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 274.399124][T14844] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 274.463541][T14854] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 275.084453][T14878] __nla_validate_parse: 7 callbacks suppressed [ 275.084472][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 275.162154][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 275.329456][T14834] lo speed is unknown, defaulting to 1000 [ 275.411777][T14891] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2525'. [ 275.484468][T14893] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 275.660257][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 275.698971][T14903] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.768723][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 275.777867][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2528'. [ 275.803566][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 275.812622][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2528'. [ 275.935721][T14914] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2531'. [ 276.299720][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 276.886203][T14950] tipc: Resetting bearer [ 276.935977][T14937] lo speed is unknown, defaulting to 1000 [ 277.213890][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 277.261892][T14975] wg1: entered promiscuous mode [ 277.270606][T14975] wg1: entered allmulticast mode [ 277.492292][T14992] xt_limit: Overflow, try lower: 271964/0 [ 277.616193][T14995] netlink: 'syz.5.2555': attribute type 33 has an invalid length. [ 277.815875][T15004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.420690][T15046] can: request_module (can-proto-0) failed. [ 278.595268][T15058] IPVS: stopping backup sync thread 6658 ... [ 278.727705][T15066] netlink: 'syz.0.2578': attribute type 4 has an invalid length. [ 278.794504][T15066] netlink: 'syz.0.2578': attribute type 4 has an invalid length. [ 279.160841][T15087] syzkaller1: entered promiscuous mode [ 279.166556][T15087] syzkaller1: entered allmulticast mode [ 279.398396][T15100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.761926][T15125] netlink: 'syz.0.2600': attribute type 1 has an invalid length. [ 279.857195][T15125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.875057][T15125] bond7: (slave bond8): making interface the new active one [ 279.886538][T15125] bond7: (slave bond8): Enslaving as an active interface with an up link [ 279.896512][T15137] bond7: entered promiscuous mode [ 279.910314][T15137] bond8: entered promiscuous mode [ 279.938042][T15137] bond7: entered allmulticast mode [ 279.943218][T15137] bond8: entered allmulticast mode [ 279.949837][T15137] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.130988][T15158] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 280.157268][T15153] IPVS: Error connecting to the multicast addr [ 280.282017][T15153] __nla_validate_parse: 12 callbacks suppressed [ 280.282036][T15153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2606'. [ 280.555012][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 280.596950][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 280.636534][T15199] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 280.668911][T15193] geneve3: entered promiscuous mode [ 280.683853][T15193] geneve3: entered allmulticast mode [ 280.691148][T14045] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.703991][T14045] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.720093][T14045] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.729527][T14045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.772129][T15201] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2621'. [ 280.889285][T15208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.184989][T15228] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2629'. [ 281.265480][T15238] netlink: 'syz.5.2632': attribute type 1 has an invalid length. [ 281.282198][T15238] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2632'. [ 281.302474][T15238] siw: device registration error -23 [ 281.412566][T15258] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 281.436338][T15258] netlink: 'syz.1.2635': attribute type 2 has an invalid length. [ 282.426453][T15276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'. [ 282.464020][T15276] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2639'. [ 282.693302][T15301] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 282.956243][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 283.013753][T15324] pimreg: entered allmulticast mode [ 283.020142][T15325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2650'. [ 283.124721][T15329] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 283.175442][T15333] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 283.219146][T15334] netlink: 'syz.1.2655': attribute type 5 has an invalid length. [ 283.310708][T15341] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 283.379901][T15347] netlink: 'syz.0.2660': attribute type 3 has an invalid length. [ 283.534535][T15358] netlink: 'syz.1.2663': attribute type 6 has an invalid length. [ 283.547970][T15360] netlink: 'syz.1.2663': attribute type 6 has an invalid length. [ 283.678171][T15364] netlink: 'syz.2.2664': attribute type 4 has an invalid length. [ 283.751296][T15369] 8021q: VLANs not supported on ip6_vti0 [ 284.379939][T15389] tipc: Enabled bearer , priority 0 [ 284.389121][T15393] syzkaller0: entered promiscuous mode [ 284.394855][T15393] syzkaller0: entered allmulticast mode [ 284.452300][T15402] tipc: Resetting bearer [ 284.469012][T15404] tipc: Resetting bearer [ 284.549379][T15383] tipc: Resetting bearer [ 284.627039][T15383] tipc: Disabling bearer [ 284.775372][T15432] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 284.946683][T15443] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 285.313866][T15475] netlink: 'syz.0.2696': attribute type 7 has an invalid length. [ 285.516542][T15484] __nla_validate_parse: 6 callbacks suppressed [ 285.516561][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 285.586029][T15489] gre0: entered promiscuous mode [ 285.757763][T15500] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2705'. [ 285.811193][T15503] tipc: Enabled bearer , priority 0 [ 285.833971][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 285.854350][T15502] tipc: Disabling bearer [ 285.939143][T15506] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 285.973459][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 285.985203][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'. [ 286.100843][ T3481] syzkaller0: tun_net_xmit 76 [ 286.120720][ T3481] syzkaller0: tun_net_xmit 48 [ 286.126425][T11029] syzkaller0: tun_net_xmit 76 [ 286.132568][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2709'. [ 287.760274][T15539] netlink: 'syz.2.2713': attribute type 12 has an invalid length. [ 288.226649][T15576] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2724'. [ 288.284533][T15577] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 288.302177][T15577] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 288.333407][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 288.356543][T15581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2726'. [ 288.385984][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2728'. [ 288.395304][T15581] netlink: 'syz.2.2726': attribute type 7 has an invalid length. [ 288.411755][T15581] netlink: 'syz.2.2726': attribute type 8 has an invalid length. [ 288.446092][T15588] netlink: 'syz.2.2726': attribute type 7 has an invalid length. [ 288.456023][T15588] netlink: 'syz.2.2726': attribute type 8 has an invalid length. [ 288.465196][T15585] netlink: 'syz.5.2728': attribute type 1 has an invalid length. [ 288.556893][T15590] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 288.611757][T15590] gretap1: entered promiscuous mode [ 288.620952][T15590] bond6: (slave gretap1): making interface the new active one [ 288.629717][T15590] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 288.647001][T15590] macvlan2: entered promiscuous mode [ 288.652305][T15590] macvlan2: entered allmulticast mode [ 288.659099][T15590] bond6: entered promiscuous mode [ 288.670679][T15590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.684072][T15590] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 288.700969][T15590] bond6: left promiscuous mode [ 289.240047][T15638] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 290.570500][T15697] __nla_validate_parse: 5 callbacks suppressed [ 290.570518][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 290.608086][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 290.929119][T15722] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.2770'. [ 290.949769][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2771'. [ 291.003101][T15722] openvswitch: netlink: Message has 5 unknown bytes. [ 291.133325][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 291.146434][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2777'. [ 291.182326][T15741] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2773'. [ 291.989473][T15754] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 292.018019][T15765] geneve1: entered promiscuous mode [ 292.028071][T15765] geneve1: entered allmulticast mode [ 292.236673][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2788'. [ 292.368117][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 292.380957][T15784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2789'. [ 292.635159][T15795] hsr_slave_0: left promiscuous mode [ 292.641677][T15795] hsr_slave_1: left promiscuous mode [ 292.760767][T15759] lo speed is unknown, defaulting to 1000 [ 292.788993][T14025] smc: removing ib device syz0 [ 293.938464][T15822] netlink: 'syz.5.2800': attribute type 21 has an invalid length. [ 294.394389][T15826] siw: device registration error -23 [ 296.204748][T15868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.271127][T15868] __nla_validate_parse: 9 callbacks suppressed [ 296.271145][T15868] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2815'. [ 296.561541][T15887] ip6gre1: entered allmulticast mode [ 296.586048][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 297.020564][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2823'. [ 297.198044][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'. [ 297.228954][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 297.284861][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'. [ 297.295263][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 297.352567][T15911] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 297.526130][T15925] ipvlan3: entered promiscuous mode [ 297.766823][T15934] bond0: entered promiscuous mode [ 297.773456][T15934] batadv0: entered promiscuous mode [ 297.779664][T15934] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 297.821251][T15934] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 297.863275][T15934] hsr1: entered allmulticast mode [ 297.868413][T15934] bond0: entered allmulticast mode [ 297.882780][T15934] batadv0: entered allmulticast mode [ 297.889452][T15934] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 298.146408][T15934] bond0: left promiscuous mode [ 298.152180][T15934] batadv0: left promiscuous mode [ 298.207539][T15943] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.286185][T15943] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.369933][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'. [ 298.406183][T15956] macsec3: entered promiscuous mode [ 298.411969][T15956] macsec3: entered allmulticast mode [ 298.419702][T15956] bridge0: entered allmulticast mode [ 298.430703][T15956] bridge0: port 2(macsec3) entered blocking state [ 298.441809][T15956] bridge0: port 2(macsec3) entered disabled state [ 298.478513][T15956] bridge0: left allmulticast mode [ 298.511170][T15943] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.535319][T15961] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 298.614699][T15943] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.737909][T14037] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.802322][T14037] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.829109][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 298.870220][T15973] vlan1: entered allmulticast mode [ 298.876202][T15973] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 298.888407][T14037] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.942602][T14037] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.980302][T15975] IPVS: set_ctl: invalid protocol: 137 172.20.20.18:20003 [ 299.277351][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 299.587389][T15995] syz.0.2848 (15995) used greatest stack depth: 17512 bytes left [ 299.739765][T16018] netlink: 'syz.0.2855': attribute type 33 has an invalid length. [ 299.787344][T16018] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 300.240455][T14040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.617127][T16051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.269026][T16074] lo speed is unknown, defaulting to 1000 [ 301.487287][T16083] __nla_validate_parse: 12 callbacks suppressed [ 301.487307][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2875'. [ 301.601614][T16085] netlink: 'syz.5.2878': attribute type 10 has an invalid length. [ 301.641949][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 301.652310][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'. [ 301.686954][T16087] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 301.712449][T16085] bridge_slave_1: left allmulticast mode [ 301.718515][T16085] bridge_slave_1: left promiscuous mode [ 301.732471][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.795547][T16085] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 301.817519][T16102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.826400][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2876'. [ 302.021793][T16110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.118772][T16115] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 302.167988][T16115] bond8: entered promiscuous mode [ 302.179543][T16115] bond8: entered allmulticast mode [ 302.188356][T16115] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.225579][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 302.627546][T16147] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 302.694444][T16152] openvswitch: netlink: Message has 4 unknown bytes. [ 302.771982][T16152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.845867][T16147] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.879239][T16157] bond9: (slave geneve4): making interface the new active one [ 302.888139][T16157] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 302.900252][T16162] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2899'. [ 302.997046][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 303.076765][T16171] bridge: RTM_NEWNEIGH with invalid ether address [ 303.110049][T16172] bridge: RTM_NEWNEIGH with invalid ether address [ 303.243388][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 303.606855][T16174] bridge0: port 1(syz_tun) entered blocking state [ 303.613465][T16174] bridge0: port 1(syz_tun) entered listening state [ 303.634330][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.667419][T16174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.727261][T11029] lo speed is unknown, defaulting to 1000 [ 303.753439][T11029] syz2: Port: 1 Link ACTIVE [ 304.095658][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.106795][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.116705][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.129236][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.140964][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.341126][T16204] lo speed is unknown, defaulting to 1000 [ 304.809642][T16226] netlink: 'syz.2.2917': attribute type 12 has an invalid length. [ 305.086310][T16237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.121967][T16204] chnl_net:caif_netlink_parms(): no params data found [ 305.540063][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.577307][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.587057][T16204] bridge_slave_0: entered allmulticast mode [ 305.602334][T16204] bridge_slave_0: entered promiscuous mode [ 305.626158][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.639377][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.649731][T16204] bridge_slave_1: entered allmulticast mode [ 305.662175][T16204] bridge_slave_1: entered promiscuous mode [ 305.796427][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'. [ 305.805534][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'. [ 305.822227][T16266] netlink: 'syz.0.2929': attribute type 3 has an invalid length. [ 305.874355][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.905271][T16274] tipc: Enabled bearer , priority 0 [ 305.919046][T16274] syzkaller0: entered promiscuous mode [ 305.928030][T16274] syzkaller0: entered allmulticast mode [ 305.966103][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.022560][T16286] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.086210][T16204] team0: Port device team_slave_0 added [ 306.135209][T16280] tipc: Resetting bearer [ 306.142104][T16274] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 306.143834][T16204] team0: Port device team_slave_1 added [ 306.175644][ T51] Bluetooth: hci2: command tx timeout [ 306.202990][T16280] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 306.336851][T16280] batadv0: entered promiscuous mode [ 306.342473][T16280] bridge0: port 2(batadv0) entered blocking state [ 306.357553][T16280] bridge0: port 2(batadv0) entered disabled state [ 306.433846][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.454219][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.522135][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.547674][T16309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.574429][T16273] tipc: Resetting bearer [ 306.598910][T14043] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 306.608361][T14043] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 306.623419][T16273] tipc: Disabling bearer [ 306.647816][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.658989][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.694559][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.754871][T16313] tipc: Enabled bearer , priority 0 [ 306.815326][ T3481] wlan1: Trigger new scan to find an IBSS to join [ 306.880626][T16306] syzkaller0: entered promiscuous mode [ 306.890042][T16306] syzkaller0: entered allmulticast mode [ 306.898599][T16306] tipc: Resetting bearer [ 306.930775][T16319] netlink: 'syz.1.2943': attribute type 10 has an invalid length. [ 306.939084][T16304] tipc: Resetting bearer [ 308.256542][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 308.637586][T16304] tipc: Disabling bearer [ 308.649654][T16204] hsr_slave_0: entered promiscuous mode [ 308.657796][T16204] hsr_slave_1: entered promiscuous mode [ 308.664231][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 308.670040][T16204] Cannot create hsr debugfs directory [ 308.801151][T16345] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 308.871421][T16345] bond7: entered promiscuous mode [ 308.880083][T16345] bond7: entered allmulticast mode [ 308.888903][T16345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.228346][T16204] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.282212][T16373] __nla_validate_parse: 3 callbacks suppressed [ 309.282230][T16373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 309.299171][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 309.308318][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 309.335486][T16204] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.357666][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2960'. [ 309.382564][T16380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2960'. [ 309.424480][T16204] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.473754][T16388] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2963'. [ 309.536398][T16204] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.595935][T16392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2964'. [ 309.610623][T16394] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2965'. [ 309.777282][T14030] wlan1: Trigger new scan to find an IBSS to join [ 309.907713][T16204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.933559][T16204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.968455][T16204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.984287][T16204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.205620][T16204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.257872][T16204] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.301494][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.308681][T14037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.328291][T16420] delete_channel: no stack [ 310.333120][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 310.351037][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.358204][T14037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.521696][T16431] netlink: 'syz.5.2978': attribute type 2 has an invalid length. [ 310.735562][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2984'. [ 310.751791][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2983'. [ 310.824360][T16451] openvswitch: netlink: Multiple metadata blocks provided [ 310.874977][T16445] vlan2: entered allmulticast mode [ 310.893407][T16445] bridge0: entered allmulticast mode [ 310.903827][T16445] bridge7: port 1(vlan2) entered blocking state [ 310.917676][T16445] bridge7: port 1(vlan2) entered disabled state [ 310.940990][T16445] vlan2: entered promiscuous mode [ 310.963075][T16445] bridge0: entered promiscuous mode [ 311.065735][T16204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.386599][T16484] bond6: entered allmulticast mode [ 311.398101][T16484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.409500][T16484] bridge0: port 2(bond6) entered blocking state [ 311.418380][T16484] bridge0: port 2(bond6) entered disabled state [ 311.430954][T16484] bond6: entered promiscuous mode [ 311.511249][T16494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.827198][T16511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.838622][T16511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.871299][T16511] bridge0: port 3(batadv0) entered disabled state [ 311.893225][T16514] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 311.916112][T16518] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 311.946480][T16517] geneve3: entered promiscuous mode [ 311.951707][T16517] geneve3: entered allmulticast mode [ 311.968875][T14025] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 311.977896][T14025] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 312.010092][T14025] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 312.028115][T16204] veth0_vlan: entered promiscuous mode [ 312.087643][T16204] veth1_vlan: entered promiscuous mode [ 312.160452][T16526] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 312.220812][T16526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.248874][T16204] veth0_macvtap: entered promiscuous mode [ 312.260261][T16204] veth1_macvtap: entered promiscuous mode [ 312.369913][T16204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.413553][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 312.446213][T16204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.490626][T14030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.537495][T14030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.603628][T14030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.620355][T14030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.695085][T16559] netlink: 'syz.5.3013': attribute type 23 has an invalid length. [ 312.733166][T14047] wlan1: Trigger new scan to find an IBSS to join [ 312.858772][T14037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.878470][T14037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.964843][T16571] NCSI netlink: No device for ifindex 0 [ 312.980788][T14037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.994700][T14037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.067976][T16582] netlink: 'syz.1.3021': attribute type 21 has an invalid length. [ 313.085080][T16582] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 313.484320][T16603] xt_policy: too many policy elements [ 313.506423][T16605] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 313.575169][ T5980] IPVS: starting estimator thread 0... [ 313.660593][T14037] wlan1: Creating new IBSS network, BSSID 3a:80:33:0b:19:f4 [ 313.668410][T16608] IPVS: using max 30 ests per chain, 72000 per kthread [ 314.113986][ T5865] bridge0: port 2(syz_tun) entered disabled state [ 314.130811][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.145777][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.158694][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.169320][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.177404][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.211763][ T5865] syz_tun (unregistering): left allmulticast mode [ 314.229723][ T5865] syz_tun (unregistering): left promiscuous mode [ 314.236791][ T5865] bridge0: port 2(syz_tun) entered disabled state [ 314.324895][T16635] __nla_validate_parse: 14 callbacks suppressed [ 314.324915][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3036'. [ 314.380170][T14025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.397235][T14025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.408857][T14025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.421482][T16635] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 314.503817][ T5877] Bluetooth: hci2: command 0x041b tx timeout [ 314.538849][T14025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.575294][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3038'. [ 314.577614][T14025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.595798][T14025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.615490][T16640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.615859][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3038'. [ 314.625878][T16626] lo speed is unknown, defaulting to 1000 [ 314.715182][T16648] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3042'. [ 314.727189][T14025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.741206][T14025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.752324][T14025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.837795][T16641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.849578][T16641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.960444][T16641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.973676][T16641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.044683][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 315.070959][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 315.108417][T16653] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3043'. [ 315.151388][T16641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.162623][T16641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.168082][T16665] netlink: 'syz.4.3046': attribute type 4 has an invalid length. [ 315.188967][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 315.319603][T16641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.374107][T16641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.426772][T16679] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 315.635522][T14025] bridge_slave_0: left allmulticast mode [ 315.641634][T14025] bridge_slave_0: left promiscuous mode [ 315.648888][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.102115][T14025] bond1 (unregistering): (slave geneve2): Releasing active interface [ 316.156305][T14025] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 316.253006][ T5877] Bluetooth: hci0: command tx timeout [ 316.573059][ T5877] Bluetooth: hci2: command 0x041b tx timeout [ 316.716753][T14025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.727746][T14025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.739522][T14025] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 316.749269][T14025] bond0 (unregistering): Released all slaves [ 316.845717][T14025] bond1 (unregistering): Released all slaves [ 316.860165][T14025] bond2 (unregistering): Released all slaves [ 316.872417][T14025] bond3 (unregistering): Released all slaves [ 316.971464][T14025] bond4 (unregistering): Released all slaves [ 317.058820][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066026][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.083082][T14025] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 317.093765][T14025] bond5 (unregistering): Released all slaves [ 317.190018][T14025] bond6 (unregistering): Released all slaves [ 317.284268][T14025] bond7 (unregistering): (slave bond8): Releasing backup interface [ 317.292197][T14025] bond8 (unregistering): left promiscuous mode [ 317.299098][T14025] bond8 (unregistering): left allmulticast mode [ 317.306226][T14025] bond7 (unregistering): Released all slaves [ 317.403857][T14025] bond8 (unregistering): Released all slaves [ 317.499645][T14025] bond9 (unregistering): Released all slaves [ 317.529504][T14030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.537893][T14030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.550099][T16703] tipc: Enabling of bearer rejected, failed to enable media [ 317.579087][T16626] chnl_net:caif_netlink_parms(): no params data found [ 317.682192][T14037] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.703035][T14037] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.735775][T14025] tipc: Disabling bearer [ 317.741021][T14025] tipc: Left network mode [ 317.919009][T14047] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.938762][T14047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.970788][T16709] lo speed is unknown, defaulting to 1000 [ 318.041928][T14043] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.068592][T14043] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.106077][T16719] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 318.116386][T16719] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 318.190389][T16626] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.204325][T16728] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3061'. [ 318.216449][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.224049][T16626] bridge_slave_0: entered allmulticast mode [ 318.231685][T16626] bridge_slave_0: entered promiscuous mode [ 318.284737][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.295633][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.303318][T16626] bridge_slave_1: entered allmulticast mode [ 318.311142][T16626] bridge_slave_1: entered promiscuous mode [ 318.334150][ T5877] Bluetooth: hci0: command tx timeout [ 318.471325][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.486856][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.532388][T16742] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 318.542394][T16742] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 318.576098][T16626] team0: Port device team_slave_0 added [ 318.616047][T16626] team0: Port device team_slave_1 added [ 318.655004][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.661999][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.688673][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.707604][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.714842][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.742106][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.840204][T14025] hsr_slave_0: left promiscuous mode [ 318.846531][T14025] hsr_slave_1: left promiscuous mode [ 318.974218][ C0] bridge0: port 1(syz_tun) entered learning state [ 319.316253][T14025] team0 (unregistering): Port device team_slave_1 removed [ 319.399573][T14025] team0 (unregistering): Port device C removed [ 319.802298][T16626] hsr_slave_0: entered promiscuous mode [ 319.809125][T16626] hsr_slave_1: entered promiscuous mode [ 319.831145][T16753] tipc: Enabled bearer , priority 0 [ 319.860794][T16759] syzkaller0: entered promiscuous mode [ 319.873353][T16759] syzkaller0: entered allmulticast mode [ 319.897183][T16775] tipc: Resetting bearer [ 319.906604][T16779] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 319.961367][T16751] tipc: Resetting bearer [ 319.986417][T16751] tipc: Disabling bearer [ 320.032121][T16779] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.144371][T16790] netlink: 'syz.4.3073': attribute type 10 has an invalid length. [ 320.413530][ T5877] Bluetooth: hci0: command tx timeout [ 320.829329][T16626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.850099][T16626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.875640][T16626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.937268][T16626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.102129][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 321.130683][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 321.160701][T16626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.225668][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.278728][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.285908][T14047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.336420][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.343663][T14047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.590483][T16864] netlink: 'syz.5.3096': attribute type 1 has an invalid length. [ 321.669425][T16864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.761602][T14025] IPVS: stop unused estimator thread 0... [ 321.818384][T14025] ------------[ cut here ]------------ [ 321.824318][T14025] WARNING: CPU: 0 PID: 14025 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 321.834132][T14025] Modules linked in: [ 321.838224][T14025] CPU: 0 UID: 0 PID: 14025 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 321.848421][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.858703][T14025] Workqueue: netns cleanup_net [ 321.864804][T14025] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 321.870369][T14025] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 ec c6 ff 48 83 3b 00 75 0c e8 25 7a 63 ff 5b e9 3f d7 20 09 cc e8 19 7a 63 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 321.890442][T14025] RSP: 0018:ffffc90003d3f8d0 EFLAGS: 00010293 [ 321.896587][T14025] RAX: ffffffff825c44e7 RBX: ffff888033a282e0 RCX: ffff888025753c00 [ 321.904920][T14025] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888033a28280 [ 321.913223][T14025] RBP: ffffc90003d3f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6 [ 321.921208][T14025] R10: dffffc0000000000 R11: ffffffff8b368070 R12: ffffffff8f837d80 [ 321.929258][T14025] R13: 1ffff920007a7f40 R14: ffffffff8f837d60 R15: ffff888033a280a8 [ 321.937395][T14025] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 321.946665][T14025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.953671][T14025] CR2: 000000110c2e94da CR3: 0000000030400000 CR4: 00000000003526f0 [ 321.961681][T14025] Call Trace: [ 321.965221][T14025] [ 321.968158][T14025] ops_undo_list+0x49a/0x990 [ 321.973054][T14025] ? __pfx_ops_undo_list+0x10/0x10 [ 321.978188][T14025] ? do_raw_spin_unlock+0x122/0x240 [ 321.983463][T14025] cleanup_net+0x4c5/0x800 [ 321.987894][T14025] ? __pfx_cleanup_net+0x10/0x10 [ 321.992874][T14025] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.998093][T14025] ? process_scheduled_works+0x9ef/0x17b0 [ 322.004312][T14025] ? process_scheduled_works+0x9ef/0x17b0 [ 322.010029][T14025] process_scheduled_works+0xae1/0x17b0 [ 322.015722][T14025] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.021721][T14025] worker_thread+0x8a0/0xda0 [ 322.026365][T14025] kthread+0x70e/0x8a0 [ 322.030430][T14025] ? __pfx_worker_thread+0x10/0x10 [ 322.035706][T14025] ? __pfx_kthread+0x10/0x10 [ 322.040293][T14025] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.045581][T14025] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.050972][T14025] ? __pfx_kthread+0x10/0x10 [ 322.055893][T14025] ret_from_fork+0x436/0x7d0 [ 322.060498][T14025] ? __pfx_ret_from_fork+0x10/0x10 [ 322.065841][T14025] ? __switch_to_asm+0x39/0x70 [ 322.070601][T14025] ? __switch_to_asm+0x33/0x70 [ 322.075416][T14025] ? __pfx_kthread+0x10/0x10 [ 322.080050][T14025] ret_from_fork_asm+0x1a/0x30 [ 322.085213][T14025] [ 322.088581][T14025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.095852][T14025] CPU: 0 UID: 0 PID: 14025 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 322.105482][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.115524][T14025] Workqueue: netns cleanup_net [ 322.120279][T14025] Call Trace: [ 322.123545][T14025] [ 322.126645][T14025] dump_stack_lvl+0x99/0x250 [ 322.131231][T14025] ? __asan_memcpy+0x40/0x70 [ 322.135807][T14025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.140990][T14025] ? __pfx__printk+0x10/0x10 [ 322.145592][T14025] vpanic+0x281/0x750 [ 322.149576][T14025] ? __pfx__printk+0x10/0x10 [ 322.154168][T14025] ? __pfx_vpanic+0x10/0x10 [ 322.158672][T14025] ? is_bpf_text_address+0x292/0x2b0 [ 322.163966][T14025] panic+0xb9/0xc0 [ 322.167693][T14025] ? __pfx_panic+0x10/0x10 [ 322.172120][T14025] __warn+0x31b/0x4b0 [ 322.176095][T14025] ? retire_sysctl_set+0x48/0x60 [ 322.181033][T14025] ? retire_sysctl_set+0x48/0x60 [ 322.185968][T14025] report_bug+0x2be/0x4f0 [ 322.190294][T14025] ? retire_sysctl_set+0x48/0x60 [ 322.195236][T14025] ? retire_sysctl_set+0x48/0x60 [ 322.200174][T14025] ? retire_sysctl_set+0x4a/0x60 [ 322.205108][T14025] handle_bug+0x84/0x160 [ 322.209346][T14025] exc_invalid_op+0x1a/0x50 [ 322.213843][T14025] asm_exc_invalid_op+0x1a/0x20 [ 322.218687][T14025] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 322.224224][T14025] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 ec c6 ff 48 83 3b 00 75 0c e8 25 7a 63 ff 5b e9 3f d7 20 09 cc e8 19 7a 63 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 322.243820][T14025] RSP: 0018:ffffc90003d3f8d0 EFLAGS: 00010293 [ 322.249884][T14025] RAX: ffffffff825c44e7 RBX: ffff888033a282e0 RCX: ffff888025753c00 [ 322.257851][T14025] RDX: 0000000000000000 RSI: ffffffff8dba91be RDI: ffff888033a28280 [ 322.265814][T14025] RBP: ffffc90003d3f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6 [ 322.273779][T14025] R10: dffffc0000000000 R11: ffffffff8b368070 R12: ffffffff8f837d80 [ 322.281744][T14025] R13: 1ffff920007a7f40 R14: ffffffff8f837d60 R15: ffff888033a280a8 [ 322.289715][T14025] ? __pfx_sysctl_net_exit+0x10/0x10 [ 322.295007][T14025] ? retire_sysctl_set+0x47/0x60 [ 322.299949][T14025] ops_undo_list+0x49a/0x990 [ 322.304539][T14025] ? __pfx_ops_undo_list+0x10/0x10 [ 322.309663][T14025] ? do_raw_spin_unlock+0x122/0x240 [ 322.314860][T14025] cleanup_net+0x4c5/0x800 [ 322.319271][T14025] ? __pfx_cleanup_net+0x10/0x10 [ 322.324204][T14025] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.329400][T14025] ? process_scheduled_works+0x9ef/0x17b0 [ 322.335109][T14025] ? process_scheduled_works+0x9ef/0x17b0 [ 322.340821][T14025] process_scheduled_works+0xae1/0x17b0 [ 322.346383][T14025] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.352372][T14025] worker_thread+0x8a0/0xda0 [ 322.356976][T14025] kthread+0x70e/0x8a0 [ 322.361045][T14025] ? __pfx_worker_thread+0x10/0x10 [ 322.366147][T14025] ? __pfx_kthread+0x10/0x10 [ 322.370737][T14025] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.375935][T14025] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.381123][T14025] ? __pfx_kthread+0x10/0x10 [ 322.385988][T14025] ret_from_fork+0x436/0x7d0 [ 322.390571][T14025] ? __pfx_ret_from_fork+0x10/0x10 [ 322.395680][T14025] ? __switch_to_asm+0x39/0x70 [ 322.400439][T14025] ? __switch_to_asm+0x33/0x70 [ 322.405198][T14025] ? __pfx_kthread+0x10/0x10 [ 322.409782][T14025] ret_from_fork_asm+0x1a/0x30 [ 322.414556][T14025] [ 322.417907][T14025] Kernel Offset: disabled [ 322.422237][T14025] Rebooting in 86400 seconds..